RHBA-2011:1275 - Bug Fix Advisory

Topic

An updated mailman package that fixes various bugs is now available for Red Hat
Enterprise Linux 6.

Description

Mailman is a program used to help manage email discussion lists.

This update fixes the following bugs:

• Previously, a number of Python scripts and subdirectories in the

/usr/lib/mailman/ directory were group writable. As a result, the respective
files and subdirectories could have been changed not only by the owner, but also
by other users in the same user group. This undesired behavior has been resolved
in this update so that only the owner can now change the files and
subdirectories. (BZ#704699, BZ#703389)

• Because of a bug in the brp-python-compile script file, unnecessary

/etc/mailman/mm_cfg.pyc and /etc/mailman/mm_cfg.pyo files were generated under
certain circumstances. As a result, the Mailman build process could have failed.
This update fixes the aforementioned bug by compiling Python script files
manually so that the build process no longer fails. (BZ#684622)

• In accordance with current guidelines, all Python executable files have been

updated to use the Python executable file directly, that is the
"#!/usr/bin/python" string instead of "#!/usr/bin/env python". (BZ#636825)

All users of mailman are advised to upgrade to this updated package, which fixes
these bugs.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x

Fixes

• BZ - 636825 - Fix instances of #!/usr/bin/env python in mailman
• BZ - 684622 - FTBFS - unpackaged files
• BZ - 703389 - several python scripts under /usr/lib/mailman/pythonlib are group writeable
• BZ - 704699 - possible security issue with mailman permissions

CVEs

(none)

References

(none)