Mailman 2.1.10 final release schedule.

For translators who haven't yet updated their translations for 2.1.10
and for other interested parties, I plan to release a 2.1.10 release
candidate on April 14, 2008 and barring any issues with the RC, the
2.1.10 final on April 21, 2008.

Note to translators - the latest mailman.pot for the 2.1 branch is at
<https://code.launchpad.net/~mailman-coders/mailman/2.1>. The SVN
repository on sourceforge is no longer maintained and is out of date.

One way to get your updated translation to me is to register on
launchpad and make your own private branch off the 2.1 branch, update
your branch and publish it and send me a note when it's ready. Then I
can just merge your branch back into the 2.1 branch.

Of course, if you prefer, you can just send me your updated message
catalog and templates if any or make them available anywhere on the web
and tell me where to find them.

--
Mark Sapiro <mark <at> msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

Re: Mailman 2.1.10 final release schedule.

On Apr 5, 2008, at 1:10 PM, Mark Sapiro wrote:
>
> For translators who haven't yet updated their translations for 2.1.10
> and for other interested parties, I plan to release a 2.1.10 release
> candidate on April 14, 2008 and barring any issues with the RC, the
> 2.1.10 final on April 21, 2008.

Sounds great, Mark.  Thanks!
-Barry

ANNOUNCE: GNU Mailman 3.0a1 (Leave That Thing Alone)

After far too long, I'm finally happy to announce the availability of  
GNU Mailman version 3.0 alpha 1, code name "Leave That Thing Alone".

Hopefully, I needn't point out that this version is not suitable for  
production.  Instead, I'm making it available to provide an early  
snapshot of where Mailman 3 is going, and to give interested  
developers, users and integrators something real to play with.  I am  
looking forward to your feedback and contributions, and I hope you  
will at least download the package and give what works a try.

For now, I would prefer if all discussion about 3.0a1 were held on the  
mailman-developers mailing list.  Please don't submit bug reports to  
SourceForge; it's far too early for that.  Ideally, you'll be  
interested enough to create your own branches and push them to  
Launchpad for all of us to look at.

For detailed information on 3.0a1, please read docs/ALPHA.txt.  This  
will explain what works and what doesn't, how to run the test suite  
and how to actually create, populate, and deliver to some mailing  
lists.  Much does not yet work, but everything that does work is very  
well documented using Python's doctest framework.

Please note that Python 2.5 is required, but a C compiler is no longer  
needed.  You will need some third party packages, but everything you  
need is available in the Python Cheeseshop.

You can download both the tarball and egg file for 3.0a1 from the  
Cheeseshop as well:

Re: Mailman 2.1.10rc1 has been released

I am happy to announce the release of Mailman 2.1.10rc1.

This is a security and bug fix release and it is highly recommended
that all sites upgrade to this version. Mailman 2.1.10 also adds support
for three new language translations, Galician, Hebrew and Slovak and a
few new features.

Mailman is free software for managing email mailing lists and e-
newsletters. Mailman is used for all the python.org and
SourceForge.net mailing lists, as well as at hundreds of other sites.

For more information, including download links, please see:

http://www.list.org
http://mailman.sf.net
http://www.gnu.org/software/mailman

Special thanks are due to Barry Warsaw and Tokio Kikuchi for much coding
and support, Moritz Naumann for help with security issues and Jim
Tittsler for a significant patch.

Here's a list of the major changes.

Note in particular, the second item under Security as this is new since
2.1.10b4 and requires an mm_cfg.py change to maintain current behavior.

Security

The 2.1.9 fixes for CVE-2006-3636 were not complete.  In particular,

Mailman 2.1.10 has been released

I am happy to announce the release of Mailman 2.1.10.

This is a security and bug fix release and it is highly recommended
that all sites upgrade to this version. Mailman 2.1.10 also adds support
for three new language translations, Galician, Hebrew and Slovak and a
few new features.

Mailman is free software for managing email mailing lists and e-
newsletters. Mailman is used for all the python.org and
SourceForge.net mailing lists, as well as at hundreds of other sites.

For more information, including download links, please see:

http://www.list.org
http://mailman.sf.net
http://www.gnu.org/software/mailman

Special thanks are due to Barry Warsaw and Tokio Kikuchi for much coding
and support, Moritz Naumann for help with security issues and Jim Tittsler
for a significant patch.

Here's a list of the major changes.

Security

The 2.1.9 fixes for CVE-2006-3636 were not complete.  In particular,
some potential cross-site scripting attacks were not detected in
editing templates and updating the list's info attribute via the web
admin interface.  This has been assigned CVE-2008-0564 and has been

Re: [Mailman-Developers] Mailman 2.1.10 has been released

On Apr 21, 2008, at 3:50 PM, Mark Sapiro wrote:

> I am happy to announce the release of Mailman 2.1.10.

Congratulations Mark!  Long live Mailman 2.2. :)

I will update the web sites.

-Barry

Important Mailman 2.1.9 to 2.1.10 upgrade note.

Actually, this note really applies to just restarting mailman a Mailman
2.1.9 installation, with or without upgrading to Mailman 2.1.10. But in
installations that just 'run' without intervention, this restart may not
occur until an upgrade.

There is an error in Mailman 2.1.9. In the introduction of the backup
and recovery of queue entries, we neglected to remove the backup queue
entry for an unparseable message. Thus, if you sometimes receive
unparseable messages which are ignored, you may have an accumulation of
.bak files in qfiles/in from these messages. When you restart Mailman,
these will all be reprocessed, resulting in a flood of error log entries.

There is no real harm done, but it would be a good idea when upgrading
to stop Mailman and remove any qfiles/in/*.bak files.

--
Mark Sapiro <mark <at> msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

Re: Mailman 2.1.10 has been released

Mark Sapiro wrote:
| I am happy to announce the release of Mailman 2.1.10.

I have discovered a few problems with the release. None is a major show
stopper, but the most significant so far is that I broke cmd_subscribe
so that email subscribe to the -subscribe or -join address or the
-request address with a bare 'subscribe' command results in the message
being shunted. A patch for this is attached, but I plan to make a patch
release probably next week.

--
Mark Sapiro <mark <at> msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

=== modified file 'Mailman/Commands/cmd_subscribe.py'
--- Mailman/Commands/cmd_subscribe.py	2008-03-20 03:07:51 +0000
+++ Mailman/Commands/cmd_subscribe.py	2008-04-23 14:32:48 +0000
 <at>  <at>  -71,7 +71,8  <at>  <at> 
             return STOP
         argnum += 1
     # Fix the password/digest issue
-    if digest is None and password.lower() in ('digest', 'nodigest'):
+    if (digest is None
+            and password and password.lower() in ('digest', 'nodigest')):
         if password.lower() == 'digest':
             digest = 1
         else: