diff options
Diffstat (limited to 'admin')
31 files changed, 679 insertions, 104 deletions
diff --git a/admin/www/CAN-2005-0202.txt b/admin/www/CAN-2005-0202.txt new file mode 100644 index 00000000..4c8cd240 --- /dev/null +++ b/admin/www/CAN-2005-0202.txt @@ -0,0 +1,34 @@ +Index: private.py +=================================================================== +RCS file: /cvsroot/mailman/mailman/Mailman/Cgi/private.py,v +retrieving revision 2.16.2.1 +diff -u -r2.16.2.1 private.py +--- private.py 8 Feb 2003 07:13:50 -0000 2.16.2.1 ++++ private.py 10 Feb 2005 03:34:21 -0000 +@@ -1,4 +1,4 @@ +-# Copyright (C) 1998-2003 by the Free Software Foundation, Inc. ++# Copyright (C) 1998-2005 by the Free Software Foundation, Inc. + # + # This program is free software; you can redistribute it and/or + # modify it under the terms of the GNU General Public License +@@ -35,13 +35,17 @@ + _ = i18n._ + i18n.set_language(mm_cfg.DEFAULT_SERVER_LANGUAGE) + ++SLASH = '/' ++ + + + def true_path(path): + "Ensure that the path is safe by removing .." +- path = path.replace('../', '') +- path = path.replace('./', '') +- return path[1:] ++ parts = path.split(SLASH) ++ safe = [x for x in parts if x not in ('.', '..')] ++ if parts <> safe: ++ syslog('mischief', 'Directory traversal attack thwarted') ++ return SLASH.join(safe)[1:] + + + diff --git a/admin/www/MMGenerator.py b/admin/www/MMGenerator.py index df632984..73842183 100644 --- a/admin/www/MMGenerator.py +++ b/admin/www/MMGenerator.py @@ -17,8 +17,10 @@ from LinkFixer import LinkFixer sitelinks = [ # Row 1 ('%(rootdir)s/index.html', 'Home'), + ('%(rootdir)s/security.html', 'Security'), ('%(rootdir)s/docs.html', 'Documentation'), ('%(rootdir)s/lists.html', 'Mailing lists'), + (None, ' '), ('%(rootdir)s/help.html', 'Help'), ('%(rootdir)s/download.html', 'Download'), ('%(rootdir)s/devs.html', 'Developers'), @@ -61,7 +63,7 @@ entire article is permitted in any medium, provided this notice is preserved. # sitelink_fixer = LinkFixer(f.myurl(), rootdir) sitelink_fixer.massage(sitelinks, self.__d, aboves=1) - Banner.__init__(self, sitelinks, cols=3) + Banner.__init__(self, sitelinks, cols=4) # kludge! ## for i in range(len(p.sidebar)-1, -1, -1): ## if p.sidebar[i] == 'Email Us': diff --git a/admin/www/admins.html b/admin/www/admins.html index 00a2101f..97f3fefd 100644 --- a/admin/www/admins.html +++ b/admin/www/admins.html @@ -2,7 +2,7 @@ "http://www.w3.org/TR/html4/loose.dtd" > <html> <!-- THIS PAGE IS AUTOMATICALLY GENERATED. DO NOT EDIT. --> -<!-- Mon Dec 13 23:13:54 2004 --> +<!-- Thu Feb 10 08:31:47 2005 --> <!-- USING HT2HTML 2.0 --> <!-- SEE http://ht2html.sf.net --> <!-- User-specified headers: @@ -45,6 +45,9 @@ body { margin: 0px; } <a href="./index.html">Home</a> </td> <td bgcolor="#eecfa1"> +<a href="./security.html">Security</a> + </td> + <td bgcolor="#eecfa1"> <a href="./docs.html">Documentation</a> </td> <td bgcolor="#eecfa1"> @@ -52,6 +55,9 @@ body { margin: 0px; } </td> </tr><tr> <td bgcolor="#eecfa1"> + + </td> + <td bgcolor="#eecfa1"> <a href="./help.html">Help</a> </td> <td bgcolor="#eecfa1"> @@ -78,6 +84,9 @@ Overview <a href="index.html">Home</a> </td></tr> <tr><td bgcolor="#eecfa1"> +<a href="security.html"><b>Security</b></li> +</td></tr> +<tr><td bgcolor="#eecfa1"> <a href="features.html">Features</a> </td></tr> <tr><td bgcolor="#eecfa1"> @@ -158,7 +167,7 @@ Email Us </td></tr> <tr><td bgcolor="#eecfa1"> -© 1998-2004 +© 1998-2005 Free Software Foundation, Inc. Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved. diff --git a/admin/www/bugs.html b/admin/www/bugs.html index 88ad3c09..b0b7d3b7 100644 --- a/admin/www/bugs.html +++ b/admin/www/bugs.html @@ -2,7 +2,7 @@ "http://www.w3.org/TR/html4/loose.dtd" > <html> <!-- THIS PAGE IS AUTOMATICALLY GENERATED. DO NOT EDIT. --> -<!-- Wed Dec 22 09:46:04 2004 --> +<!-- Thu Feb 10 08:31:47 2005 --> <!-- USING HT2HTML 2.0 --> <!-- SEE http://ht2html.sf.net --> <!-- User-specified headers: @@ -45,6 +45,9 @@ body { margin: 0px; } <a href="./index.html">Home</a> </td> <td bgcolor="#eecfa1"> +<a href="./security.html">Security</a> + </td> + <td bgcolor="#eecfa1"> <a href="./docs.html">Documentation</a> </td> <td bgcolor="#eecfa1"> @@ -52,6 +55,9 @@ body { margin: 0px; } </td> </tr><tr> <td bgcolor="#eecfa1"> + + </td> + <td bgcolor="#eecfa1"> <a href="./help.html">Help</a> </td> <td bgcolor="#eecfa1"> @@ -78,6 +84,9 @@ Overview <a href="index.html">Home</a> </td></tr> <tr><td bgcolor="#eecfa1"> +<a href="security.html"><b>Security</b></li> +</td></tr> +<tr><td bgcolor="#eecfa1"> <a href="features.html">Features</a> </td></tr> <tr><td bgcolor="#eecfa1"> @@ -133,7 +142,7 @@ Email Us </td></tr> <tr><td bgcolor="#eecfa1"> -© 1998-2004 +© 1998-2005 Free Software Foundation, Inc. Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved. diff --git a/admin/www/devs.html b/admin/www/devs.html index 359dea83..88a3fbb4 100644 --- a/admin/www/devs.html +++ b/admin/www/devs.html @@ -2,7 +2,7 @@ "http://www.w3.org/TR/html4/loose.dtd" > <html> <!-- THIS PAGE IS AUTOMATICALLY GENERATED. DO NOT EDIT. --> -<!-- Sun Sep 21 23:42:27 2003 --> +<!-- Thu Feb 10 08:31:47 2005 --> <!-- USING HT2HTML 2.0 --> <!-- SEE http://ht2html.sf.net --> <!-- User-specified headers: @@ -12,8 +12,8 @@ Title: Mailman Developer Resources <head> <title>Mailman Developer Resources</title> -<meta http-equiv="Content-Type" content="text/html; charset=us-ascii" /> -<meta name="generator" content="HT2HTML/2.0" /> +<meta http-equiv="Content-Type" content="text/html; charset=us-ascii" > +<meta name="generator" content="HT2HTML/2.0" > <style type="text/css"> body { margin: 0px; } </style> @@ -38,13 +38,16 @@ body { margin: 0px; } <td width="90%" bgcolor="#eecfa1" class="banner"> <!-- start of site links table --> <table width="100%" border="0" -CELLSPACING=0 CELLPADDING=0 + CELLSPACING=0 CELLPADDING=0 bgcolor="#ffffff"> <tr> <td bgcolor="#eecfa1"> <a href="./index.html">Home</a> </td> <td bgcolor="#eecfa1"> +<a href="./security.html">Security</a> + </td> + <td bgcolor="#eecfa1"> <a href="./docs.html">Documentation</a> </td> <td bgcolor="#eecfa1"> @@ -52,6 +55,9 @@ CELLSPACING=0 CELLPADDING=0 </td> </tr><tr> <td bgcolor="#eecfa1"> + + </td> + <td bgcolor="#eecfa1"> <a href="./help.html">Help</a> </td> <td bgcolor="#eecfa1"> @@ -111,7 +117,7 @@ Email Us </td></tr> <tr><td bgcolor="#eecfa1"> -© 1998-2003 +© 1998-2005 Free Software Foundation, Inc. Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved. @@ -122,7 +128,7 @@ entire article is permitted in any medium, provided this notice is preserved. <td width="15"> </td><!--spacer--> <!-- end of sidebar cell --> <!-- start of body cell --> -<td valign="top" width="90%" class="body"><br /> +<td valign="top" width="90%" class="body"><br> <h3>Developer Resources</h3> If you're the kind of person who loves to get elbow deep in code, diff --git a/admin/www/docs.html b/admin/www/docs.html index e015f616..877c1f21 100644 --- a/admin/www/docs.html +++ b/admin/www/docs.html @@ -2,7 +2,7 @@ "http://www.w3.org/TR/html4/loose.dtd" > <html> <!-- THIS PAGE IS AUTOMATICALLY GENERATED. DO NOT EDIT. --> -<!-- Mon Dec 13 23:13:54 2004 --> +<!-- Thu Feb 10 08:31:47 2005 --> <!-- USING HT2HTML 2.0 --> <!-- SEE http://ht2html.sf.net --> <!-- User-specified headers: @@ -45,6 +45,9 @@ body { margin: 0px; } <a href="./index.html">Home</a> </td> <td bgcolor="#eecfa1"> +<a href="./security.html">Security</a> + </td> + <td bgcolor="#eecfa1"> <b>Documentation</b> </td> <td bgcolor="#eecfa1"> @@ -52,6 +55,9 @@ body { margin: 0px; } </td> </tr><tr> <td bgcolor="#eecfa1"> + + </td> + <td bgcolor="#eecfa1"> <a href="./help.html">Help</a> </td> <td bgcolor="#eecfa1"> @@ -78,6 +84,9 @@ Overview <a href="index.html">Home</a> </td></tr> <tr><td bgcolor="#eecfa1"> +<a href="security.html"><b>Security</b></li> +</td></tr> +<tr><td bgcolor="#eecfa1"> <a href="features.html">Features</a> </td></tr> <tr><td bgcolor="#eecfa1"> @@ -152,7 +161,7 @@ Email Us </td></tr> <tr><td bgcolor="#eecfa1"> -© 1998-2004 +© 1998-2005 Free Software Foundation, Inc. Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved. diff --git a/admin/www/download.html b/admin/www/download.html index f1dda9ba..a5f32515 100644 --- a/admin/www/download.html +++ b/admin/www/download.html @@ -2,7 +2,7 @@ "http://www.w3.org/TR/html4/loose.dtd" > <html> <!-- THIS PAGE IS AUTOMATICALLY GENERATED. DO NOT EDIT. --> -<!-- Wed Dec 31 13:01:17 2003 --> +<!-- Thu Feb 10 08:31:47 2005 --> <!-- USING HT2HTML 2.0 --> <!-- SEE http://ht2html.sf.net --> <!-- User-specified headers: @@ -12,8 +12,8 @@ Title: Downloading Mailman <head> <title>Downloading Mailman</title> -<meta http-equiv="Content-Type" content="text/html; charset=us-ascii" /> -<meta name="generator" content="HT2HTML/2.0" /> +<meta http-equiv="Content-Type" content="text/html; charset=us-ascii" > +<meta name="generator" content="HT2HTML/2.0" > <style type="text/css"> body { margin: 0px; } </style> @@ -38,13 +38,16 @@ body { margin: 0px; } <td width="90%" bgcolor="#eecfa1" class="banner"> <!-- start of site links table --> <table width="100%" border="0" -CELLSPACING=0 CELLPADDING=0 + CELLSPACING=0 CELLPADDING=0 bgcolor="#ffffff"> <tr> <td bgcolor="#eecfa1"> <a href="./index.html">Home</a> </td> <td bgcolor="#eecfa1"> +<a href="./security.html">Security</a> + </td> + <td bgcolor="#eecfa1"> <a href="./docs.html">Documentation</a> </td> <td bgcolor="#eecfa1"> @@ -52,6 +55,9 @@ CELLSPACING=0 CELLPADDING=0 </td> </tr><tr> <td bgcolor="#eecfa1"> + + </td> + <td bgcolor="#eecfa1"> <a href="./help.html">Help</a> </td> <td bgcolor="#eecfa1"> @@ -78,6 +84,9 @@ Overview <a href="index.html">Home</a> </td></tr> <tr><td bgcolor="#eecfa1"> +<a href="security.html"><b>Security</b></li> +</td></tr> +<tr><td bgcolor="#eecfa1"> <a href="features.html">Features</a> </td></tr> <tr><td bgcolor="#eecfa1"> @@ -155,7 +164,7 @@ Email Us </td></tr> <tr><td bgcolor="#eecfa1"> -© 1998-2003 +© 1998-2005 Free Software Foundation, Inc. Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved. @@ -166,7 +175,7 @@ entire article is permitted in any medium, provided this notice is preserved. <td width="15"> </td><!--spacer--> <!-- end of sidebar cell --> <!-- start of body cell --> -<td valign="top" width="90%" class="body"><br /> +<td valign="top" width="90%" class="body"><br> <h3>Requirements</h3> You must have a mail server (MTA) that you can send messages to, and a diff --git a/admin/www/faq.html b/admin/www/faq.html index 74c4fcfa..8f5c4b7c 100644 --- a/admin/www/faq.html +++ b/admin/www/faq.html @@ -2,7 +2,7 @@ "http://www.w3.org/TR/html4/loose.dtd" > <html> <!-- THIS PAGE IS AUTOMATICALLY GENERATED. DO NOT EDIT. --> -<!-- Sun Sep 21 23:42:32 2003 --> +<!-- Thu Feb 10 08:31:48 2005 --> <!-- USING HT2HTML 2.0 --> <!-- SEE http://ht2html.sf.net --> <!-- User-specified headers: @@ -12,8 +12,8 @@ Title: Mailman Frequently Asked Questions <head> <title>Mailman Frequently Asked Questions</title> -<meta http-equiv="Content-Type" content="text/html; charset=us-ascii" /> -<meta name="generator" content="HT2HTML/2.0" /> +<meta http-equiv="Content-Type" content="text/html; charset=us-ascii" > +<meta name="generator" content="HT2HTML/2.0" > <style type="text/css"> body { margin: 0px; } </style> @@ -38,13 +38,16 @@ body { margin: 0px; } <td width="90%" bgcolor="#eecfa1" class="banner"> <!-- start of site links table --> <table width="100%" border="0" -CELLSPACING=0 CELLPADDING=0 + CELLSPACING=0 CELLPADDING=0 bgcolor="#ffffff"> <tr> <td bgcolor="#eecfa1"> <a href="./index.html">Home</a> </td> <td bgcolor="#eecfa1"> +<a href="./security.html">Security</a> + </td> + <td bgcolor="#eecfa1"> <a href="./docs.html">Documentation</a> </td> <td bgcolor="#eecfa1"> @@ -52,6 +55,9 @@ CELLSPACING=0 CELLPADDING=0 </td> </tr><tr> <td bgcolor="#eecfa1"> + + </td> + <td bgcolor="#eecfa1"> <a href="./help.html">Help</a> </td> <td bgcolor="#eecfa1"> @@ -78,6 +84,9 @@ Overview <a href="index.html">Home</a> </td></tr> <tr><td bgcolor="#eecfa1"> +<a href="security.html"><b>Security</b></li> +</td></tr> +<tr><td bgcolor="#eecfa1"> <a href="features.html">Features</a> </td></tr> <tr><td bgcolor="#eecfa1"> @@ -139,7 +148,7 @@ Email Us </td></tr> <tr><td bgcolor="#eecfa1"> -© 1998-2003 +© 1998-2005 Free Software Foundation, Inc. Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved. @@ -150,7 +159,7 @@ entire article is permitted in any medium, provided this notice is preserved. <td width="15"> </td><!--spacer--> <!-- end of sidebar cell --> <!-- start of body cell --> -<td valign="top" width="90%" class="body"><br /> +<td valign="top" width="90%" class="body"><br> See also the <a href="http://www.python.org/cgi-bin/faqw-mm.py">Mailman FAQ Wizard</a> for more information. diff --git a/admin/www/features.html b/admin/www/features.html index 87073190..35bc252f 100644 --- a/admin/www/features.html +++ b/admin/www/features.html @@ -2,7 +2,7 @@ "http://www.w3.org/TR/html4/loose.dtd" > <html> <!