Mailman 3 - Mailman-announce

Re: [Mailman-Announce] [Mailman-Users] Mailman 2.1.11 final has been released.
by Barry Warsaw 01 Jul '08

01 Jul '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Jul 1, 2008, at 2:40 PM, Hank van Cleef wrote: > I'm also concerned about this proposed scheme to discontinue montnly > mailings. It most definitely needs some mechanism whereby a user can > reset or re-obtain their password without moderator intervention. Our > user base is just plain not password-savvy, and I'm concerned about > the increase in moderator workload if the recovery method is similar > to password resetting by root (the Unix method). Don't worry, going forward we'll have a fairly typical password reset feature instead of the monthly reminder. The other advantage of this is that we won't have to keep user passwords in our database unencrypted. - -Barry -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (Darwin) iEYEARECAAYFAkhqfiIACgkQ2YZpQepbvXGgOACgphaPDxMRZ1E3bSO+NVVTqHxM 8ogAoKD9V1hQ18ZkTlHsAb0X7Ky5YVEr =cYvr -----END PGP SIGNATURE-----

1 0

Mailman 2.1.11 final has been released.
by Mark Sapiro 01 Jul '08

01 Jul '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I am happy to announce the final release of the Mailman 2.1.11. Mailman 2.1.11 is a cleanup of a few problems found since the release of Mailman 2.1.10. It fixes the issue of shunted email subscribe requests and a few minor issues. It updates the contrib/mmdsr script for some 2.1.10 and 2.1.11 log and error messages, and it adds a new cron to cull and optionally archive old entries in the 'bad' and 'shunt' queues. Mailman 2.1.11 has updates to several i18n translations. A few bounce log messages now have the list name prepended. There is a new Defaults.py|mm_cfg.py setting ACCEPTABLE_LISTNAME_CHARACTERS with default value '[-+_.=a-z0-9]'. This Python regular expression character class specifies the characters allowed in list names. The motivation for this is the fact that previously, a list named, e.g., xxx&yyy could be created and MTA aliases generated that would cause the MTA to execute yyy as a command. There is a possible security issue here, but it is not believed to be exploitable in any meaningful way. If anyone is concerned about the security issue and not ready to upgrade, the mailman-2.1.11-listname-patch file contains a patch that can be applied to Mailman 2.1.9 or 2.1.10 to add this feature. See the release notes at <http://sourceforge.net/project/shownotes.php?group_id=103&release_id=605074> for more details. Mailman is free software for managing email mailing lists and e-newsletters. Mailman is used for all the python.org and SourceForge.net mailing lists, as well as at hundreds of other sites. For more information, including download links, please see: http://www.list.org http://mailman.sf.net http://www.gnu.org/software/mailman Files in this release are: mailman-2.1.11.tgz <- The full release tarball mailman-2.1.11.tgz.sig <- GPG signature for the tarball mailman-2.1.11-listname.patch <- Patch to add new listname ~ validation to 2.1.9 or 2.1.10. ~ This patch is only applicable to ~ the older releases. mailman-2.1.11-listname.patch.sig <- GPG signature for the patch - -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (MingW32) iD8DBQFIaTDdVVuXXpU7hpMRApGpAKDXM56DmmpBY28+X6pN2sDpyyZltACgr3wm ePBR1weSHPYd1ViPCTc/L8o= =bV1I -----END PGP SIGNATURE-----

