I am not so pleased to announce the release of Mailman 2.1.29.
It turned out there was a bug in the security fix in 2.1.28 that broke
the web admin and listinfo overview pages. This is fixed in Mailman
2.1.29. The patch referred to below has been corrected to fix this bug.
There is also a patch attached to
<https://bugs.launchpad.net/mailman/+bug/1783417> which applies to
2.1.28 to fix this issue.
Python 2.6 is the minimum supported, but Python 2.7 is strongly recommended.
Mailman 2.1.28 was a minor security fix release. It also has some i18n
updates and a couple of bug fixes and adds the ability to edit list
specific templates through the web admin UI in a supported language
other than the list's default. See the attached README.txt for details.
For details of the security issue, see the report at
<https://bugs.launchpad.net/mailman/+bug/1780874> which also includes a
patch for those who want to fix this issue without upgrading.
Mailman is free software for managing email mailing lists and
e-newsletters. Mailman is used for all the python.org and
SourceForge.net mailing lists, as well as at hundreds of other sites.
For more information, please see our web site at one of:
http://www.list.org
https://www.gnu.org/software/mailman
http://mailman.sourceforge.net/
https://mirror.list.org/
Mailman 2.1.29 can be downloaded from
https://launchpad.net/mailman/2.1/
https://ftp.gnu.org/gnu/mailman/
https://sourceforge.net/projects/mailman/
--
Mark Sapiro <m...@msapiro.net> The highway is for gamblers,
San Francisco Bay Area, California better use your sense - B. Dylan
2.1.29 (24-Jul-2018)
Bug Fixes
- Fixed the listinfo and admin overview pages that were broken by
LP: #1780874. (LP: #1783417)
2.1.28 (23-Jul-2018)
Security
- A content spoofing vulnerability with invalid list name messages in
the web UI has been fixed. CVE-2018-13796 (LP: #1780874)
New Features
- It is now possible to edit HTML and text templates via the web admin
UI in a supported language other than the list's preferred_language.
Thanks to Yasuhito FUTATSUKI.
i18n
- The Japanese translation has been updated by Yasuhito FUTATSUKI.
- The German translation has been updated by Ralf Hildebrandt.
- The Esperanto translation has been updated by Rubén Fernández Asensio.
Bug fixes and other patches
- The BLOCK_SPAMHAUS_LISTED_DBL_SUBSCRIBE feature added in 2.1.27 was
not working. This is fixed. (LP: #1779774)
- Escaping of HTML entities for the web UI is now done more selectively.
(LP: #1779445)
_______________________________________________
Mailman-Developers mailing list -- mailman-developers@python.org
To unsubscribe send an email to mailman-developers-le...@python.org
https://mail.python.org/mm3/mailman3/lists/mailman-developers.python.org/
Mailman FAQ: https://wiki.list.org/x/AgA3
Security Policy: https://wiki.list.org/x/QIA9