-- THIS PAGE IS AUTOMATICALLY GENERATED. DO NOT EDIT. --> -<!-- Sun Sep 21 23:42:28 2003 --> +<!-- Thu Feb 10 08:31:47 2005 --> <!-- USING HT2HTML 2.0 --> <!-- SEE http://ht2html.sf.net --> <!-- User-specified headers: @@ -12,8 +12,8 @@ Title: Mailman Features <head> <title>Mailman Features</title> -<meta http-equiv="Content-Type" content="text/html; charset=us-ascii" /> -<meta name="generator" content="HT2HTML/2.0" /> +<meta http-equiv="Content-Type" content="text/html; charset=us-ascii" > +<meta name="generator" content="HT2HTML/2.0" > <style type="text/css"> body { margin: 0px; } </style> @@ -38,13 +38,16 @@ body { margin: 0px; } <td width="90%" bgcolor="#eecfa1" class="banner"> <!-- start of site links table --> <table width="100%" border="0" -CELLSPACING=0 CELLPADDING=0 + CELLSPACING=0 CELLPADDING=0 bgcolor="#ffffff"> <tr> <td bgcolor="#eecfa1"> <a href="./index.html">Home</a> </td> <td bgcolor="#eecfa1"> +<a href="./security.html">Security</a> + </td> + <td bgcolor="#eecfa1"> <a href="./docs.html">Documentation</a> </td> <td bgcolor="#eecfa1"> @@ -52,6 +55,9 @@ CELLSPACING=0 CELLPADDING=0 </td> </tr><tr> <td bgcolor="#eecfa1"> + + </td> + <td bgcolor="#eecfa1"> <a href="./help.html">Help</a> </td> <td bgcolor="#eecfa1"> @@ -78,6 +84,9 @@ Overview <a href="index.html">Home</a> </td></tr> <tr><td bgcolor="#eecfa1"> +<a href="security.html"><b>Security</b></li> +</td></tr> +<tr><td bgcolor="#eecfa1"> <b>Features</b> </td></tr> <tr><td bgcolor="#eecfa1"> @@ -127,7 +136,7 @@ Email Us </td></tr> <tr><td bgcolor="#eecfa1"> -© 1998-2003 +© 1998-2005 Free Software Foundation, Inc. Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved. @@ -138,7 +147,7 @@ entire article is permitted in any medium, provided this notice is preserved. <td width="15"> </td><!--spacer--> <!-- end of sidebar cell --> <!-- start of body cell --> -<td valign="top" width="90%" class="body"><br /> +<td valign="top" width="90%" class="body"><br> <h3>Mailman Features</h3> Here's a brief description of the new features in Mailman 2.1 diff --git a/admin/www/help.html b/admin/www/help.html index a36cf262..0e6e5e1b 100644 --- a/admin/www/help.html +++ b/admin/www/help.html @@ -2,7 +2,7 @@ "http://www.w3.org/TR/html4/loose.dtd" > <html> <!-- THIS PAGE IS AUTOMATICALLY GENERATED. DO NOT EDIT. --> -<!-- Sun Sep 21 23:42:28 2003 --> +<!-- Thu Feb 10 08:31:47 2005 --> <!-- USING HT2HTML 2.0 --> <!-- SEE http://ht2html.sf.net --> <!-- User-specified headers: @@ -12,8 +12,8 @@ Title: Mailman Help <head> <title>Mailman Help</title> -<meta http-equiv="Content-Type" content="text/html; charset=us-ascii" /> -<meta name="generator" content="HT2HTML/2.0" /> +<meta http-equiv="Content-Type" content="text/html; charset=us-ascii" > +<meta name="generator" content="HT2HTML/2.0" > <style type="text/css"> body { margin: 0px; } </style> @@ -38,13 +38,16 @@ body { margin: 0px; } <td width="90%" bgcolor="#eecfa1" class="banner"> <!-- start of site links table --> <table width="100%" border="0" -CELLSPACING=0 CELLPADDING=0 + CELLSPACING=0 CELLPADDING=0 bgcolor="#ffffff"> <tr> <td bgcolor="#eecfa1"> <a href="./index.html">Home</a> </td> <td bgcolor="#eecfa1"> +<a href="./security.html">Security</a> + </td> + <td bgcolor="#eecfa1"> <a href="./docs.html">Documentation</a> </td> <td bgcolor="#eecfa1"> @@ -52,6 +55,9 @@ CELLSPACING=0 CELLPADDING=0 </td> </tr><tr> <td bgcolor="#eecfa1"> + + </td> + <td bgcolor="#eecfa1"> <b>Help</b> </td> <td bgcolor="#eecfa1"> @@ -78,6 +84,9 @@ Overview <a href="index.html">Home</a> </td></tr> <tr><td bgcolor="#eecfa1"> +<a href="security.html"><b>Security</b></li> +</td></tr> +<tr><td bgcolor="#eecfa1"> <a href="features.html">Features</a> </td></tr> <tr><td bgcolor="#eecfa1"> @@ -134,7 +143,7 @@ Email Us </td></tr> <tr><td bgcolor="#eecfa1"> -© 1998-2003 +© 1998-2005 Free Software Foundation, Inc. Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved. @@ -145,7 +154,7 @@ entire article is permitted in any medium, provided this notice is preserved. <td width="15"> </td><!--spacer--> <!-- end of sidebar cell --> <!-- start of body cell --> -<td valign="top" width="90%" class="body"><br /> +<td valign="top" width="90%" class="body"><br> <h3>Help</h3> There are many resources available for those who need help with diff --git a/admin/www/i18n.html b/admin/www/i18n.html index 3b3b24ae..42420f1f 100644 --- a/admin/www/i18n.html +++ b/admin/www/i18n.html @@ -2,7 +2,7 @@ "http://www.w3.org/TR/html4/loose.dtd" > <html> <!-- THIS PAGE IS AUTOMATICALLY GENERATED. DO NOT EDIT. --> -<!-- Sun Nov 14 19:55:29 2004 --> +<!-- Thu Feb 10 08:31:47 2005 --> <!-- USING HT2HTML 2.0 --> <!-- SEE http://ht2html.sf.net --> <!-- User-specified headers: @@ -45,6 +45,9 @@ body { margin: 0px; } <a href="./index.html">Home</a> </td> <td bgcolor="#eecfa1"> +<a href="./security.html">Security</a> + </td> + <td bgcolor="#eecfa1"> <a href="./docs.html">Documentation</a> </td> <td bgcolor="#eecfa1"> @@ -52,6 +55,9 @@ body { margin: 0px; } </td> </tr><tr> <td bgcolor="#eecfa1"> + + </td> + <td bgcolor="#eecfa1"> <a href="./help.html">Help</a> </td> <td bgcolor="#eecfa1"> @@ -78,6 +84,9 @@ Overview <a href="index.html">Home</a> </td></tr> <tr><td bgcolor="#eecfa1"> +<a href="security.html"><b>Security</b></li> +</td></tr> +<tr><td bgcolor="#eecfa1"> <a href="features.html">Features</a> </td></tr> <tr><td bgcolor="#eecfa1"> @@ -158,7 +167,7 @@ Email Us </td></tr> <tr><td bgcolor="#eecfa1"> -© 1998-2004 +© 1998-2005 Free Software Foundation, Inc. Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved. diff --git a/admin/www/index.ht b/admin/www/index.ht index 62ad75a0..ddc48f98 100644 --- a/admin/www/index.ht +++ b/admin/www/index.ht @@ -29,6 +29,10 @@ with a capital leading <em>M</em> and a lowercase second <em>m</em>. It is incorrect to spell it "MailMan" (i.e. you should not use StudlyCaps). +<p>See the <a href="security.html">Security page</a> for important security +related information, including critical patches and contact information for +reporting suspected security vulnerabilities. + <h3>Current Version</h3> <p>Version @@ -42,7 +46,8 @@ sites. <p>Mailman's lead developer is <a href="http://barry.warsaw.us">Barry Warsaw</a> who can be contacted -at <a href="mailto:barry@python.org">barry@python.org</a>. +<a href="mailto:%62%61%72%72%79%40%70%79%74%68%6F%6E%2E%6F%72%67" +>barry at python dot org</a>. <p>Thanks go to <a href="http://www.control.com/">Control.com</a> for their diff --git a/admin/www/index.html b/admin/www/index.html index 3df1c230..469032b3 100644 --- a/admin/www/index.html +++ b/admin/www/index.html @@ -2,7 +2,7 @@ "http://www.w3.org/TR/html4/loose.dtd" > <html> <!-- THIS PAGE IS AUTOMATICALLY GENERATED. DO NOT EDIT. --> -<!-- Sun Jan 16 17:07:21 2005 --> +<!-- Thu Feb 10 08:33:41 2005 --> <!-- USING HT2HTML 2.0 --> <!-- SEE http://ht2html.sf.net --> <!-- User-specified headers: @@ -45,6 +45,9 @@ body { margin: 0px; } <b>Home</b> </td> <td bgcolor="#eecfa1"> +<a href="./security.html">Security</a> + </td> + <td bgcolor="#eecfa1"> <a href="./docs.html">Documentation</a> </td> <td bgcolor="#eecfa1"> @@ -52,6 +55,9 @@ body { margin: 0px; } </td> </tr><tr> <td bgcolor="#eecfa1"> + + </td> + <td bgcolor="#eecfa1"> <a href="./help.html">Help</a> </td> <td bgcolor="#eecfa1"> @@ -78,6 +84,9 @@ Overview <b>Home</b> </td></tr> <tr><td bgcolor="#eecfa1"> +<a href="security.html"><b>Security</b></li> +</td></tr> +<tr><td bgcolor="#eecfa1"> <a href="features.html">Features</a> </td></tr> <tr><td bgcolor="#eecfa1"> @@ -173,6 +182,10 @@ with a capital leading <em>M</em> and a lowercase second <em>m</em>. It is incorrect to spell it "MailMan" (i.e. you should not use StudlyCaps). +<p>See the <a href="security.html">Security page</a> for important security +related information, including critical patches and contact information for +reporting suspected security vulnerabilities. + <h3>Current Version</h3> <p>Version @@ -186,7 +199,8 @@ sites. <p>Mailman's lead developer is <a href="http://barry.warsaw.us">Barry Warsaw</a> who can be contacted -at <a href="mailto:barry@python.org">barry@python.org</a>. +<a href="mailto:%62%61%72%72%79%40%70%79%74%68%6F%6E%2E%6F%72%67" +>barry at python dot org</a>. <p>Thanks go to <a href="http://www.control.com/">Control.com</a> for their diff --git a/admin/www/install.html b/admin/www/install.html index 0d1a82eb..8f9ccf20 100644 --- a/admin/www/install.html +++ b/admin/www/install.html @@ -2,7 +2,7 @@ "http://www.w3.org/TR/html4/loose.dtd" > <html> <!-- THIS PAGE IS AUTOMATICALLY GENERATED. DO NOT EDIT. --> -<!-- Sun Sep 21 23:42:29 2003 --> +<!-- Thu Feb 10 08:31:47 2005 --> <!-- USING HT2HTML 2.0 --> <!-- SEE http://ht2html.sf.net --> <!-- User-specified headers: @@ -12,8 +12,8 @@ Title: Installing Mailman <head> <title>Installing Mailman</title> -<meta http-equiv="Content-Type" content="text/html; charset=us-ascii" /> -<meta name="generator" content="HT2HTML/2.0" /> +<meta http-equiv="Content-Type" content="text/html; charset=us-ascii" > +<meta name="generator" content="HT2HTML/2.0" > <style type="text/css"> body { margin: 0px; } </style> @@ -38,13 +38,16 @@ body { margin: 0px; } <td width="90%" bgcolor="#eecfa1" class="banner"> <!-- start of site links table --> <table width="100%" border="0" -CELLSPACING=0 CELLPADDING=0 + CELLSPACING=0 CELLPADDING=0 bgcolor="#ffffff"> <tr> <td bgcolor="#eecfa1"> <a href="./index.html">Home</a> </td> <td bgcolor="#eecfa1"> +<a href="./security.html">Security</a> + </td> + <td bgcolor="#eecfa1"> <a href="./docs.html">Documentation</a> </td> <td bgcolor="#eecfa1"> @@ -52,6 +55,9 @@ CELLSPACING=0 CELLPADDING=0 </td> </tr><tr> <td bgcolor="#eecfa1"> + + </td> + <td bgcolor="#eecfa1"> <a href="./help.html">Help</a> </td> <td bgcolor="#eecfa1"> @@ -78,6 +84,9 @@ Overview <a href="index.html">Home</a> </td></tr> <tr><td bgcolor="#eecfa1"> +<a href="security.html"><b>Security</b></li> +</td></tr> +<tr><td bgcolor="#eecfa1"> <a href="features.html">Features</a> </td></tr> <tr><td bgcolor="#eecfa1"> @@ -155,7 +164,7 @@ Email Us </td></tr> <tr><td bgcolor="#eecfa1"> -© 1998-2003 +© 1998-2005 Free Software Foundation, Inc. Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved. @@ -166,7 +175,7 @@ entire article is permitted in any medium, provided this notice is preserved. <td width="15"> </td><!--spacer--> <!-- end of sidebar cell --> <!-- start of body cell --> -<td valign="top" width="90%" class="body"><br /> +<td valign="top" width="90%" class="body"><br> <h3>Installing Mailman</h3> For detailed installation instructions, please see the diff --git a/admin/www/inthenews.html b/admin/www/inthenews.html index fc207176..8e3bb2d4 100644 --- a/admin/www/inthenews.html +++ b/admin/www/inthenews.html @@ -2,7 +2,7 @@ "http://www.w3.org/TR/html4/loose.dtd" > <html> <!-- THIS PAGE IS AUTOMATICALLY GENERATED. DO NOT EDIT. --> -<!-- Sat Jan 29 17:50:35 2005 --> +<!-- Thu Feb 10 08:31:48 2005 --> <!-- USING HT2HTML 2.0 --> <!-- SEE http://ht2html.sf.net --> <!-- User-specified headers: @@ -45,6 +45,9 @@ body { margin: 0px; } <a href="./index.html">Home</a> </td> <td bgcolor="#eecfa1"> +<a href="./security.html">Security</a> + </td> + <td bgcolor="#eecfa1"> <a href="./docs.html">Documentation</a> </td> <td bgcolor="#eecfa1"> @@ -52,6 +55,9 @@ body { margin: 0px; } </td> </tr><tr> <td bgcolor="#eecfa1"> + + </td> + <td bgcolor="#eecfa1"> <a href="./help.html">Help</a> </td> <td bgcolor="#eecfa1"> @@ -78,6 +84,9 @@ Overview <a href="index.html">Home</a> </td></tr> <tr><td bgcolor="#eecfa1"> +<a href="security.html"><b>Security</b></li> +</td></tr> +<tr><td bgcolor="#eecfa1"> <a href="features.html">Features</a> </td></tr> <tr><td bgcolor="#eecfa1"> diff --git a/admin/www/jwzrebuttal.html b/admin/www/jwzrebuttal.html index 2e446570..78d92085 100644 --- a/admin/www/jwzrebuttal.html +++ b/admin/www/jwzrebuttal.html @@ -2,7 +2,7 @@ "http://www.w3.org/TR/html4/loose.dtd" > <html> <!-- THIS PAGE IS AUTOMATICALLY GENERATED. DO NOT EDIT. --> -<!-- Sun Sep 21 23:42:29 2003 --> +<!-- Thu Feb 10 08:31:48 2005 --> <!-- USING HT2HTML 2.0 --> <!-- SEE http://ht2html.sf.net --> <!-- User-specified headers: @@ -12,8 +12,8 @@ Title: Mailman Considered Beneficial <head> <title>Mailman Considered Beneficial</title> -<meta http-equiv="Content-Type" content="text/html; charset=us-ascii" /> -<meta name="generator" content="HT2HTML/2.0" /> +<meta http-equiv="Content-Type" content="text/html; charset=us-ascii" > +<meta name="generator" content="HT2HTML/2.0" > <style type="text/css"> body { margin: 0px; } </style> @@ -38,13 +38,16 @@ body { margin: 0px; } <td width="90%" bgcolor="#eecfa1" class="banner"> <!