[Mailman-Users] how to avoid mailmanSite list creation

[John Dennis]

On Fri, 2005-08-19 at 12:47 -0400, Julian C. Dunn wrote:
> On Fri, 2005-08-19 at 12:37 -0400, John Dennis wrote:
> > On Fri, 2005-08-19 at 11:46 +0300, lkolchin at univ.haifa.ac.il wrote:
> > > Hello All,
> > >  
> > > 1) I'm implementing web-cyradm installation together with mailman-2.1.4-83.13 on SLES 9.
> > 
> > Try to upgrade to mailman 2.1.6 for security reasons.
> 
> As far as I know, Novell has backported all security fixes in 2.1.6 into
> the SLES 9 2.1.4 Mailman. Please correct me if I'm wrong (and I hope I'm
> not, because that's the Mailman we're planning on installing)
> 

I don't track Novell's patches, but these are the two CVE's you want to
make sure are fixed, look to see if the release notes include them.

CAN-2005-0202
CAN-2004-1177

Of the two of them, CAN-2005-0202 is the most important.
-- 
John Dennis <jdennis at redhat.com>