1 1

Mailman 2.1.11rc1 has been released
by Mark Sapiro 23 Jun '08

23 Jun '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I am happy to announce the release of the second release candidate for Mailman 2.1.11. Mailman 2.1.11 is a cleanup of a few problems found since the release of Mailman 2.1.10. It fixes the issue of shunted email subscribe requests and a few minor issues. It updates the contrib/mmdsr script for some 2.1.10 and 2.1.11 log and error messages, and it adds a new cron to cull and optionally archive old entries in the 'bad' and 'shunt' queues. See the release notes at <http://sourceforge.net/project/shownotes.php?group_id=103&release_id=605074> for details. Mailman is free software for managing email mailing lists and e-newsletters. Mailman is used for all the python.org and SourceForge.net mailing lists, as well as at hundreds of other sites. For more information, including download links, please see: http://www.list.org http://mailman.sf.net http://www.gnu.org/software/mailman At this point I anticipate releasing 2.1.11 final on June 30. I am currently waiting for some updates to the Brazilian Portuguese (pt-BR) translation. At this point, I expect that to be the only change from 2.1.11rc2 to 2.1.11 final. - -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (MingW32) iD8DBQFIX/4fVVuXXpU7hpMRAvxcAKDTjfEJmwPy0qn240kIUiM90Xt0RQCePj1i CkvCyaZtobyr01rJsae5Mik= =GgXp -----END PGP SIGNATURE-----

1 1

New FAQ
by Barry Warsaw 17 Jun '08

17 Jun '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi everybody, I wanted to let you know that Terri Oda has written a nice script to turn the old FAQ wizard into FAQ entries on the wiki. She and others have spent some time gardening, tweaking and updating the wiki FAQ and it is now ready to take over as our definitive FAQ. Thanks Terri and everyone else who contributed to this effort! We'll keep the old FAQ wizard around so that existing links will continue to work. I've added a footer indicating that it is obsolete and pointing people at the wiki FAQ. I've also disabled write access to the FAQ wizard. Here's the new FAQ: http://wiki.list.org/display/DOC/Frequently+Asked+Questions There's also a link to this on the front page of the wiki: http://wiki.list.org Enjoy, - -Barry -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (Darwin) iEYEARECAAYFAkhX9QwACgkQ2YZpQepbvXGDXQCgiBI4IXaBFgt9Wc+ZpjQc1zVN LzkAnRnOiqHrnk5KdoD6brqhmxFHag8e =2fZN -----END PGP SIGNATURE-----

1 0

Mailman 2.1.11rc1 has been released
by Mark Sapiro 07 Jun '08

07 Jun '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I am happy to announce the release of the first release candidate for Mailman 2.1.11. Mailman 2.1.11 is a cleanup of a few problems found since the release of Mailman 2.1.10. It fixes the issue of shunted email subscribe requests and a few minor issues. It updates the contrib/mmdsr script for some 2.1.10 and 2.1.11 log and error messages, and it adds a new cron to cull and optionally archive old entries in the 'bad' and 'shunt' queues. See the release notes at <http://sourceforge.net/project/shownotes.php?group_id=103&release_id=605074> for details. Mailman is free software for managing email mailing lists and e-newsletters. Mailman is used for all the python.org and SourceForge.net mailing lists, as well as at hundreds of other sites. For more information, including download links, please see: http://www.list.org http://mailman.sf.net http://www.gnu.org/software/mailman Note that since the 2.1.11rc1 tarball was prepared, a few issues involving the Dutch, German, Korean, Russian, Spanish and traditional Chinese translations have been corrected, so if you use any of these languages, you probably will want to wait for the next candidate or final release. - -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (MingW32) iD8DBQFISwHKVVuXXpU7hpMRArmaAJ9c/7xc/jCcoqoEHQhPRKXZwpYtJgCaAwpQ J4tf0KCCWNJGWr4CD+/+4yA= =d8o8 -----END PGP SIGNATURE-----

1 0

Mailman 2.1.10b4 Released
by Mark Sapiro 23 Apr '08

23 Apr '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I am happy to announce the next beta release of Mailman 2.1.10. This is a security and bug fix release and it is highly recommended that all sites upgrade to this version. Mailman 2.1.10 also adds support for three new language translations, Galician, Hebrew and Slovak and a few new features. Mailman is free software for managing email mailing lists and e- newsletters. Mailman is used for all the python.org and SourceForge.net mailing lists, as well as at hundreds of other sites. For more information, including download links, please see: http://www.list.org http://mailman.sf.net http://www.gnu.org/software/mailman Special thanks are due to Barry Warsaw and Tokio Kikuchi for much coding and support, Moritz Naumann for help with security issues and Jim Tittsler for a significant patch. Here's a list of the major changes. Security - - The 2.1.9 fixes for CVE-2006-3636 were not complete. In particular, some potential cross-site scripting attacks were not detected in editing templates and updating the list's info attribute via the web admin interface. This has been assigned CVE-2008-0564 and has been fixed. Thanks again to Moritz Naumann for assistance with this. New Features - - Changed cmd_who.py to list all members if authorization is with the list's admin or moderator password and to accept the password if the roster is public. Also changed the web roster to show hidden members when authorization is by site or list's admin or moderator password (1587651). - - Added the ability to put a list name in accept_these_nonmembers to accept posts from members of that list (1220144). - - Added a new 'sibling list' feature to exclude members of another list from receiving a post from this list if the other list is in the To: or Cc: of the post or to include members of the other list if that list is not in the To: or Cc: of the post (Patch ID 1347962). - - Added the admin_member_chunksize attribute to the admin General Options interface (Bug 1072002, Partial RFE 782436). Internationalization - - Added the Hebrew translation from Dov Zamir. This includes addition of a direction ('ltr', 'rtl') to the LC_DESCRIPTIONS table. The add_language() function defaults direction to 'ltr' to not break existing mm_cfg.py files. - - Added the Slovak translation from Martin Matuska. - - Added the Galician translation from Frco. Javier Rial Rodríguez. Changes since 2.1.10b3 include the Galician translation and updates to the French translation (Vietnamese and Danish translations were updated in 2.1.10b3). Other changes since 2.1.10b3 include: - - In 2.1.9, queue runner processing was made ~ more robust by making backups of queue entries when they were dequeued ~ so they could be recovered in the event of a system failure. This ~ opened the possibility that if a message itself caused a runner to ~ crash, a loop could result that would endlessly reprocess the message. ~ This has now been fixed by adding a dequeue count to the entry and ~ moving the entry aside and logging the fact after the third dequeue of ~ the same entry. - - Fixed the command line scripts add_members, sync_members and ~ clone_member to properly handle banned addresses (1904737). - - Fixed bin/newlist to add the list's preferred language to the list's ~ available_languages if it is other than the server's default language ~ (1906368). - - Changed the first URL in the RFC 2369 List-Unsubscribe: header to go ~ to the options login page instead of the listinfo page. - - Changed the options login page to not issue the "No address given" ~ error when coming from the List-Unsubscribe and other direct links. ~ Also changed to remember the user's language selection when ~ redisplaying the page following an error. /Mark Sapiro - -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (MingW32) iD8DBQFH2eJuVVuXXpU7hpMRAihOAJ4zIREWCWCQt7YDDHp3frDHjzwkCQCfdh7J W3UKWsTTfStBE4z64oqa36c= =ZedT -----END PGP SIGNATURE-----

2 6

Important Mailman 2.1.9 to 2.1.10 upgrade note.
by Mark Sapiro 22 Apr '08

22 Apr '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Actually, this note really applies to just restarting mailman a Mailman 2.1.9 installation, with or without upgrading to Mailman 2.1.10. But in installations that just 'run' without intervention, this restart may not occur until an upgrade. There is an error in Mailman 2.1.9. In the introduction of the backup and recovery of queue entries, we neglected to remove the backup queue entry for an unparseable message. Thus, if you sometimes receive unparseable messages which are ignored, you may have an accumulation of .bak files in qfiles/in from these messages. When you restart Mailman, these will all be reprocessed, resulting in a flood of error log entries. There is no real harm done, but it would be a good idea when upgrading to stop Mailman and remove any qfiles/in/*.bak files. - -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (MingW32) iD8DBQFIDgCwVVuXXpU7hpMRAlOyAJ4/VpFnCL9JHoEBSl4PmZIBowTbigCgjjRr Bh8FoeuGZDAXonphAnvqwMA= =qt1K -----END PGP SIGNATURE-----

1 0

ANNOUNCE: GNU Mailman 3.0a1 (Leave That Thing Alone)
by Barry Warsaw 08 Apr '08

08 Apr '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 After far too long, I'm finally happy to announce the availability of GNU Mailman version 3.0 alpha 1, code name "Leave That Thing Alone". Hopefully, I needn't point out that this version is not suitable for production. Instead, I'm making it available to provide an early snapshot of where Mailman 3 is going, and to give interested developers, users and integrators something real to play with. I am looking forward to your feedback and contributions, and I hope you will at least download the package and give what works a try. For now, I would prefer if all discussion about 3.0a1 were held on the mailman-developers mailing list. Please don't submit bug reports to SourceForge; it's far too early for that. Ideally, you'll be interested enough to create your own branches and push them to Launchpad for all of us to look at. For detailed information on 3.0a1, please read docs/ALPHA.txt. This will explain what works and what doesn't, how to run the test suite and how to actually create, populate, and deliver to some mailing lists. Much does not yet work, but everything that does work is very well documented using Python's doctest framework. Please note that Python 2.5 is required, but a C compiler is no longer needed. You will need some third party packages, but everything you need is available in the Python Cheeseshop. You can download both the tarball and egg file for 3.0a1 from the Cheeseshop as well: http://pypi.python.org/pypi/mailman/3.0.0a1 You'll probably want the source tarball. I hope you will find this first snapshot useful and encouraging. Please participate! Enjoy, - -Barry -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (Darwin) iEYEARECAAYFAkf8JbMACgkQ2YZpQepbvXGtxgCguOrVEuZ61VnCe86nwkWHXGBm b7sAoLn2fUbRLDmRdWusYxfsAu21FAxw =eiPc -----END PGP SIGNATURE-----

1 0

Updated message catalogs needed for Mailman 2.1.10
by Mark Sapiro 08 Mar '08

08 Mar '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 If you are a language champion or otherwise responsible for a Mailman translation, please get the updated 2.1.10 message catalog for your language to me as soon as possible. Mailman 2.1.10 has been in beta for 3 months now, and I have received very few updated translations. I am planning to release what I hope will be the final beta release of 2.1.10 in a few days. This would be a release candidate rather than a beta if I had more updated translations. Thank you for your understanding. - -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (MingW32) iD8DBQFH0xyZVVuXXpU7hpMRAo1aAKDYiS/wpexcQJqNPi+d0GLK6o2x0gCfTo/Z 24bhI96yktpfx97nDC3XH48= =PH4r -----END PGP SIGNATURE-----

1 0

2008 Pizzigati Prize
by Barry Warsaw 06 Mar '08

06 Mar '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I realize that I've been remiss in announcing this. My apologies. I have been awarded the 2008 Pizzigati Prize for Public Interest Computing for GNU Mailman. http://www.pizzigatiprize.org/ I am deeply honored to win this prize because I believe very strongly in Mailman's role in helping people communicate and organize. I want to thank all of you who have supported me and Mailman over the years, and I want to let you know that I am as excited as ever about where Mailman is going. One of the most satisfying aspects of this project for me has been meeting you, the users, developers and contributors to Mailman, both online and face-to-face. I'm looking forward to meeting the Pizzigati family and having some time to spend with them learning about Anthony's remarkable life, sadly cut too short. So again, thank you all and I'm looking forward to the next 10 years of GNU Mailman! Cheers, - -Barry -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (Darwin) iEYEARECAAYFAkfPLpcACgkQ2YZpQepbvXGgwwCbB/PjbX7rSiI0xwKjJ7jPpjgJ kuMAoIfeC0j0+4f8l0GEOp2gYc7a+8MI =Y7nZ -----END PGP SIGNATURE-----

2 1