Mailman 3 - Mailman-announce

Imminent release of a Mailman security fix.
by Mark Sapiro 19 Aug '16

19 Aug '16

There is a CSRF vulnerability associated with the user options page. This could conceivably allow an attacker to obtain a user's password. This is reported at <https://bugs.launchpad.net/mailman/+bug/1614841>. I have developed a fix which is a small patch to two modules. I plan to release Mailman 2.1.23 with this and other fixes on Saturday, Aug 27 and also to post at the same time the patch which can be applied stand-alone. Neither the bug report nor the fix reveals much detail about the attack, but to allay any concern, I'm delaying the release for a week to allow people to plan for installation of at least the patch at the time of release. -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

1 0

Mailman 2.1.22 release
by Mark Sapiro 17 Apr '16

17 Apr '16

I am pleased to announce the release of Mailman 2.1.22. Python 2.4 is the minimum supported, but Python 2.7 is strongly recommended. There are no new features in this release. There are a few i18n updates and some bug fixes. See the attached README for details. Mailman is free software for managing email mailing lists and e-newsletters. Mailman is used for all the python.org and SourceForge.net mailing lists, as well as at hundreds of other sites. For more information, please see our web site at one of: http://www.list.org http://www.gnu.org/software/mailman http://mailman.sourceforge.net/ http://mirror.list.org/ Mailman 2.1.22 can be downloaded from https://launchpad.net/mailman/2.1/ http://ftp.gnu.org/gnu/mailman/ https://sourceforge.net/projects/mailman/ -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

1 0

New Mailman 3 users list
by Mark Sapiro 05 Apr '16

05 Apr '16

I'm happy to announce a new list for Mailman 3 users and others interested in Mailman 3. This list is running on a new Mailman 3 installation at lists.mailman3.org. The list's posting address is <mailman-users(a)mailman3.org>. The list's info page is <https://lists.mailman3.org/mailman3/lists/mailman-users.mailman3.org/> and its archives are at <https://lists.mailman3.org/archives/list/mailman-users@mailman3.org/>. The top level Postorius page is <https://lists.mailman3.org/mailman3/> and the HyperKitty archiver is at <https://lists.mailman3.org/archives/>. You can subscribe by email by sending a blank message to <mailman-users-join(a)mailman3.org> and responding to the resulting confirmation request. You can also subscribe by going to the info page at <https://lists.mailman3.org/mailman3/lists/mailman-users.mailman3.org/>, logging in and subscribing. Log in offers three options. There are Google and Facebook OAuth2 login links on the log in page to log in with a Google or Facebook account, and there is a 'Login by email' link to login via Persona with any address you register and confirm with Persona. This is a new installation of Mailman 3 so there are still kinks to work out, and any issues can be discussed on the list or reported to the trackers at <https://gitlab.com/mailman/postorius/issues>, <https://gitlab.com/mailman/hyperkitty/issues> or <https://gitlab.com/mailman/mailman/issues> as appropriate. Enjoy! -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

1 0

ANNOUNCE: Mailman Core 3.0.3
by Barry Warsaw 30 Mar '16

30 Mar '16

Hello Mailmandables! I'm happy to announce Mailman Core 3.0.3 which fixes a number of bugs. This also pins the Falcon version in setup.py to < 1.0. https://gitlab.com/mailman/mailman/milestones/4 More information on version compatibility is available here: http://wiki.list.org/Mailman3 As usual, you can download it from PyPI: https://pypi.python.org/pypi/mailman/3.0.3 view the documentation: http://mailman.readthedocs.org/en/release-3.0/ Enjoy, -Barry (on behalf of the Mailman development team) _______________________________________________ Mailman-Developers mailing list Mailman-Developers(a)python.org https://mail.python.org/mailman/listinfo/mailman-developers Mailman FAQ: http://wiki.list.org/x/AgA3 Searchable Archives: http://www.mail-archive.com/mailman-developers%40python.org/ Unsubscribe: https://mail.python.org/mailman/options/mailman-developers/gmmd-mailman-dev… Security Policy: http://wiki.list.org/x/QIA9

1 0

Mailman 2.1.21 Final Release
by Mark Sapiro 01 Mar '16

01 Mar '16

Please ignore the spurious, fumble fingered post of a few minutes ago. I am pleased to announce the release of Mailman 2.1.21. Python 2.4 is the minimum supported, but Python 2.7 is strongly recommended. This release includes a few new features and several bug fixes. Most of the changes since the second release candidate are i18n updates, but there are a few more bug fixes. See the attached README for details. Mailman is free software for managing email mailing lists and e-newsletters. Mailman is used for all the python.org and SourceForge.net mailing lists, as well as at hundreds of other sites. For more information, please see our web site at one of: http://www.list.org http://www.gnu.org/software/mailman http://mailman.sourceforge.net/ http://mirror.list.org/ Mailman 2.1.21 can be downloaded from https://launchpad.net/mailman/2.1/ http://ftp.gnu.org/gnu/mailman/ https://sourceforge.net/projects/mailman/ -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

