From mark at msapiro.net  Sat Apr  5 19:10:32 2008
From: mark at msapiro.net (Mark Sapiro)
Date: Sat, 05 Apr 2008 10:10:32 -0700
Subject: [Mailman-Announce] Mailman 2.1.10 final release schedule.
In-Reply-To: <47D9E26E.4040708@msapiro.net>
References: <47D9E26E.4040708@msapiro.net>
Message-ID: <47F7B288.6020801@msapiro.net>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

For translators who haven't yet updated their translations for 2.1.10
and for other interested parties, I plan to release a 2.1.10 release
candidate on April 14, 2008 and barring any issues with the RC, the
2.1.10 final on April 21, 2008.

Note to translators - the latest mailman.pot for the 2.1 branch is at
<https://code.launchpad.net/~mailman-coders/mailman/2.1>. The SVN
repository on sourceforge is no longer maintained and is out of date.

One way to get your updated translation to me is to register on
launchpad and make your own private branch off the 2.1 branch, update
your branch and publish it and send me a note when it's ready. Then I
can just merge your branch back into the 2.1 branch.

Of course, if you prefer, you can just send me your updated message
catalog and templates if any or make them available anywhere on the web
and tell me where to find them.

- --
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)

iD8DBQFH97KHVVuXXpU7hpMRAoSnAKCb9kN0WV7EVJ2KVqUX0yhPQjlkkQCgwfLx
UjpxqBDIR8yLPin2faeMr7M=
=yLBQ
-----END PGP SIGNATURE-----

From barry at list.org  Sat Apr  5 20:50:51 2008
From: barry at list.org (Barry Warsaw)
Date: Sat, 5 Apr 2008 14:50:51 -0400
Subject: [Mailman-Announce] Mailman 2.1.10 final release schedule.
In-Reply-To: <47F7B288.6020801@msapiro.net>
References: <47D9E26E.4040708@msapiro.net> <47F7B288.6020801@msapiro.net>
Message-ID: <5EC9708A-A3D7-4AE2-A2EE-23E1DBE074B7@list.org>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Apr 5, 2008, at 1:10 PM, Mark Sapiro wrote:
>
> For translators who haven't yet updated their translations for 2.1.10
> and for other interested parties, I plan to release a 2.1.10 release
> candidate on April 14, 2008 and barring any issues with the RC, the
> 2.1.10 final on April 21, 2008.

Sounds great, Mark.  Thanks!
- -Barry

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)

iEYEARECAAYFAkf3ygwACgkQ2YZpQepbvXFxGACgpa03tySXUxgGL8yuQCzD7zub
QeoAmwbL7R3SKQ+1K5aF9EiS8d3z5YiM
=t5NW
-----END PGP SIGNATURE-----

From barry at list.org  Wed Apr  9 04:10:58 2008
From: barry at list.org (Barry Warsaw)
Date: Tue, 8 Apr 2008 22:10:58 -0400
Subject: [Mailman-Announce] ANNOUNCE: GNU Mailman 3.0a1 (Leave That Thing
	Alone)
Message-ID: <9F78B9C5-2B6A-409D-8120-D94D5B8D4F49@list.org>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

After far too long, I'm finally happy to announce the availability of  
GNU Mailman version 3.0 alpha 1, code name "Leave That Thing Alone".

Hopefully, I needn't point out that this version is not suitable for  
production.  Instead, I'm making it available to provide an early  
snapshot of where Mailman 3 is going, and to give interested  
developers, users and integrators something real to play with.  I am  
looking forward to your feedback and contributions, and I hope you  
will at least download the package and give what works a try.

For now, I would prefer if all discussion about 3.0a1 were held on the  
mailman-developers mailing list.  Please don't submit bug reports to  
SourceForge; it's far too early for that.  Ideally, you'll be  
interested enough to create your own branches and push them to  
Launchpad for all of us to look at.

For detailed information on 3.0a1, please read docs/ALPHA.txt.  This  
will explain what works and what doesn't, how to run the test suite  
and how to actually create, populate, and deliver to some mailing  
lists.  Much does not yet work, but everything that does work is very  
well documented using Python's doctest framework.

Please note that Python 2.5 is required, but a C compiler is no longer  
needed.  You will need some third party packages, but everything you  
need is available in the Python Cheeseshop.

You can download both the tarball and egg file for 3.0a1 from the  
Cheeseshop as well:

     http://pypi.python.org/pypi/mailman/3.0.0a1

You'll probably want the source tarball.

I hope you will find this first snapshot useful and encouraging.   
Please participate!

Enjoy,
- -Barry

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)

iEYEARECAAYFAkf8JbMACgkQ2YZpQepbvXGtxgCguOrVEuZ61VnCe86nwkWHXGBm
b7sAoLn2fUbRLDmRdWusYxfsAu21FAxw
=eiPc
-----END PGP SIGNATURE-----

From mark at msapiro.net  Tue Apr 15 00:47:53 2008
From: mark at msapiro.net (Mark Sapiro)
Date: Mon, 14 Apr 2008 15:47:53 -0700
Subject: [Mailman-Announce] Mailman 2.1.10rc1 has been released
In-Reply-To: <47F7B288.6020801@msapiro.net>
References: <47D9E26E.4040708@msapiro.net> <47F7B288.6020801@msapiro.net>
Message-ID: <4803DF19.3030406@msapiro.net>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I am happy to announce the release of Mailman 2.1.10rc1.

This is a security and bug fix release and it is highly recommended
that all sites upgrade to this version. Mailman 2.1.10 also adds support
for three new language translations, Galician, Hebrew and Slovak and a
few new features.

Mailman is free software for managing email mailing lists and e-
newsletters. Mailman is used for all the python.org and
SourceForge.net mailing lists, as well as at hundreds of other sites.

For more information, including download links, please see:

http://www.list.org
http://mailman.sf.net
http://www.gnu.org/software/mailman

Special thanks are due to Barry Warsaw and Tokio Kikuchi for much coding
and support, Moritz Naumann for help with security issues and Jim
Tittsler for a significant patch.

Here's a list of the major changes.

Note in particular, the second item under Security as this is new since
2.1.10b4 and requires an mm_cfg.py change to maintain current behavior.


Security

- - The 2.1.9 fixes for CVE-2006-3636 were not complete.  In particular,
~  some potential cross-site scripting attacks were not detected in
~  editing templates and updating the list's info attribute via the web
~  admin interface.  This has been assigned CVE-2008-0564 and has been
~  fixed.  Thanks again to Moritz Naumann for assistance with this.

- - There is a new mm_cfg.py/Defaults.py variable
~  OWNERS_CAN_CHANGE_MEMBER_PASSWORDS which controls whether the list
~  owner can change a member's password from the member's options page.
~  This defaults to No and should be changed to Yes only if list owners
~  are trusted to not change a member's password, log in as the member
~  and make global membership changes.

New Features

- - Changed cmd_who.py to list all members if authorization is with the
~  list's admin or moderator password and to accept the password if the
~  roster is public.  Also changed the web roster to show hidden members
~  when authorization is by site or list's admin or moderator password
~  (1587651).

- - Added the ability to put a list name in accept_these_nonmembers
~  to accept posts from members of that list (1220144).

- - Added a new 'sibling list' feature to exclude members of another list
~  from receiving a post from this list if the other list is in the To:
~  or Cc: of the post or to include members of the other list if that
~  list is  not in the To: or Cc: of the post (Patch ID 1347962).

- - Added the admin_member_chunksize attribute to the admin General
~  Options interface (Bug 1072002, Partial RFE 782436).

Internationalization

- - Added the Hebrew translation from Dov Zamir.  This includes addition
~  of a direction ('ltr', 'rtl') to the LC_DESCRIPTIONS table.  The
~  add_language() function defaults direction to 'ltr' to not break
~  existing mm_cfg.py files.

- - Added the Slovak translation from Martin Matuska.

- - Added the Galician translation from Frco. Javier Rial Rodr?guez.


Changes since 2.1.10b4 include the OWNERS_CAN_CHANGE_MEMBER_PASSWORDS
setting mentioned above plus

- - Changed cmd_subscribe.py to properly accept (no)digest without a
~  password and to recognize (no)digest and address= case insensitively.

- - An updated mm-handler (mm-handler-2.1.10) that can help reduce
~  backscatter has been added to the contrib directory.

and updates to the Italian and Polish translations.

- --
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)

iD8DBQFIA98ZVVuXXpU7hpMRAm3uAKCngufNpjWZxTxIupg2X1dd5qSbLACgsAQX
xchWm2WMfDzXET53TeLxJcw=
=ZT1m
-----END PGP SIGNATURE-----

From mark at msapiro.net  Mon Apr 21 21:50:01 2008
From: mark at msapiro.net (Mark Sapiro)
Date: Mon, 21 Apr 2008 12:50:01 -0700
Subject: [Mailman-Announce] Mailman 2.1.10 has been released
In-Reply-To: <4803DF19.3030406@msapiro.net>
References: <47D9E26E.4040708@msapiro.net> <47F7B288.6020801@msapiro.net>
	<4803DF19.3030406@msapiro.net>
Message-ID: <480CEFE9.5000008@msapiro.net>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I am happy to announce the release of Mailman 2.1.10.

This is a security and bug fix release and it is highly recommended
that all sites upgrade to this version. Mailman 2.1.10 also adds support
for three new language translations, Galician, Hebrew and Slovak and a
few new features.

Mailman is free software for managing email mailing lists and e-
newsletters. Mailman is used for all the python.org and
SourceForge.net mailing lists, as well as at hundreds of other sites.

For more information, including download links, please see:

http://www.list.org
http://mailman.sf.net
http://www.gnu.org/software/mailman

Special thanks are due to Barry Warsaw and Tokio Kikuchi for much coding
and support, Moritz Naumann for help with security issues and Jim Tittsler
for a significant patch.

Here's a list of the major changes.

Security

- - The 2.1.9 fixes for CVE-2006-3636 were not complete.  In particular,
some potential cross-site scripting attacks were not detected in
editing templates and updating the list's info attribute via the web
admin interface.  This has been assigned CVE-2008-0564 and has been
fixed.  Thanks again to Moritz Naumann for assistance with this.

- - There is a new mm_cfg.py/Defaults.py variable
OWNERS_CAN_CHANGE_MEMBER_PASSWORDS which controls whether the list
owner can change a member's password from the member's options page.
This defaults to No and should be changed to Yes only if list owners
are trusted to not change a member's password, log in as the member
and make global membership changes.

Note: If you are not ready to upgrade, patches for these two issues
are available at
http://sourceforge.net/project/showfiles.php?group_id=103
in the 2.1.9 file list.

New Features

- - Changed cmd_who.py to list all members if authorization is with the
list's admin or moderator password and to accept the password if the
roster is public. Also changed the web roster to show hidden members
when authorization is by site or list's admin or moderator password
(1587651).

- - Added the ability to put a list name in accept_these_nonmembers
to accept posts from members of that list (1220144).

- - Added a new 'sibling list' feature to exclude members of another list
from receiving a post from this list if the other list is in the To: or
Cc: of the post or to include members of the other list if that list is
not in the To: or Cc: of the post (Patch ID 1347962).

- - Added the admin_member_chunksize attribute to the admin General Options
interface (Bug 1072002, Partial RFE 782436).

Internationalization

- - Added the Hebrew translation from Dov Zamir. This includes addition of
a direction ('ltr', 'rtl') to the LC_DESCRIPTIONS table. The
add_language() function defaults direction to 'ltr' to not break
existing mm_cfg.py files.

- - Added the Slovak translation from Martin Matuska.

- - Added the Galician translation from Frco. Javier Rial Rodr?guez.


- --
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)

iD8DBQFIDO/oVVuXXpU7hpMRAngiAKCwIOhSJJrCaY3afhGJQN339/dKuACeMckR
SI7DwCHcYONnIj3LoNYueC0=
=DO/d
-----END PGP SIGNATURE-----

From mark at msapiro.net  Mon Apr 21 21:50:01 2008
From: mark at msapiro.net (Mark Sapiro)
Date: Mon, 21 Apr 2008 12:50:01 -0700
Subject: [Mailman-Announce] [Mailman-Users] Mailman 2.1.10 has been released
In-Reply-To: <4803DF19.3030406@msapiro.net>
References: <47D9E26E.4040708@msapiro.net> <47F7B288.6020801@msapiro.net>
	<4803DF19.3030406@msapiro.net>
Message-ID: <480CEFE9.5000008@msapiro.net>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I am happy to announce the release of Mailman 2.1.10.