-- start of site links table --> <table width="100%" border="0" -CELLSPACING=0 CELLPADDING=0 + CELLSPACING=0 CELLPADDING=0 bgcolor="#ffffff"> <tr> <td bgcolor="#eecfa1"> <a href="./index.html">Home</a> </td> <td bgcolor="#eecfa1"> +<a href="./security.html">Security</a> + </td> + <td bgcolor="#eecfa1"> <a href="./docs.html">Documentation</a> </td> <td bgcolor="#eecfa1"> @@ -52,6 +55,9 @@ CELLSPACING=0 CELLPADDING=0 </td> </tr><tr> <td bgcolor="#eecfa1"> + + </td> + <td bgcolor="#eecfa1"> <a href="./help.html">Help</a> </td> <td bgcolor="#eecfa1"> @@ -78,6 +84,9 @@ Overview <a href="index.html">Home</a> </td></tr> <tr><td bgcolor="#eecfa1"> +<a href="security.html"><b>Security</b></li> +</td></tr> +<tr><td bgcolor="#eecfa1"> <a href="features.html">Features</a> </td></tr> <tr><td bgcolor="#eecfa1"> @@ -146,7 +155,7 @@ Email Us </td></tr> <tr><td bgcolor="#eecfa1"> -© 1998-2003 +© 1998-2005 Free Software Foundation, Inc. Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved. @@ -157,7 +166,7 @@ entire article is permitted in any medium, provided this notice is preserved. <td width="15"> </td><!--spacer--> <!-- end of sidebar cell --> <!-- start of body cell --> -<td valign="top" width="90%" class="body"><br /> +<td valign="top" width="90%" class="body"><br> <h3>Mailman Considered Beneficial</h3> Jamie Zawinski posted an article in 2002 titled <a diff --git a/admin/www/links.h b/admin/www/links.h index 9fabd083..d3a19f7a 100644 --- a/admin/www/links.h +++ b/admin/www/links.h @@ -1,6 +1,7 @@ <!-- -*- html -*- --> <h3>Overview</h3> <li><a href="index.html">Home</a> +<li><a href="security.html"><b>Security</b></li> <li><a href="features.html">Features</a> <li><a href="i18n.html">Internationalization</a> <li><a href="otherstuff.html">Rants, Papers, and Logos</a> diff --git a/admin/www/lists.html b/admin/www/lists.html index a6073d4c..218f9d58 100644 --- a/admin/www/lists.html +++ b/admin/www/lists.html @@ -2,7 +2,7 @@ "http://www.w3.org/TR/html4/loose.dtd" > <html> <!-- THIS PAGE IS AUTOMATICALLY GENERATED. DO NOT EDIT. --> -<!-- Sun Sep 21 23:42:30 2003 --> +<!-- Thu Feb 10 08:31:48 2005 --> <!-- USING HT2HTML 2.0 --> <!-- SEE http://ht2html.sf.net --> <!-- User-specified headers: @@ -12,8 +12,8 @@ Title: Mailman mailing lists <head> <title>Mailman mailing lists</title> -<meta http-equiv="Content-Type" content="text/html; charset=us-ascii" /> -<meta name="generator" content="HT2HTML/2.0" /> +<meta http-equiv="Content-Type" content="text/html; charset=us-ascii" > +<meta name="generator" content="HT2HTML/2.0" > <style type="text/css"> body { margin: 0px; } </style> @@ -38,13 +38,16 @@ body { margin: 0px; } <td width="90%" bgcolor="#eecfa1" class="banner"> <!-- start of site links table --> <table width="100%" border="0" -CELLSPACING=0 CELLPADDING=0 + CELLSPACING=0 CELLPADDING=0 bgcolor="#ffffff"> <tr> <td bgcolor="#eecfa1"> <a href="./index.html">Home</a> </td> <td bgcolor="#eecfa1"> +<a href="./security.html">Security</a> + </td> + <td bgcolor="#eecfa1"> <a href="./docs.html">Documentation</a> </td> <td bgcolor="#eecfa1"> @@ -52,6 +55,9 @@ CELLSPACING=0 CELLPADDING=0 </td> </tr><tr> <td bgcolor="#eecfa1"> + + </td> + <td bgcolor="#eecfa1"> <a href="./help.html">Help</a> </td> <td bgcolor="#eecfa1"> @@ -78,6 +84,9 @@ Overview <a href="index.html">Home</a> </td></tr> <tr><td bgcolor="#eecfa1"> +<a href="security.html"><b>Security</b></li> +</td></tr> +<tr><td bgcolor="#eecfa1"> <a href="features.html">Features</a> </td></tr> <tr><td bgcolor="#eecfa1"> @@ -139,7 +148,7 @@ Email Us </td></tr> <tr><td bgcolor="#eecfa1"> -© 1998-2003 +© 1998-2005 Free Software Foundation, Inc. Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved. @@ -150,7 +159,7 @@ entire article is permitted in any medium, provided this notice is preserved. <td width="15"> </td><!--spacer--> <!-- end of sidebar cell --> <!-- start of body cell --> -<td valign="top" width="90%" class="body"><br /> +<td valign="top" width="90%" class="body"><br> <h3>Mailman mailing lists</h3> We have several mailing lists devoted to Mailman, which also provide a diff --git a/admin/www/mgrs.html b/admin/www/mgrs.html index e4d074ab..c5fbea69 100644 --- a/admin/www/mgrs.html +++ b/admin/www/mgrs.html @@ -2,7 +2,7 @@ "http://www.w3.org/TR/html4/loose.dtd" > <html> <!-- THIS PAGE IS AUTOMATICALLY GENERATED. DO NOT EDIT. --> -<!-- Sun Sep 21 23:42:30 2003 --> +<!-- Thu Feb 10 08:31:48 2005 --> <!-- USING HT2HTML 2.0 --> <!-- SEE http://ht2html.sf.net --> <!-- User-specified headers: @@ -12,8 +12,8 @@ Title: List Manager Documentation <head> <title>List Manager Documentation</title> -<meta http-equiv="Content-Type" content="text/html; charset=us-ascii" /> -<meta name="generator" content="HT2HTML/2.0" /> +<meta http-equiv="Content-Type" content="text/html; charset=us-ascii" > +<meta name="generator" content="HT2HTML/2.0" > <style type="text/css"> body { margin: 0px; } </style> @@ -38,13 +38,16 @@ body { margin: 0px; } <td width="90%" bgcolor="#eecfa1" class="banner"> <!-- start of site links table --> <table width="100%" border="0" -CELLSPACING=0 CELLPADDING=0 + CELLSPACING=0 CELLPADDING=0 bgcolor="#ffffff"> <tr> <td bgcolor="#eecfa1"> <a href="./index.html">Home</a> </td> <td bgcolor="#eecfa1"> +<a href="./security.html">Security</a> + </td> + <td bgcolor="#eecfa1"> <a href="./docs.html">Documentation</a> </td> <td bgcolor="#eecfa1"> @@ -52,6 +55,9 @@ CELLSPACING=0 CELLPADDING=0 </td> </tr><tr> <td bgcolor="#eecfa1"> + + </td> + <td bgcolor="#eecfa1"> <a href="./help.html">Help</a> </td> <td bgcolor="#eecfa1"> @@ -78,6 +84,9 @@ Overview <a href="index.html">Home</a> </td></tr> <tr><td bgcolor="#eecfa1"> +<a href="security.html"><b>Security</b></li> +</td></tr> +<tr><td bgcolor="#eecfa1"> <a href="features.html">Features</a> </td></tr> <tr><td bgcolor="#eecfa1"> @@ -158,7 +167,7 @@ Email Us </td></tr> <tr><td bgcolor="#eecfa1"> -© 1998-2003 +© 1998-2005 Free Software Foundation, Inc. Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved. @@ -169,7 +178,7 @@ entire article is permitted in any medium, provided this notice is preserved. <td width="15"> </td><!--spacer--> <!-- end of sidebar cell --> <!-- start of body cell --> -<td valign="top" width="90%" class="body"><br /> +<td valign="top" width="90%" class="body"><br> <h3>List Manager Documentation</h3> <p><a href="http://staff.imsa.edu/~ckolar">Chris Kolar</a> has made diff --git a/admin/www/mirrors.html b/admin/www/mirrors.html index ead13666..bdbe4220 100644 --- a/admin/www/mirrors.html +++ b/admin/www/mirrors.html @@ -2,7 +2,7 @@ "http://www.w3.org/TR/html4/loose.dtd" > <html> <!