[Mailman-Users] Re: Critical security update for Mailman 2.1.5 and earlier

[Thomas Waters]

I'd like to issue a similar plea for assistance.  I have Mailman 2.1.3  
(default install on Panther Server)  If a very basic set of  
instructions could be prepared, step 1, step 2, step 3.. it would be  
extremely helpful.

On Feb 10, 2005, at 10:34 AM, John Swartzentruber wrote:

> On 2/10/2005 9:41 AM Barry Warsaw wrote:
>> Until Mailman 2.1.6 is released, the longer term fix is to apply this
>> patch:
>> 	http://www.list.org/CAN-2005-0202.txt
>
> Could an expert please help out a non-expert? I applied this patch to  
> /usr/lib/mailman/Mailman/Cgi, and the private.py file was correctly  
> patched. I'm not sure that this is enough, however, because the  
> private.pyc file wasn't changed, even after I restarted mailman.  
> Should I have patched the private.py file in the source, then gone  
> through the "make" and "make install" process?
>
> In short, how should this patch be applied?
>
> ------------------------------------------------------
> Mailman-Users mailing list
> Mailman-Users at python.org
> http://mail.python.org/mailman/listinfo/mailman-users
> Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
> Searchable Archives:  
> http://www.mail-archive.com/mailman-users%40python.org/
> Unsubscribe:  
> http://mail.python.org/mailman/options/mailman-users/ 
> rxweb%2B%40pitt.edu
>
NOTE: new email address
--
Thomas Waters
Director of Information and Communication Services
University of Pittsburgh School of Pharmacy
412-383-7471
waterstc at pitt.edu
http://www.pharmacy.pitt.edu