This is a security and bug fix release and it is highly recommended
that all sites upgrade to this version. Mailman 2.1.10 also adds support
for three new language translations, Galician, Hebrew and Slovak and a
few new features.

Mailman is free software for managing email mailing lists and e-
newsletters. Mailman is used for all the python.org and
SourceForge.net mailing lists, as well as at hundreds of other sites.

For more information, including download links, please see:

http://www.list.org
http://mailman.sf.net
http://www.gnu.org/software/mailman

Special thanks are due to Barry Warsaw and Tokio Kikuchi for much coding
and support, Moritz Naumann for help with security issues and Jim Tittsler
for a significant patch.

Here's a list of the major changes.

Security

- - The 2.1.9 fixes for CVE-2006-3636 were not complete.  In particular,
some potential cross-site scripting attacks were not detected in
editing templates and updating the list's info attribute via the web
admin interface.  This has been assigned CVE-2008-0564 and has been
fixed.  Thanks again to Moritz Naumann for assistance with this.

- - There is a new mm_cfg.py/Defaults.py variable
OWNERS_CAN_CHANGE_MEMBER_PASSWORDS which controls whether the list
owner can change a member's password from the member's options page.
This defaults to No and should be changed to Yes only if list owners
are trusted to not change a member's password, log in as the member
and make global membership changes.

Note: If you are not ready to upgrade, patches for these two issues
are available at
http://sourceforge.net/project/showfiles.php?group_id=103
in the 2.1.9 file list.

New Features

- - Changed cmd_who.py to list all members if authorization is with the
list's admin or moderator password and to accept the password if the
roster is public. Also changed the web roster to show hidden members
when authorization is by site or list's admin or moderator password
(1587651).

- - Added the ability to put a list name in accept_these_nonmembers
to accept posts from members of that list (1220144).

- - Added a new 'sibling list' feature to exclude members of another list
from receiving a post from this list if the other list is in the To: or
Cc: of the post or to include members of the other list if that list is
not in the To: or Cc: of the post (Patch ID 1347962).

- - Added the admin_member_chunksize attribute to the admin General Options
interface (Bug 1072002, Partial RFE 782436).

Internationalization

- - Added the Hebrew translation from Dov Zamir. This includes addition of
a direction ('ltr', 'rtl') to the LC_DESCRIPTIONS table. The
add_language() function defaults direction to 'ltr' to not break
existing mm_cfg.py files.

- - Added the Slovak translation from Martin Matuska.

- - Added the Galician translation from Frco. Javier Rial Rodr?guez.


- --
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)

iD8DBQFIDO/oVVuXXpU7hpMRAngiAKCwIOhSJJrCaY3afhGJQN339/dKuACeMckR
SI7DwCHcYONnIj3LoNYueC0=
=DO/d
-----END PGP SIGNATURE-----
------------------------------------------------------
Mailman-Users mailing list
Mailman-Users at python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: http://mail.python.org/mailman/options/mailman-users/spyropolymiadis%40kromestudios.com

Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=show&amp;file=faq01.027.htp


From barry at list.org  Tue Apr 22 00:31:41 2008
From: barry at list.org (Barry Warsaw)
Date: Mon, 21 Apr 2008 18:31:41 -0400
Subject: [Mailman-Announce] [Mailman-Developers] Mailman 2.1.10 has been
	released
In-Reply-To: <480CEFE9.5000008@msapiro.net>
References: <47D9E26E.4040708@msapiro.net> <47F7B288.6020801@msapiro.net>
	<4803DF19.3030406@msapiro.net> <480CEFE9.5000008@msapiro.net>
Message-ID: <4AD99A70-A16F-4E0B-8F06-D1F00FAD3257@list.org>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Apr 21, 2008, at 3:50 PM, Mark Sapiro wrote:

> I am happy to announce the release of Mailman 2.1.10.

Congratulations Mark!  Long live Mailman 2.2. :)

I will update the web sites.