-- THIS PAGE IS AUTOMATICALLY GENERATED. DO NOT EDIT. --> -<!-- Sun Sep 21 23:42:30 2003 --> +<!-- Thu Feb 10 08:31:48 2005 --> <!-- USING HT2HTML 2.0 --> <!-- SEE http://ht2html.sf.net --> <!-- User-specified headers: @@ -12,8 +12,8 @@ Title: Mailman Web Page Mirrors <head> <title>Mailman Web Page Mirrors</title> -<meta http-equiv="Content-Type" content="text/html; charset=us-ascii" /> -<meta name="generator" content="HT2HTML/2.0" /> +<meta http-equiv="Content-Type" content="text/html; charset=us-ascii" > +<meta name="generator" content="HT2HTML/2.0" > <style type="text/css"> body { margin: 0px; } </style> @@ -38,13 +38,16 @@ body { margin: 0px; } <td width="90%" bgcolor="#eecfa1" class="banner"> <!-- start of site links table --> <table width="100%" border="0" -CELLSPACING=0 CELLPADDING=0 + CELLSPACING=0 CELLPADDING=0 bgcolor="#ffffff"> <tr> <td bgcolor="#eecfa1"> <a href="./index.html">Home</a> </td> <td bgcolor="#eecfa1"> +<a href="./security.html">Security</a> + </td> + <td bgcolor="#eecfa1"> <a href="./docs.html">Documentation</a> </td> <td bgcolor="#eecfa1"> @@ -52,6 +55,9 @@ CELLSPACING=0 CELLPADDING=0 </td> </tr><tr> <td bgcolor="#eecfa1"> + + </td> + <td bgcolor="#eecfa1"> <a href="./help.html">Help</a> </td> <td bgcolor="#eecfa1"> @@ -78,6 +84,9 @@ Overview <a href="index.html">Home</a> </td></tr> <tr><td bgcolor="#eecfa1"> +<a href="security.html"><b>Security</b></li> +</td></tr> +<tr><td bgcolor="#eecfa1"> <a href="features.html">Features</a> </td></tr> <tr><td bgcolor="#eecfa1"> @@ -139,7 +148,7 @@ Email Us </td></tr> <tr><td bgcolor="#eecfa1"> -© 1998-2003 +© 1998-2005 Free Software Foundation, Inc. Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved. @@ -150,7 +159,7 @@ entire article is permitted in any medium, provided this notice is preserved. <td width="15"> </td><!--spacer--> <!-- end of sidebar cell --> <!-- start of body cell --> -<td valign="top" width="90%" class="body"><br /> +<td valign="top" width="90%" class="body"><br> <h3>Mailman Web Page Mirrors</h3> These web pages are mirrored in several locations for your diff --git a/admin/www/otherstuff.html b/admin/www/otherstuff.html index 0c177812..0d663994 100644 --- a/admin/www/otherstuff.html +++ b/admin/www/otherstuff.html @@ -2,7 +2,7 @@ "http://www.w3.org/TR/html4/loose.dtd" > <html> <!-- THIS PAGE IS AUTOMATICALLY GENERATED. DO NOT EDIT. --> -<!-- Fri Feb 20 17:56:47 2004 --> +<!-- Thu Feb 10 08:31:48 2005 --> <!-- USING HT2HTML 2.0 --> <!-- SEE http://ht2html.sf.net --> <!-- User-specified headers: @@ -12,8 +12,8 @@ Title: Mailman Logos and Papers <head> <title>Mailman Logos and Papers</title> -<meta http-equiv="Content-Type" content="text/html; charset=us-ascii" /> -<meta name="generator" content="HT2HTML/2.0" /> +<meta http-equiv="Content-Type" content="text/html; charset=us-ascii" > +<meta name="generator" content="HT2HTML/2.0" > <style type="text/css"> body { margin: 0px; } </style> @@ -38,13 +38,16 @@ body { margin: 0px; } <td width="90%" bgcolor="#eecfa1" class="banner"> <!-- start of site links table --> <table width="100%" border="0" -CELLSPACING=0 CELLPADDING=0 + CELLSPACING=0 CELLPADDING=0 bgcolor="#ffffff"> <tr> <td bgcolor="#eecfa1"> <a href="./index.html">Home</a> </td> <td bgcolor="#eecfa1"> +<a href="./security.html">Security</a> + </td> + <td bgcolor="#eecfa1"> <a href="./docs.html">Documentation</a> </td> <td bgcolor="#eecfa1"> @@ -52,6 +55,9 @@ CELLSPACING=0 CELLPADDING=0 </td> </tr><tr> <td bgcolor="#eecfa1"> + + </td> + <td bgcolor="#eecfa1"> <a href="./help.html">Help</a> </td> <td bgcolor="#eecfa1"> @@ -78,6 +84,9 @@ Overview <a href="index.html">Home</a> </td></tr> <tr><td bgcolor="#eecfa1"> +<a href="security.html"><b>Security</b></li> +</td></tr> +<tr><td bgcolor="#eecfa1"> <a href="features.html">Features</a> </td></tr> <tr><td bgcolor="#eecfa1"> @@ -146,7 +155,7 @@ Email Us </td></tr> <tr><td bgcolor="#eecfa1"> -© 1998-2004 +© 1998-2005 Free Software Foundation, Inc. Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved. @@ -157,7 +166,7 @@ entire article is permitted in any medium, provided this notice is preserved. <td width="15"> </td><!--spacer--> <!-- end of sidebar cell --> <!-- start of body cell --> -<td valign="top" width="90%" class="body"><br /> +<td valign="top" width="90%" class="body"><br> <h3>Rants</h3> <p>Here are some random rants on Mailman, email, list servers, and diff --git a/admin/www/prev.html b/admin/www/prev.html index 37a73c67..53d328e0 100644 --- a/admin/www/prev.html +++ b/admin/www/prev.html @@ -2,7 +2,7 @@ "http://www.w3.org/TR/html4/loose.dtd" > <html> <!-- THIS PAGE IS AUTOMATICALLY GENERATED. DO NOT EDIT. --> -<!-- Sun Sep 21 23:42:31 2003 --> +<!-- Thu Feb 10 08:31:48 2005 --> <!-- USING HT2HTML 2.0 --> <!-- SEE http://ht2html.sf.net --> <!-- User-specified headers: @@ -12,8 +12,8 @@ Title: Previous Mailman Releases <head> <title>Previous Mailman Releases</title> -<meta http-equiv="Content-Type" content="text/html; charset=us-ascii" /> -<meta name="generator" content="HT2HTML/2.0" /> +<meta http-equiv="Content-Type" content="text/html; charset=us-ascii" > +<meta name="generator" content="HT2HTML/2.0" > <style type="text/css"> body { margin: 0px; } </style> @@ -38,13 +38,16 @@ body { margin: 0px; } <td width="90%" bgcolor="#eecfa1" class="banner"> <!-- start of site links table --> <table width="100%" border="0" -CELLSPACING=0 CELLPADDING=0 + CELLSPACING=0 CELLPADDING=0 bgcolor="#ffffff"> <tr> <td bgcolor="#eecfa1"> <a href="./index.html">Home</a> </td> <td bgcolor="#eecfa1"> +<a href="./security.html">Security</a> + </td> + <td bgcolor="#eecfa1"> <a href="./docs.html">Documentation</a> </td> <td bgcolor="#eecfa1"> @@ -52,6 +55,9 @@ CELLSPACING=0 CELLPADDING=0 </td> </tr><tr> <td bgcolor="#eecfa1"> + + </td> + <td bgcolor="#eecfa1"> <a href="./help.html">Help</a> </td> <td bgcolor="#eecfa1"> @@ -78,6 +84,9 @@ Overview <a href="index.html">Home</a> </td></tr> <tr><td bgcolor="#eecfa1"> +<a href="security.html"><b>Security</b></li> +</td></tr> +<tr><td bgcolor="#eecfa1"> <a href="features.html">Features</a> </td></tr> <tr><td bgcolor="#eecfa1"> @@ -139,7 +148,7 @@ Email Us </td></tr> <tr><td bgcolor="#eecfa1"> -© 1998-2003 +© 1998-2005 Free Software Foundation, Inc. Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved. @@ -150,7 +159,7 @@ entire article is permitted in any medium, provided this notice is preserved. <td width="15"> </td><!--spacer--> <!-- end of sidebar cell --> <!-- start of body cell --> -<td valign="top" width="90%" class="body"><br /> +<td valign="top" width="90%" class="body"><br> <h3>Previous Mailman Releases</h3> <a href="http://sourceforge.net/project/shownotes.php?release_id=102354" diff --git a/admin/www/requirements.html b/admin/www/requirements.html index e594ddef..4e28f852 100644 --- a/admin/www/requirements.html +++ b/admin/www/requirements.html @@ -2,7 +2,7 @@ "http://www.w3.org/TR/html4/loose.dtd" > <html> <!-- THIS PAGE IS AUTOMATICALLY GENERATED. DO NOT EDIT. --> -<!-- Sun Sep 21 23:42:31 2003 --> +<!-- Thu Feb 10 08:31:48 2005 --> <!-- USING HT2HTML 2.0 --> <!-- SEE http://ht2html.sf.net --> <!-- User-specified headers: @@ -12,8 +12,8 @@ Title: Mailman Requirements <head> <title>Mailman Requirements</title> -<meta http-equiv="Content-Type" content="text/html; charset=us-ascii" /> -<meta name="generator" content="HT2HTML/2.0" /> +<meta http-equiv="Content-Type" content="text/html; charset=us-ascii" > +<meta name="generator" content="HT2HTML/2.0" > <style type="text/css"> body { margin: 0px; } </style> @@ -38,13 +38,16 @@ body { margin: 0px; } <td width="90%" bgcolor="#eecfa1" class="banner"> <!-- start of site links table --> <table width="100%" border="0" -CELLSPACING=0 CELLPADDING=0 + CELLSPACING=0 CELLPADDING=0 bgcolor="#ffffff"> <tr> <td bgcolor="#eecfa1"> <a href="./index.html">Home</a> </td> <td bgcolor="#eecfa1"> +<a href="./security.html">Security</a> + </td> + <td bgcolor="#eecfa1"> <a href="./docs.html">Documentation</a> </td> <td bgcolor="#eecfa1"> @@ -52,6 +55,9 @@ CELLSPACING=0 CELLPADDING=0 </td> </tr><tr> <td bgcolor="#eecfa1"> + + </td> + <td bgcolor="#eecfa1"> <a href="./help.html">Help</a> </td> <td bgcolor="#eecfa1"> @@ -78,6 +84,9 @@ Overview <a href="index.html">Home</a> </td></tr> <tr><td bgcolor="#eecfa1"> +<a href="security.html"><b>Security</b></li> +</td></tr> +<tr><td bgcolor="#eecfa1"> <a href="features.html">Features</a> </td></tr> <tr><td bgcolor="#eecfa1"> @@ -162,7 +171,7 @@ Email Us </td></tr> <tr><td bgcolor="#eecfa1"> -© 1998-2003 +© 1998-2005 Free Software Foundation, Inc. Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved. @@ -173,7 +182,7 @@ entire article is permitted in any medium, provided this notice is preserved. <td width="15"> </td><!--spacer--> <!-- end of sidebar cell --> <!-- start of body cell --> -<td valign="top" width="90%" class="body"><br /> +<td valign="top" width="90%" class="body"><br> <h3>Requirements</h3> <p>Mailman currently runs only on GNU/Linux and any other Un*x-like diff --git a/admin/www/reset_pw.py b/admin/www/reset_pw.py new file mode 100644 index 00000000..6bf86747 --- /dev/null +++ b/admin/www/reset_pw.py @@ -0,0 +1,90 @@ +#! /usr/bin/env python +# +# Copyright (C) 2004 by the Free Software Foundation, Inc. +# +# This program is free software; you can redistribute it and/or +# modify it under the terms of the GNU General Public License +# as published by the Free Software Foundation; either version 2 +# of the License, or (at your option) any later version. +# +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with this program; if not, write to the Free Software +# Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. + +# Inspired by Florian Weimer. + +"""Reset the passwords for members of a mailing list. + +This script resets all the passwords of a mailing list's members. It can also +be used to reset the lists of all members of all mailing lists, but it is your +responsibility to let the users know that their passwords have been changed. + +This script is intended to be run as a bin/withlist script, i.e. + +% bin/withlist -l -r reset_pw listname [options] + +Options: + -v / --verbose + Print what the script is doing. +""" + +import sys +import getopt + +import paths +from Mailman import Utils +from Mailman.i18n import _ + + +try: + True, False +except NameError: + True = 1 + False = 0 + + + +def usage(code, msg=''): + if code: + fd = sys.stderr + else: + fd = sys.stdout + print >> fd, _(__doc__.replace('%', '%%')) + if msg: + print >> fd, msg + sys.exit(code) + + + +def reset_pw(mlist, *args): + try: + opts, args = getopt.getopt(args, 'v', ['verbose']) + except getopt.error, msg: + usage(1, msg) + + verbose = False + for opt, args in opts: + if opt in ('-v', '--verbose'): + verbose = True + + listname = mlist.internal_name() + if verbose: + print _('Changing passwords for list: %(listname)s') + + for member in mlist.getMembers(): + randompw = Utils.MakeRandomPassword() + mlist.setMemberPassword(member, randompw) + if verbose: + print _('New password for member %(member)40s: %(randompw)s') + + mlist.Save() + + + +if __name__ == '__main__': + usage(0) diff --git a/admin/www/security.ht b/admin/www/security.ht new file mode 100644 index 00000000..b139c7c2 --- /dev/null +++ b/admin/www/security.ht @@ -0,0 +1,37 @@ +Title: Mailman security issues + +<h3>Mailman security issues</h3> + +The GNU Mailman developers take security very seriously. All Mailman security +concerns should be emailed to +<a href="mailto:%6D%61%69%6C%6D%61%6E%2D%73%65%63%75%72%69%74%79%40%70%79%74%68%6F%6E%2E%6F%72%67">mailman-security at python dot org</a>. +This is a closed list that reaches the core Mailman developers. + +<h3>Known issues and fixes</h3> + +<ul> + +<li><b>CAN-2005-0202</b> -- This is a very serious issue affecting the Mailman +2.1 series up to and including version 2.1.5. Mailman 2.1.6 is not +affected. This issue can allow for the leakage of member passwords. + +<p>A quick, immediate fix is to remove the /usr/local/mailman/cgi-bin/private +executable. However, this will break any private archives your lists may be +using. See below for a proper patch. + +<p>The extent of your exposure to this vulnerability depends on factors such +as which version of Apache you are running and how you have it configured. We +do not currently know the exact combination that enables the hole, although we +currently believe that Apache 2.0 sites are not vulnerable and that that many +if not most Apache 1.3 sites are vulnerable. In any event, the safest +approach is to assume the worst and it is recommended that you apply +<a href="CAN-2005-0202.txt">this Mailman patch</a> as soon as possible. + +<p>For additional piece of mind, it is +recommended that you regenerate your list member passwords using +<a href="reset_pw.py">the Mailman 2.1.6 reset_pw.py script</a>. Put this file +in your Mailman installation's bin directory. After running the script, you +might also want to manually run the cron/mailpasswds script so that your users +will be informed of their new passwords. +</li> +</ul> diff --git a/admin/www/security.html b/admin/www/security.html new file mode 100644 index 00000000..4d7c40cb --- /dev/null +++ b/admin/www/security.html @@ -0,0 +1,197 @@ +<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" + "http://www.w3.org/TR/html4/loose.dtd" > +<html> +<!