Mailman 3 - Mailman-announce

Mailman 2.1.10b1 Released
by Mark Sapiro 03 Feb '08

03 Feb '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I am happy to announce the first beta release of Mailman 2.1.10. This is a security and bug fix release and it is highly recommended that all sites upgrade to this version. Mailman 2.1.10 also adds support for two new language translations, Hebrew and Slovak and a few new features. Mailman is free software for managing email mailing lists and e- newsletters. Mailman is used for all the python.org and SourceForge.net mailing lists, as well as at hundreds of other sites. For more information, including download links, please see: http://www.list.org http://mailman.sf.net http://www.gnu.org/software/mailman Special thanks are due to Barry Warsaw and Tokio Kikuchi for much coding and support, Moritz Naumann for help with security issues and Jim Tittsler for a significant patch. Here's a list of the major changes. Security - The 2.1.9 fixes for CVE-2006-3636 have been enhanced. In particular, many potential cross-site scripting attacks have are now detected in editing templates and updating the list's info attribute via the web admin interface. Thanks again to Moritz Naumann for assistance with this. New Features - Changed cmd_who.py to list all members if authorization is with the list's admin or moderator password and to accept the password if the roster is public. Also changed the web roster to show hidden members when authorization is by site or list's admin or moderator password (1587651). - Added the ability to put a list name in accept_these_nonmembers to accept posts from members of that list (1220144). - Added a new 'sibling list' feature to exclude members of another list from receiving a post from this list if the other list is in the To: or Cc: of the post or to include members of the other list if that list is not in the To: or Cc: of the post (Patch ID 1347962). - Added the admin_member_chunksize attribute to the admin General Options interface (Bug 1072002, Partial RFE 782436). Internationalization - Added the Hebrew translation from Dov Zamir. This includes addition of a direction ('ltr', 'rtl') to the LC_DESCRIPTIONS table. The add_language() function defaults direction to 'ltr' to not break existing mm_cfg.py files. - Added the Slovak translation from Martin Matuska. - -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (MingW32) iD4DBQFHVjjPVVuXXpU7hpMRArQHAJ9NE4Fj8b2rpWaXX6+BFa27wWB2MACWIGqJ 1wxPhA7ZBRVG9gSiEhTb2A== =vzXz -----END PGP SIGNATURE-----

2 3

New mailman.pot available for translations
by Mark Sapiro 26 Nov '07

26 Nov '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 In preparation for the upcoming release of Mailman 2.1.10 which will be in beta soon, the mailman.pot file has been updated with a few new and changed messages. The file is available in the Bazaar branch on Launchpad at <https://code.launchpad.net/~mailman-coders/mailman/2.1>. See the wiki at <http://wiki.list.org/display/DEV/Home> for more information about Bazaar and Launchpad. - -- Mark Sapiro <msapiro(a)value.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (MingW32) iD8DBQFHQLMiVVuXXpU7hpMRAiv+AJ9/VKfwyi0p2lh72232CHbxyBOk7QCgo8HV k1Zq3MhNKLeP2blA+/TiCj0= =8MKb -----END PGP SIGNATURE-----

2 1

Shameless plug
by Barry Warsaw 19 Nov '07

19 Nov '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi folks, I apologize in advance for the shameless plug. GNU Mailman is up for the 2007 Antonio Pizzigati Prize for software in the public interest. I sure would appreciate it if you take the time to vote for GNU Mailman: http://forums.pizzigatiprize.org/index.php Vote in the 'Vote' forum. Leave comments in the 'GNU Mailman' forum. Yes, you need to register with the site in order to vote. Thanks for your support! - -Barry -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) iD8DBQFHQf9t2YZpQepbvXERAorYAKCXoVhrBI8eZu+uRxaYlIdyCjAj/ACglrYh RQstgR9SujgyTqsMVSh2q/s= =oIKy -----END PGP SIGNATURE-----

1 0

Change of address
by Barry Warsaw 12 Sep '07

12 Sep '07

For purely administrative purposes, I'm going to start using my barry at list.org address for all Mailman correspondences. My python.org address will continue to work of course. Please update your address books. Thanks, -Barry

