Re: [Mailman-Users] Security update for 2.1.5
At 8:09 PM +1100 2005-03-22, Terry Allen wrote: I tried applying the security patch for 2.1.5 which is listed on the website - but got a number of errors - can anyone outline the procedure for implementing the patch please, whether it's by running the patch or replacing lines of code within certain files - any assistance would be appreciated. You need to use the program patch to apply the patch as provided. Note that Python is sensitive to indentation and the use of tab characters versus spaces, so you can't just cut-n-paste what you see. You either need to make sure that the indentation perfectly matches what is present in the files being modified, or you need to use the program patch to do that for you. If you have stored the security patch in a file called patchfile, and you have placed that file in the appropriate directory, it should be as simple as this: # patch patchfile And the program should be able to figure out the rest by reading the patchfile and applying that to the code in the appropriate places. For information, the system I am trying to update is OSX 10.3.8 with Mailman 2.1.5 the developers tools installed. Many thanks. At the command-line prompt, do man patch to see how this program works. -- Brad Knowles, [EMAIL PROTECTED] Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. -- Benjamin Franklin (1706-1790), reply of the Pennsylvania Assembly to the Governor, November 11, 1755 SAGE member since 1995. See http://www.sage.org/ for more info. -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Security update for 2.1.5
At 8:09 PM +1100 2005-03-22, Terry Allen wrote: I tried applying the security patch for 2.1.5 which is listed on the website - but got a number of errors - can anyone outline the procedure for implementing the patch please, whether it's by running the patch or replacing lines of code within certain files - any assistance would be appreciated. You need to use the program patch to apply the patch as provided. Note that Python is sensitive to indentation and the use of tab characters versus spaces, so you can't just cut-n-paste what you see. You either need to make sure that the indentation perfectly matches what is present in the files being modified, or you need to use the program patch to do that for you. If you have stored the security patch in a file called patchfile, and you have placed that file in the appropriate directory, it should be as simple as this: # patch patchfile And the program should be able to figure out the rest by reading the patchfile and applying that to the code in the appropriate places. For information, the system I am trying to update is OSX 10.3.8 with Mailman 2.1.5 the developers tools installed. Many thanks. At the command-line prompt, do man patch to see how this program works. Hi again, Thanks Brad - I should have outlined that I had already tried running patch on that .txt file - here's the problem I am getting: [server:mailman/mailman/cgi] root# patch CAN-2005-0202.txt patching file private.py Reversed (or previously applied) patch detected! Assume -R? [n] n Apply anyway? [n] y Hunk #1 FAILED at 1. 1 out of 2 hunks FAILED -- saving rejects to file private.py.rej [server:mailman/mailman/cgi] root# The output into the .rej file has only the comments at the start of private.py - I ran the patch 3 times but on the second time I answered Y on the reverse apply question, then the 3rd time, it ran without error. does this indicate to you that I have already applied the patch successfully? -- Bye for now, Terry Allen ___ hEARd Postal Address: hEARd, 26B Glenning Rd, Glenning Valley, NSW 2261, Australia Internet - WWW: http://heard.com.au http://itavservices.com EMAIL: [EMAIL PROTECTED] Phone: Australia - 02 4388 1400 / International - + 61 2 43881400 Mobile: Australia - 04 28881400 / International - 61 4 28881400 --- Non profit promotion for new music - since 1994 --- -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Security update for 2.1.5
Terry Allen wrote: I should have outlined that I had already tried running patch on that .txt file - here's the problem I am getting: [server:mailman/mailman/cgi] root# patch CAN-2005-0202.txt patching file private.py Reversed (or previously applied) patch detected! Assume -R? [n] n Apply anyway? [n] y Hunk #1 FAILED at 1. 1 out of 2 hunks FAILED -- saving rejects to file private.py.rej [server:mailman/mailman/cgi] root# The output into the .rej file has only the comments at the start of private.py - I ran the patch 3 times but on the second time I answered Y on the reverse apply question, then the 3rd time, it ran without error. does this indicate to you that I have already applied the patch successfully? It looks like the first time, patch failed to apply the first hunk (the Copyright notice) because it had already been applied. The second time, answering Y to the 'reverse' question effectively removed the patch, and the third try successfully reapplied the patch. -- Mark Sapiro [EMAIL PROTECTED] The highway is for gamblers, San Francisco Bay Area, Californiabetter use your sense - B. Dylan -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Security update for 2.1.5
At 7:37 AM +1100 2005-03-23, Terry Allen wrote: The output into the .rej file has only the comments at the start of private.py - I ran the patch 3 times but on the second time I answered Y on the reverse apply question, then the 3rd time, it ran without error. does this indicate to you that I have already applied the patch successfully? Hmm. Not sure. Have you compared the file being patched against what it used to be, and what was in the patch? -- Brad Knowles, [EMAIL PROTECTED] Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. -- Benjamin Franklin (1706-1790), reply of the Pennsylvania Assembly to the Governor, November 11, 1755 SAGE member since 1995. See http://www.sage.org/ for more info. -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Security update for 2.1.5
On Tue, 2005-03-22 at 22:28 +0100, Brad Knowles wrote: At 7:37 AM +1100 2005-03-23, Terry Allen wrote: The output into the .rej file has only the comments at the start of private.py - I ran the patch 3 times but on the second time I answered Y on the reverse apply question, then the 3rd time, it ran without error. does this indicate to you that I have already applied the patch successfully? Hmm. Not sure. Have you compared the file being patched against what it used to be, and what was in the patch? Here's a hint. The change is only a couple of lines, if you're having trouble applying the patch open up a text editor and manually cut-n-paste the changes. Or download the 2.1.6 beta and copy private.py from it into your installation. -- John Dennis [EMAIL PROTECTED] -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp