1
1
Mailman - The GNU Mailing List Management System
2
Copyright (C) 1998-2006 by the Free Software Foundation, Inc.
2
Copyright (C) 1998-2008 by the Free Software Foundation, Inc.
3
3
51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA
5
5
Here is a history of user visible changes to Mailman.
11
- The 2.1.9 fixes for CVE-2006-3636 were not complete. In particular,
12
some potential cross-site scripting attacks were not detected in
13
editing templates and updating the list's info attribute via the web
14
admin interface. This has been assigned CVE-2008-0564 and has been
15
fixed. Thanks again to Moritz Naumann for assistance with this.
17
- There is a new mm_cfg.py/Defaults.py variable
18
OWNERS_CAN_CHANGE_MEMBER_PASSWORDS which controls whether the list
19
owner can change a member's password from the member's options page.
20
This defaults to No and should be changed to Yes only if list owners
21
are trusted to not change a member's password, log in as the member
22
and make global membership changes.
26
- Changed cmd_who.py to list all members if authorization is with the
27
list's admin or moderator password and to accept the password if the
28
roster is public. Also changed the web roster to show hidden members
29
when authorization is by site or list's admin or moderator password
32
- Added the ability to put a list name in accept_these_nonmembers
33
to accept posts from members of that list (1220144).
35
- Added a new 'sibling list' feature to exclude members of another list
36
from receiving a post from this list if the other list is in the To: or
37
Cc: of the post or to include members of the other list if that list is
38
not in the To: or Cc: of the post (Patch ID 1347962).
40
- Added the admin_member_chunksize attribute to the admin General Options
41
interface (Bug 1072002, Partial RFE 782436).
45
- Added the Hebrew translation from Dov Zamir. This includes addition of
46
a direction ('ltr', 'rtl') to the LC_DESCRIPTIONS table. The
47
add_language() function defaults direction to 'ltr' to not break
48
existing mm_cfg.py files.
50
- Added the Slovak translation from Martin Matuska.
52
- Added the Galician translation from Frco. Javier Rial Rodr�guez.
54
Bug fixes and other patches
56
- Added bounce recognition for several additional bounce formats.
58
- Fixed CommandRunner.py to decode a quoted-printable or base64 encoded
59
message part (1829061).
61
- Fixed Scrubber.py to avoid loss of an implicit text/plain message part
62
with no Content-* headers in a MIME multipart message (759841). Fixed
63
several other minor scrubber issues (1242450).
65
- Added Date and Message-ID headers to the confirm reply message that
66
Mailman adds to the admin notification (1471318).
68
- Fixed Cgi/options.py to not present the "empty" topic to user.
70
- Fixed Handlers/CalcRecips.py to not process topics if topics are
71
disabled for the list. This caused users who had previously subscribed
72
to topics and elected to not receive non-matching posts to receive no
73
messages after topics were disabled for the list.
75
- Fixed MaildirRunner.py to handle hyphenated list names.
77
- Fixed a bug in MimeDel.py (content filtering) which caused
78
*_filename_extensions to not match if the extension in the message was
81
- Fixed versions.py to not call a non-existant method when converting held
82
posts from Mailman 1.0.x lists.
84
- Added a test to configure to detect a missing python-devel package on
87
- Fixed bin/dumpdb to once again be able to dump marshals (broken since
90
- Worked around a bug in the Python email library that could cause Mailman
91
to not get the correct value for the sender of a message from an RFC
92
2231 encoded header causing spurious held messages.
94
- Fixed bin/check_perms to detect certain missing permissions on the
95
archives/private/ and archives/private/<list>/database/ directories.
97
- Improved exception handling in cron/senddigests.
99
- Changed the admindb page to not show the "Discard all messages marked
100
Defer" checkbox when there are only (un)subscribes and no held messages.
101
Also added a separator and heading for "Held Messages" like the ones for
102
"Subscribe Requests" and "Unsubscribe Requests". Suppressed the
103
"Database Updated" message when coming from the login page. Also
104
removed the "Discard all messages marked Defer" checkbox from the
105
details page where it didn't work (1562922, 1000699).
107
- Fixed admin.py so null VARHELP category is handled (1573393).
109
- Fixed OldStyleMemberships.py to preserve delivery statuses BYADMIN
110
and BYUSER on a straight change of address (1642388). Also fixed a
111
bug that could result in a member key with uppercase in the domain.
113
- Fixed bin/withlist so that -r can take a full package path to a
116
- Removal of DomainKey/DKIM signatures is now controlled by Defaults.py
117
mm_cfg.py variable REMOVE_DKIM_HEADERS (default = No). Also, if
118
REMOVE_DKIM_HEADERS = Yes, an Authentication-Results: header will be
121
- The DeprecationWarning issued by Python 2.5 regarding string exceptions
124
- format=flowed and delsp=yes are now preserved for message bodies when
125
message headers/footers are added and attachments are scrubbed
128
- Queue runner processing is improved to log and preserve for analysis in
129
the shunt queue certain bad queue entries that were previously logged
130
but lost. Also, entries are preserved when an attempt to shunt throws
131
an exception (1656289).
133
- The admin Membership List pages have been changed in that the email
134
address which forms a part of the various CGI data keys is now
135
urllib.quote()ed. This allows changing options for and unsubbing an
136
address which contains a double-quote character, but it may require
137
changes to scripts that screen-scrape the web admin interface to
138
produce a membership list so they will report an unquoted address.
140
- The fix for bug 1181161 in 2.1.7 was incomplete. The Approve(d): line
141
wasn't always found in quoted-printable encoded parts and was never
142
found in base64 encoded parts. This is now fixed.
144
- Fixed a mail loop if a list owner puts the list's -bounces or -admin
145
address in the list's owner attribute (1834569).
147
- Fixed the mailto: link in archived messages to prefix the subject with
148
Re: and to put the correct message-id in In-Reply-To (1621278, 1834281).
150
- Coerced list name arguments to lower case in the change_pw, inject,
151
list_admins and list_owners command line tools (patch 1842412).
153
- Fixed cron/disabled to test if bounce info is stale before disabling
154
a member when the threshold has been reduced.
156
- It wasn't noted here, but in 2.1.9, queue runner processing was made
157
more robust by making backups of queue entries when they were dequeued
158
so they could be recovered in the event of a system failure. This
159
opened the possibility that if a message itself caused a runner to
160
crash, a loop could result that would endlessly reprocess the message.
161
This has now been fixed by adding a dequeue count to the entry and
162
moving the entry aside and logging the fact after the third dequeue of
165
- Fixed the command line scripts add_members, sync_members and
166
clone_member to properly handle banned addresses (1904737).
168
- Fixed bin/newlist to add the list's preferred language to the list's
169
available_languages if it is other than the server's default language
172
- Changed the first URL in the RFC 2369 List-Unsubscribe: header to go
173
to the options login page instead of the listinfo page.
175
- Changed the options login page to not issue the "No address given" error
176
when coming from the List-Unsubscribe and other direct links. Also
177
changed to remember the user's language selection when redisplaying the
178
page following an error.
180
- Changed cmd_subscribe.py to properly accept (no)digest without a
181
password and to recognize (no)digest and address= case insensitively.
183
- Fixed a problem where GuiBase._getValidValue() would truncate a
184
floating point Number type to an int if the value was a float instead
185
of a numeric string. This affected setting floating point values with
190
- Brad Knowles' mailman daily status report script updated to 0.0.17.
192
- An updated mm-handler (mm-handler-2.1.10) that can help reduce
193
backscatter has been added to the contrib directory.
7
195
2.1.9 (12-Sep-2006)
added
removed
NEWS