1 0

My new job
by Barry Warsaw 03 Feb '07

03 Feb '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello everyone, I just wanted to drop a quick note to let you know that I have started working for Canonical, the folks who distribute Ubuntu Linux and develop the Launchpad service for distributed open source development. I'm quite excited to be working for Canonical. They are a Python and Zope shop, very open source friendly, and based on Linux, so I'm working in an environment that's both familiar and fun. They're also a distributed company, without traditional offices, but with many folks working all over the world. They're also hiring <wink, wink>. :) While this is good for Barry (and hopefully good for Canonical :), I know you're thinking, "what does this mean for Mailman?" Well, I'm glad you asked! Part of my official duties will be to integrate Mailman with Launchpad so as to enable more powerful communication patterns among members of a distributed development team. While I won't be spending /all/ of my time on Mailman, it will be getting some official love. I hope that this will help move the current development branch closer to a release some time later this year. Other than that, not much will really change. Mailman is and will always be released under the GPL, and it will continue to be a GNU project. If you have any questions or concerns, please send them directly to me. I will attempt to answer them as best I can, and if there are common themes, I'll post updates here. Thanks for your support and keep on delivering with Mailman! - -Barry Here are some related links: http://www.canonical.com http://www.ubuntu.com http://launchpad.net P.S. I'll be at PyCon this year so if you're coming too, please say hi! -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (Darwin) iQCVAwUBRcUTb3EjvBPtnXfVAQIQKgP/XFVeeDBn6QVXkE9oK1YJxyrLZZET5GxT TAvTJgfndkcWPuUpbC5D6hcpDNa6sfIgJnR3enoW7MgKpOAtIXTuXqPpNiFMBVT2 qUhlDHhwYzdJWWyzI/oXGRvt0lMqqA69Iu7A6DAKrgksBB128V/mYxTfv8BPmF4W uASb/9MkmAQ= =h+IQ -----END PGP SIGNATURE-----

1 0

Re: [Mailman-Announce] [Mailman-Users] RELEASED: Mailman 2.1.9
by Barry Warsaw 13 Sep '06

13 Sep '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Sep 13, 2006, at 10:10 AM, Ralf Hildebrandt wrote: > The download link on http://www.gnu.org/software/mailman/download.html > pointing to http://www.list.org/mailman.tar.gz doesn't work. > > The download link on http://www.gnu.org/software/mailman/download.html > pointing to http://ftp.gnu.org/gnu/mailman/ > lacks 2.1.9 Due to a recent server move and bandwidth cap, we can no longer provide tarball downloads from list.org. Also, because of gnu.org's ftp upload procedure, it sometimes lags behind SourceForge. Your best bet immediately is to get it from SF. I've updated the download.html page to explain these issues. Thanks, - -Barry -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (Darwin) iQCVAwUBRQgYT3EjvBPtnXfVAQLWqgQAth4R8JC313TxhXlNBx1maJiYZWJVA9Qg 6IUmlhrAetCFHzIWArXDKncLE+s85iOJg24eFroiQwGTw3a7tcNMkaG1vCa++E7R bl4phJ2BB0xnpDi0lKe/f5Wt8ewjNEuUwLDFImFFJguKZEMl+4RUrHo9awL19R/K HLqaksjmCeU= =UyOs -----END PGP SIGNATURE-----

1 0

RELEASED: Mailman 2.1.9
by Barry Warsaw 13 Sep '06

13 Sep '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On behalf of the GNU Mailman development team, I'm please to announce GNU Mailman 2.1.9. This is primarily a security and bug fix release and it is highly recommended that all sites upgrade to this version. Mailman 2.1.9 also contains support for two new languages: Arabic and Vietnamese. Mailman is free software for managing email mailing lists and e- newsletters. Mailman is used for all the python.org and SourceForge.net mailing lists, as well as at hundreds of other sites. For more information, including download links, please see: http://www.list.org http://mailman.sf.net http://www.gnu.org/software/mailman A more detailed change list is included below. Enjoy, - -Barry 2.1.9 (12-Sep-2006) Security - A malicious user could visit a specially crafted URI and inject an apparent log message into Mailman's error log which might induce an unsuspecting administrator to visit a phishing site. This has been blocked. Thanks to Moritz Naumann for its discovery. - Fixed denial of service attack which can be caused by some standards-breaking RFC 2231 formatted headers. CVE-2006-2941. - Several cross-site scripting issues have been fixed. Thanks to Moritz Naumann for their discovery. CVE-2006-3636 - Fixed an unexploitable format string vulnerability. Discovery and fix by Karl Chen. Analysis of non-exploitability by Martin 'Joey' Schulze. Also thanks go to Lionel Elie Mamane. CVE-2006-2191. Internationalization - New languages: Arabic, Vietnamese. Bug fixes and other patches - Fixed Decorate.py so that characters in message header/footer which are not in the character set of the list's language are ignored rather than causing shunted messages (1507248). - Switchboard.py - Closed very tiny holes at the upper ends of queue slices that could result in unprocessable queue entries. Improved FIFO processing when two queue entries have the same timestamp. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (Darwin) iQCVAwUBRQgPGnEjvBPtnXfVAQIVoQP/R2DffgpcPMzUrsef+ZEcYUeuQ1mOcol2 Z2+iQiHkCx6SP2B/NzOzqMQybvQAAe/TzJWzcfqDDoDDdF+vhJH+kkQIuRwHc5jd +TDF1NOUBegTyxQnoyCHVQddcVNMg9HTTkdwHuvE8MhP1gNuHEnefxf2wbf5+hRq h5/qlBiANn0= =VCTA -----END PGP SIGNATURE-----

1 0

RELEASED Mailman 2.1.9 release candidate 1
by Barry Warsaw 02 Sep '06

02 Sep '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On behalf of the Mailman development team, I'm happy to announce the release of Mailman 2.1.9 release candidate 1. This is primarily a bug fix and security release, although it also contains two new languages: Arabic and Vietnamese. This version is not yet recommended for production environments, however testing and feedback is greatly encouraged. My plan is to release 2.1.9 final by 10-Sep-2006. A more detailed list of changes will be included in the final release announcement. Mailman 2.1.9rc1.tgz is available from SourceForge: https://sourceforge.net/project/showfiles.php?group_id=103 Translators: If you have any language updates you'd like to see in 2.1.9 final, please commit them now or send them to me. Enjoy, - -Barry -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (Darwin) iQCVAwUBRPnRyXEjvBPtnXfVAQKuLAP/aUjiZEelQy/oObIadsrhVl9YzP9dcbfE jK1rJuGQsB7VKHe2X/uQWuaAy95pxhNwo/j/N9qtTaSjlZvjTC74E8WboxJmCemf A+azXWgaVY/C3L+HDneqFGBVZLXkKg+4IfxmKPALcEs88jHGzOpvlnuZEVzpyaon bOYFooMqc3c= =NWI4 -----END PGP SIGNATURE-----

1 0

RELEASED: Mailman 2.1.8
by Tokio Kikuchi 15 Apr '06

15 Apr '06

On behalf of the development team, I'm pleased to announce the release of GNU Mailman 2.1.8. In this release, we have fixed a cross-site scripting security bug in the previous release (CVE-2006-1712), integrated a new version of email library (email-2.5.7), and added bounce processing supports for number of sites and MUAs. It is highly recommended that all sites using 2.1.7 and before should update to this release. Mailman is free software for managing email mailing lists and e-newsletters. For more information, see: http://mailman.sourceforge.net/ For links to download the Mailman 2.1.8 source tarball, see: http://sourceforge.net/project/showfiles.php?group_id=103 (Note that uploading to the mirror sites may be delayed.) -- Tokio Kikuchi

1 0

Released: Mailman 2.1.8 release candidate
by Tokio Kikuchi 07 Apr '06

07 Apr '06

Hi all, Mailman 2.1.8rc1 was released for the final test of 2.1.8. Important: This is not only a release candidate but also include a fix for a cross-site scripting bug found in 2.1.7. All sites running previous versions are adviced to upgrade to 2.1.8(rc1). I am going to release the final by the next weekend if nothing serious happens. Please download it from Sourceforge file area: http://sourceforge.net/project/showfiles.php?group_id=103 Cheers, Tokio --------------------------------------------------- Here is a history of user visible changes to Mailman. 2.1.8rc1 (07-Apr-2006) Security - A cross-site scripting hole in the private archive script of 2.1.7 has been closed. Thanks to Moritz Naumann for its discovery. Bug fixes and other patches - Bouncers support added: 'unknown user', Microsoft SMTPSVC, Prodigy.net and several others. - Updated email library to 2.5.7 which will encode payload into qp/base64 upon setting. This enabled backing out the scrubber related patches including 'X-Mailman-Scrubbed' header in 2.1.7. - Fix SpamDetect.py potential hold/reject loop problem. - A warning message from email package to the stderr can cause error in Logging because stderr may be detached from the process during the qrunner run. We chose not to output errors to stderr but to the logs/error if the process is running under mailmanctl subprocess. - DKIM header cleansing was separated from Cleanse.py and added to -owner messages too. - Fixes: Lose Topics when go directly to topics URL (1194419). UnicodeError running bin/arch (1395683). edithtml.py missing import (1400128). Bad escape in cleanarch. Wrong timezone in list archive index pages (1433673). bin/arch fails with TypeError (1430236). Subscription fails with some Language combinations (1435722). Postfix delayed notification not recognized (863989). 2.1.7 (VERP) mistakes delay notice for bounce (1421285). show_qfiles: 'str' object has no attribute 'as_string' (1444447). Utils.get_domain() wrong if VIRTUAL_HOST_OVERVIEW off (1275856). Miscellaneous - Brad Knowles' mailman daily status report script updated to 0.0.16. -- Tokio Kikuchi, tkikuchi@ is.kochi-u.ac.jp http://weather.is.kochi-u.ac.jp/

1 0