On Sep 20, 2006, at 10:14 AM, John H. Robinson, IV wrote:
There is an update to mailman currently available, however mailman is currently a held package. I am not going to be responsible for that upgrade, because if mailman breaks I cannot fix it.
I'm thinking Gregory put it on hold, but I'm not sure why. I can take a look and attempt the upgrade if you can give me the Debian mojo to take it off hold. :) (Is it something to do with pinning?)
I did check the Debian security list to see what the 8sarge3 Mailman package fixed (the one currently pending install), and it was an earlier less severe vulnerability, and there seems to be some controversy around its maintainer letting it into stable. I'm hoping we'll see another update from the Debian security folks in the next day or two that addresses Neil's issue. Perhaps we should just wait...
-- Joshua Penix http://www.binarytribe.com Binary Tribe Linux Integration Services & Network Consulting -- [email protected] http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-steer
