| Commit message (Collapse) | Author | Age |
|
|
|
|
|
|
|
|
|
|
|
|
| |
Security: this release adds support to defend against an email spoofing
attack (SMTP smuggling) on recipients at a Postfix server. For
background, see https://www.postfix.org/smtp-smuggling.html.
https://www.postfix.org/announcements/postfix-3.8.4.html
The source URL was modified to another mirror as the current CDN URL
failed to resolve for me from two different hosts.
(cherry picked from commit 5324b5601034d7d2090c4acdcddf1bdf08c25a73)
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
HEAD
|
|
|
|
| |
This will avoid future merge conflicts.
|
|
|
|
|
|
| |
Conflicts:
nixpkgs/pkgs/build-support/rust/build-rust-package/default.nix
nixpkgs/pkgs/top-level/perl-packages.nix
|
|
|
|
| |
HEAD
|
| |
|
|
|
|
|
| |
Conflicts:
nixpkgs/pkgs/servers/pr-tracker/default.nix
|
| |
|
|
|
|
|
| |
Conflicts:
nixpkgs/pkgs/build-support/rust/build-rust-package/default.nix
|
| |
|
| |
|
| |
|
|
|
|
|
| |
Conflicts:
nixpkgs/pkgs/build-support/rust/build-rust-package/default.nix
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
| |
Conflicts:
nixpkgs/pkgs/build-support/go/module.nix
|
|
|
|
| |
In Perl packages, buildInputs seems to be used for checkInputs.
|
|
|
|
|
|
|
|
|
|
|
| |
> File "/nix/store/4yshsw9xkwfw8ybn7xsr9kg2a5dynawd-python3-3.10.12-env/lib/python3.10/site-packages/authheaders/dmarc_lookup.py", line 22, in <module>
> from pkg_resources import resource_filename # Part of setuptools
This was previously propagated from gunicorn, but gunicorn no longer
depends on setuptools. Fixes the Mailman NixOS test.
Fixes: 2b8a7515d884 ("python3.pkgs.gunicorn: replace setuptools with packaging dependency")
(cherry picked from commit 542639f95a3646277beb848bb68aa91c30492c86)
|
|
|
|
|
|
| |
Conflicts:
nixpkgs/pkgs/build-support/go/module.nix
nixpkgs/pkgs/development/python-modules/django-mailman3/default.nix
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
Conflicts:
nixpkgs/pkgs/applications/window-managers/sway/default.nix
nixpkgs/pkgs/build-support/go/module.nix
nixpkgs/pkgs/build-support/rust/build-rust-package/default.nix
nixpkgs/pkgs/development/libraries/mesa/default.nix
nixpkgs/pkgs/servers/dict/dictd-db.nix
Link: https://gitlab.freedesktop.org/xkeyboard-config/xkeyboard-config/-/issues/391
|
|
|
|
|
|
| |
I sent an email contaning an em dash to a mailing list, and it didn't
get converted to base64, so I don't think this patch is required any
more.
|
|
|
|
|
| |
https://docs.mesa3d.org/relnotes/23.1.2.html#bug-fixes
(cherry picked from commit 2931f3b2f7d727e1e9657a63a3293b445b9aeba6)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Conflicts:
nixpkgs/nixos/modules/config/console.nix
nixpkgs/nixos/modules/services/mail/mailman.nix
nixpkgs/nixos/modules/services/mail/public-inbox.nix
nixpkgs/nixos/modules/services/mail/rss2email.nix
nixpkgs/nixos/modules/services/networking/ssh/sshd.nix
nixpkgs/pkgs/applications/networking/instant-messengers/dino/default.nix
nixpkgs/pkgs/applications/networking/irc/weechat/default.nix
nixpkgs/pkgs/applications/window-managers/sway/default.nix
nixpkgs/pkgs/build-support/go/module.nix
nixpkgs/pkgs/build-support/rust/build-rust-package/default.nix
nixpkgs/pkgs/development/interpreters/python/default.nix
nixpkgs/pkgs/development/node-packages/overrides.nix
nixpkgs/pkgs/development/tools/b4/default.nix
nixpkgs/pkgs/servers/dict/dictd-db.nix
nixpkgs/pkgs/servers/mail/public-inbox/default.nix
nixpkgs/pkgs/tools/security/pinentry/default.nix
nixpkgs/pkgs/tools/text/unoconv/default.nix
nixpkgs/pkgs/top-level/all-packages.nix
|
|
|
|
|
|
| |
This reverts commit e29dd58a0de91c3a3b6b5ebf1b2f02a648b4f9bf.
I don't use this, and it's not worth the merge conflicts.
|
| |
|
|
|
|
|
| |
I don't need to disable any Cairo features, and upstream is switching
to Meson, so won't be interested in these patches.
|
| |
|
|
|
|
| |
(cherry picked from commit 43465c94d4d30c5c977b78ae12f4e1a47a3760ea)
|
|
|
|
|
| |
Fixes: CVE-2023-28686
(cherry picked from commit 81192e2b927f13e8ec70c210682a545363a31e90)
|
|
|
|
| |
(cherry picked from commit bfc4a9d9d33d44f7d183553be8e1712917f1213b)
|
|
|
|
|
|
|
|
| |
On spectrum-os.org, mailman-web is run at /lists. With this change,
it's possible for us to switch from a custom uWSGI configuration to
the one now built in to the Mailman module.
(cherry picked from commit 1cdd9a3fe67b77a2cd23f4bc363cb019e966af71)
|
|
|
|
| |
Required for --tomp4.
|
|
|
|
| |
For shazam.
|
| |
|
| |
|
| |
|
|
|
|
| |
This can break DKIM.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
From hosts(5) (emphasis mine):
> For each host a *single* line should be present with the following
> information:
Prior to this change, my hosts file looked like this:
127.0.0.1 localhost
::1 localhost
127.0.0.2 atuin.qyliss.net atuin
::1 atuin.qyliss.net atuin
After this change, it looks like this:
127.0.0.1 localhost
::1 localhost atuin.qyliss.net atuin
127.0.0.2 atuin.qyliss.net atuin
Having multiple lines for the same IP breaks glibc's gethostbyaddr.
The easiest way to demonstrate this is with Python, but a simplified C
program is provided at the end of this message too.
$ python3 -c 'import socket; print(socket.gethostbyaddr("::1"))'
('localhost', [], ['::1'])
With this fix applied:
$ python3 -c 'import socket; print(socket.gethostbyaddr("::1"))'
('localhost', ['atuin.qyliss.net', 'atuin'], ['::1'])
As a higher level example, socket.getfqdn() will return 'localhost'
without this change, and 'atuin.qyliss.net' with it. This was
responsible for my Mailman instance sending mail with @localhost in
the Message-Id.
C program:
#include <err.h>
#include <netdb.h>
#include <sysexits.h>
#include <stdio.h>
int main(void)
{
struct in6_addr addr = { 0 };
addr.s6_addr[sizeof addr.s6_addr - 1] = 1; // ::1
struct hostent *host = gethostbyaddr(&addr, sizeof addr, AF_INET6);
if (!host)
err(EX_OSERR, "gethostbyaddr: %s", hstrerror(h_errno));
printf("name: %s\n", host->h_name);
size_t n;
for (n = 0; host->h_aliases[n]; n++);
printf("aliases (%zu):", n);
for (size_t i = 0; i < n; i++)
printf(" %s", host->h_aliases[i]);
printf("\n");
}
|
| |
|