Re: [Mailman-Users] security heads up - path traversal with 2.1.5
At 2:09 PM +0100 2005-02-14, Florian Weimer wrote:
The underlying assumption seems to be that Mailman security bugs can only be disclosed by posting them on the Mailman lists.
In response to this issue, FAQ 1.27 has been updated, and the mailman-users and mailman-developers mailing lists have likewise been modified to include suitable text at the bottom of every message, as well as on the "listinfo" page, and in the "welcome" message that is sent to all new subscribers.
This matter is now closed.-- Brad Knowles <brad@python.org> Python.org Postmaster Team
On Mon, 2005-02-14 at 10:23, Brad Knowles wrote:
In response to this issue, FAQ 1.27 has been updated
Wow Brad, I was just about to change this to read mailman-security@python.org but you beat me to it by seconds. :)
, and the mailman-users and mailman-developers mailing lists have likewise been modified to include suitable text at the bottom of every message, as well as on the "listinfo" page, and in the "welcome" message that is sent to all new subscribers.
I have to agree with Chuq here. I don't the extra text on the footers. Can you please remove them? It's just not information that every message needs to carry.
Thanks. -Barry
At 5:12 PM -0500 2005-02-14, Barry Warsaw wrote:
In response to this issue, FAQ 1.27 has been updated
Wow Brad, I was just about to change this to read mailman-security@python.org but you beat me to it by seconds. :)
Mark had clued me in that someone had changed the security-related pages at www.list.org, and that we should make the same change to FAQ 1.27, which I did.
I have to agree with Chuq here. I don't the extra text on the footers. Can you please remove them? It's just not information that every message needs to carry.
Given the above change, I didn't want to have to keep editing this text every time something changes, so I had already cut the added text down to one line, which references FAQ 1.27.
Is that suitable?-- Brad Knowles, <brad@stop.mail-abuse.org>
"Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety."
-- Benjamin Franklin (1706-1790), reply of the Pennsylvania
Assembly to the Governor, November 11, 1755SAGE member since 1995. See <http://www.sage.org/> for more info.
participants (3)
-
Barry Warsaw -
Brad Knowles -
Brad Knowles