- -Barry

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)

iEYEARECAAYFAkgNFc0ACgkQ2YZpQepbvXEQ0wCePrsNZ1cyXStsBpjMHR94o20H
HoEAn3Fv8D3WC3NCSkkjg9qIS5I5CzzP
=1UG9
-----END PGP SIGNATURE-----

From barry at list.org  Tue Apr 22 00:31:41 2008
From: barry at list.org (Barry Warsaw)
Date: Mon, 21 Apr 2008 18:31:41 -0400
Subject: [Mailman-Announce] [Mailman-Users] [Mailman-Developers] Mailman
	2.1.10 has been	released
In-Reply-To: <480CEFE9.5000008@msapiro.net>
References: <47D9E26E.4040708@msapiro.net> <47F7B288.6020801@msapiro.net>
	<4803DF19.3030406@msapiro.net> <480CEFE9.5000008@msapiro.net>
Message-ID: <4AD99A70-A16F-4E0B-8F06-D1F00FAD3257@list.org>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Apr 21, 2008, at 3:50 PM, Mark Sapiro wrote:

> I am happy to announce the release of Mailman 2.1.10.

Congratulations Mark!  Long live Mailman 2.2. :)

I will update the web sites.

- -Barry

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)

iEYEARECAAYFAkgNFc0ACgkQ2YZpQepbvXEQ0wCePrsNZ1cyXStsBpjMHR94o20H
HoEAn3Fv8D3WC3NCSkkjg9qIS5I5CzzP
=1UG9
-----END PGP SIGNATURE-----
------------------------------------------------------
Mailman-Users mailing list
Mailman-Users at python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: http://mail.python.org/mailman/options/mailman-users/spyropolymiadis%40kromestudios.com

Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=show&amp;file=faq01.027.htp


From mark at msapiro.net  Tue Apr 22 17:13:52 2008
From: mark at msapiro.net (Mark Sapiro)
Date: Tue, 22 Apr 2008 08:13:52 -0700
Subject: [Mailman-Announce] Important Mailman 2.1.9 to 2.1.10 upgrade note.
Message-ID: <480E00B0.1010808@msapiro.net>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Actually, this note really applies to just restarting mailman a Mailman
2.1.9 installation, with or without upgrading to Mailman 2.1.10. But in
installations that just 'run' without intervention, this restart may not
occur until an upgrade.

There is an error in Mailman 2.1.9. In the introduction of the backup
and recovery of queue entries, we neglected to remove the backup queue
entry for an unparseable message. Thus, if you sometimes receive
unparseable messages which are ignored, you may have an accumulation of
.bak files in qfiles/in from these messages. When you restart Mailman,
these will all be reprocessed, resulting in a flood of error log entries.

There is no real harm done, but it would be a good idea when upgrading
to stop Mailman and remove any qfiles/in/*.bak files.

- --
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)

iD8DBQFIDgCwVVuXXpU7hpMRAlOyAJ4/VpFnCL9JHoEBSl4PmZIBowTbigCgjjRr
Bh8FoeuGZDAXonphAnvqwMA=
=qt1K
-----END PGP SIGNATURE-----

From mark at msapiro.net  Wed Apr 23 17:12:47 2008
From: mark at msapiro.net (Mark Sapiro)
Date: Wed, 23 Apr 2008 08:12:47 -0700
Subject: [Mailman-Announce] Mailman 2.1.10 has been released
In-Reply-To: <480CEFE9.5000008@msapiro.net>
References: <47D9E26E.4040708@msapiro.net> <47F7B288.6020801@msapiro.net>
	<4803DF19.3030406@msapiro.net> <480CEFE9.5000008@msapiro.net>
Message-ID: <480F51EF.6040702@msapiro.net>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Mark Sapiro wrote:
| I am happy to announce the release of Mailman 2.1.10.


I have discovered a few problems with the release. None is a major show
stopper, but the most significant so far is that I broke cmd_subscribe
so that email subscribe to the -subscribe or -join address or the
- -request address with a bare 'subscribe' command results in the message
being shunted. A patch for this is attached, but I plan to make a patch
release probably next week.

- --
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)

iD8DBQFID1HvVVuXXpU7hpMRAm+3AKD2otRNTXWYSRjguJEYVc0HRVflhACZAVXf
Kao5NWvpiRQ9U9keKT2Jbj8=
=1NSl
-----END PGP SIGNATURE-----
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: 2.1.10.patch2.txt
URL: <http://mail.python.org/pipermail/mailman-announce/attachments/20080423/2d6995cd/attachment.txt>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 2.1.10.patch2.txt.sig
Type: application/octet-stream
Size: 65 bytes
Desc: not available
URL: <http://mail.python.org/pipermail/mailman-announce/attachments/20080423/2d6995cd/attachment.obj>