1 1

Mailman 2.1.21 release - IMPORTANT update
by Mark Sapiro 28 Feb '16

28 Feb '16

1 0

ANNOUNCE: Mailman Core 3.0.2
by Barry Warsaw 12 Feb '16

12 Feb '16

Hello Mailmanatees! I'm happy to announce Mailman Core 3.0.2 which fixes a number of bugs, including most importantly #190, which can affect membership searches. https://gitlab.com/mailman/mailman/milestones/3 More information on version compatibility is available here: http://wiki.list.org/Mailman3 As usual, you can download it from PyPI: https://pypi.python.org/pypi/mailman/3.0.2 view the documentation: http://mailman.readthedocs.org/en/release-3.0/ Enjoy, -Barry (on behalf of the Mailman development team)

1 0

Mailman 2.1.21 release - IMPORTANT update
by Mark Sapiro 05 Feb '16

05 Feb '16

I am pleased to announce the second release candidate for Mailman 2.1.21. This fixes a serious bug in the first release candidate in that the few new list attributes weren't initialized for new lists. 2.1.21rc1 would work with lists migrated from older releases but lists created under that release were unusable. If you installed 2.1.21rc1, you should upgrade to 2.1.21rc2, and if you created new lists under 2.1.21rc1, see the attached fix_list procedure. Python 2.4 is the minimum supported, but Python 2.7 is strongly recommended. This release includes a few new features and several bug fixes. See the attached README for details. Associated with these changes are six new and two modified strings in the i18n message catalogs. I strongly encourage anyone with an interest in translations of Mailman to get this release and help with updating the translations for the final 2.1.21 release which is planned for the end of February. This candidate is expected to be quite stable. All the changes since 2.1.20 have been installed in the python.org Mailman as they were developed and are running without known issues. The only reason why this is a candidate and not a final release is to allow time for i18n updates to be in the final. Mailman is free software for managing email mailing lists and e-newsletters. Mailman is used for all the python.org and SourceForge.net mailing lists, as well as at hundreds of other sites. For more information, please see our web site at one of: http://www.list.org http://www.gnu.org/software/mailman http://mailman.sourceforge.net/ http://mirror.list.org/ Mailman 2.1.21rc2 can be downloaded from https://launchpad.net/mailman/2.1/ http://ftp.gnu.org/gnu/mailman/ https://sourceforge.net/projects/mailman/ -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

1 0

Mailman 2.1.21 release
by Mark Sapiro 03 Feb '16

03 Feb '16

I am pleased to announce the first release candidate for Mailman 2.1.21. Python 2.4 is the minimum supported, but Python 2.7 is strongly recommended. This release includes a few new features and several bug fixes. See the attached README for details. Associated with these changes are six new and two modified strings in the i18n message catalogs. I strongly encourage anyone with an interest in translations of Mailman to get this release and help with updating the translations for the final 2.1.21 release which is planned for the end of February. This candidate is expected to be quite stable. All the changes since 2.1.20 have been installed in the python.org Mailman as they were developed and are running without known issues. The only reason why this is a candidate and not a final release is to allow time for i18n updates to be in the final. Mailman is free software for managing email mailing lists and e-newsletters. Mailman is used for all the python.org and SourceForge.net mailing lists, as well as at hundreds of other sites. For more information, please see our web site at one of: http://www.list.org http://www.gnu.org/software/mailman http://mailman.sourceforge.net/ http://mirror.list.org/ Mailman 2.1.21rc1 can be downloaded from https://launchpad.net/mailman/2.1/ http://ftp.gnu.org/gnu/mailman/ https://sourceforge.net/projects/mailman/ -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

1 0

RELEASED: Postorius 1.0.3
by f＠florianfuchs.com 02 Feb '16

02 Feb '16

I'm announcing the release of Postorius 1.0.3. It contains an important security fix[1], so we strongly recommend that all sites running Mailman 3.0 in combination with Postorius update their instances to this version. The easiest way to upgrade is via pip: pip install --upgrade postorius The latest tarball is also available on https://pypi.python.org/pypi/postorius. Florian [1] http://wiki.list.org/SEC/Unauthorized-Domain-Deletion/

1 0