Changelog for
mailman-2.1.14-10.5.1.i586.rpm :
Mon May 14 14:00:00 2012 vdziewieckiAATTsuse.com
-The last fix for bnc#697638 unfortunately added executable bits to all the files
in the /var/lib/mailman/archives directory (recursively), so I
changed it to modify only the permissions of
/var/lib/mailman/archives/private directory.
Thu Apr 26 14:00:00 2012 vdziewieckiAATTsuse.com
-Fixed bnc#697638 - VUL-1: mailman data leak, by changing directory
owners and permissions in spec file
-This also fixes bnc#750259, cloned as bnc#754623 - mailman logrotation
errors out because of non-root directory ownership
Wed Feb 23 13:00:00 2011 matejcikAATTsuse.cz
- fixed a XSS vulnerability in confirm.py (CVE-2011-0707, bnc#671745)
Mon Nov 15 13:00:00 2010 dmuellerAATTsuse.de
- update to 2.1.14:
- Two potential XSS vulnerabilities have been identified and fixed.
- Various i18n updates
- A new feature for controlling the addition/replacement of the Sender:
header in outgoing mail has been implemented. This allows a list owner
to set include_sender_header on the list\'s General Options page in the
admin GUI. The default for this setting is Yes which preserves the prior
behavior of removing any pre-existing Sender: and setting it to the
list\'s -bounces address. Setting this to No stops Mailman from adding or
modifying the Sender: at all.
- long list of bug fixes and enhancements, see included NEWS for details
Tue Nov 3 13:00:00 2009 cooloAATTnovell.com
- updated patches to apply with fuzz=0
Sun Nov 30 13:00:00 2008 rommelAATTsuse.de
- the previous \'fix\' of removing Mailman\'s own version of email was a bit crude
and broke Mailman in several places (bug #448530)
I replaced it with the upstream fix to \'configure\' by Barry Warshaw
(see http://bazaar.launchpad.net/~barry/mailman/py26/changes)
Wed Nov 12 13:00:00 2008 rommelAATTsuse.de
- added fix to work around md5/sha deprecation warning when hashlib is available
(mailman-python-26-deprecation-md5-sha.diff)
- removed group writable bit from /usr/lib/mailman/Mailman/
- removing Mailman\'s own version of email when building against >= Python 2.6
Tue Aug 26 14:00:00 2008 rommelAATTsuse.de
- version update to 2.1.11 (security fixes and small, but compatible enhancements)
- removed outdated (>4y) extra FAQ
- updated README.SuSE
- reworked (internally used) category patch + added referenced mm-text.png
Thu Mar 29 14:00:00 2007 roAATTsuse.de
- added pwdutils to buildreq
Fri Oct 20 14:00:00 2006 lmuelleAATTsuse.de
- ensure not to quote None if set in /etc/sysconfig/mailman:MAILMAN_MTA
Thu Oct 12 14:00:00 2006 rommelAATTsuse.de
- upgrade to Mailman 2.1.9 which
+ fixes some security issues (CVE-2006-2941, CVE-2006-3636, CVE-2006-2191)
+ adds support for languages \"Arabic\" and \"Vietnamese\"
+ makes the queue handling more robust
+ makes the handling of header/footers more robust