-- THIS PAGE IS AUTOMATICALLY GENERATED. DO NOT EDIT. --> +<!-- Thu Feb 10 08:31:48 2005 --> +<!-- USING HT2HTML 2.0 --> +<!-- SEE http://ht2html.sf.net --> +<!-- User-specified headers: +Title: Mailman security issues + +--> + +<head> +<title>Mailman security issues</title> +<meta http-equiv="Content-Type" content="text/html; charset=us-ascii" > +<meta name="generator" content="HT2HTML/2.0" > +<style type="text/css"> +body { margin: 0px; } +</style> +</head> +<body bgcolor="#ffffff" text="#000000" + marginwidth="0" marginheight="0" + link="#0000bb" vlink="#551a8b" + alink="#ff0000"> +<!-- start of page table --> +<table width="100%" border="0" cellspacing="0" cellpadding="0"> +<!-- start of banner row --> +<tr> +<!-- start of corner cells --> +<td width="150" valign="middle" bgcolor="white" class="corner"> + +<center> + <a href="./index.html"> + <img border=0 src="./images/logo-70.jpg"></a></center> </td> +<td width="15" bgcolor="#eecfa1"> </td><!--spacer--> +<!-- end of corner cells --> +<!-- start of banner --> +<td width="90%" bgcolor="#eecfa1" class="banner"> +<!-- start of site links table --> +<table width="100%" border="0" + CELLSPACING=0 CELLPADDING=0 + bgcolor="#ffffff"> +<tr> + <td bgcolor="#eecfa1"> +<a href="./index.html">Home</a> + </td> + <td bgcolor="#eecfa1"> +<b>Security</b> + </td> + <td bgcolor="#eecfa1"> +<a href="./docs.html">Documentation</a> + </td> + <td bgcolor="#eecfa1"> +<a href="./lists.html">Mailing lists</a> + </td> +</tr><tr> + <td bgcolor="#eecfa1"> + + </td> + <td bgcolor="#eecfa1"> +<a href="./help.html">Help</a> + </td> + <td bgcolor="#eecfa1"> +<a href="./download.html">Download</a> + </td> + <td bgcolor="#eecfa1"> +<a href="./devs.html">Developers</a> + </td> +</tr> +</table><!-- end of site links table --> + +</td><!-- end of banner --> +</tr><!-- end of banner row --> +<tr><!-- start of sidebar/body row --> +<!-- start of sidebar cells --> +<td width="150" valign="top" bgcolor="#eecfa1" class="sidebar"> +<!-- start of sidebar table --> +<table width="100%" border="0" cellspacing="0" cellpadding="3" + bgcolor="#ffffff"> +<tr><td bgcolor="#36648b"><b><font color="#ffffff"> +Overview +</font></b></td></tr> +<tr><td bgcolor="#eecfa1"> +<a href="index.html">Home</a> +</td></tr> +<tr><td bgcolor="#eecfa1"> +<a href="security.html"><b>Security</b></li> +</td></tr> +<tr><td bgcolor="#eecfa1"> +<a href="features.html">Features</a> +</td></tr> +<tr><td bgcolor="#eecfa1"> +<a href="i18n.html">Internationalization</a> +</td></tr> +<tr><td bgcolor="#eecfa1"> +<a href="otherstuff.html">Rants, Papers, and Logos</a> +</td></tr> +<tr><td bgcolor="#eecfa1"> +<a href="inthenews.html">Mailman in Use</a> +</td></tr> +<tr><td bgcolor="#eecfa1"> +<a href="prev.html">Previous Releases</a> +</td></tr> +<tr><td bgcolor="#eecfa1"> +<a href="bugs.html">Bugs and Patches</a> +</td></tr> +<tr><td bgcolor="#eecfa1"> +<a href="mirrors.html">Mirrors</a> +</td></tr> +<tr><td bgcolor="#eecfa1"> </td></tr> +<tr><td bgcolor="#36648b"><b><font color="#ffffff"> +Exits +</font></b></td></tr> +<tr><td bgcolor="#eecfa1"> +<a href="http://sf.net/projects/mailman">SF Project Page</a> +</td></tr> +<tr><td bgcolor="#eecfa1"> +<a href="lists.html">Discussion Lists</a> +</td></tr> +<tr><td bgcolor="#eecfa1"> +<a href="http://www.python.org/">Python</a> +</td></tr> +<tr><td bgcolor="#eecfa1"> +<a href="http://www.gnu.org/">GNU</a> +</td></tr> +<tr><td bgcolor="#eecfa1"> +<a href="http://barry.warsaw.us/">Barry Warsaw</a> +</td></tr> +<tr><td bgcolor="#eecfa1"> </td></tr> +<tr><td bgcolor="#36648b"><b><font color="#ffffff"> +Email Us +</font></b></td></tr> +<tr><td bgcolor="#eecfa1"> +<a href="mailto:mailman-users@python.org">mailman-users@python.org</a> +</td></tr> +<tr><td bgcolor="#eecfa1"> + +</td></tr> +<tr><td bgcolor="#eecfa1"> +<a href="http://www.python.org/"><img border=0 + src="./images/PythonPoweredSmall.png" + ></a> <a href="http://sourceforge.net"><img + src="http://sourceforge.net/sflogo.php?group_id=103" + width="88" height="31" border="0" + alt="SourceForge Logo"></a> +</td></tr> +<tr><td bgcolor="#eecfa1"> + +</td></tr> +<tr><td bgcolor="#eecfa1"> +© 1998-2005 +Free Software Foundation, Inc. Verbatim copying and distribution of this +entire article is permitted in any medium, provided this notice is preserved. + +</td></tr> +</table><!-- end of sidebar table --> + +</td> +<td width="15"> </td><!--spacer--> +<!-- end of sidebar cell --> +<!-- start of body cell --> +<td valign="top" width="90%" class="body"><br> +<h3>Mailman security issues</h3> + +The GNU Mailman developers take security very seriously. All Mailman security +concerns should be emailed to +<mailto:mailman-security@python.org>mailman-security@python.org</a>. This is +a closed list that reaches the core Mailman developers. + +<h3>Known issues and fixes</h3> + +<ul> +<li><b>CAN-2005-0202</b> -- This is a very serious issue affecting +the Mailman 2.1 serious up to and including version 2.1.5. Mailman 2.1.6 is +not vulnerable. This issue can allow for the leakage of member passwords. + +<p>The extent of your exposure to this vulnerability depends on factors such +as which version of Apache you are running and how you have it configured. We +do not currently know the exact combination that enables the hole, although we +currently believe that Apache 2.0 sites are not vulnerable and that that many +if not most Apache 1.3 sites are vulnerable. In any event, the safest +approach is to assume the worst and it is recommended that you apply +<a href="CAN-2005-0202.txt">this Mailman patch</a> as soon as possible. + +<p>For additional piece of mind, it is +recommended that you regenerate your list member passwords using +<a href="reset_pw.py">the Mailman 2.1.6 reset_pw.py script</a>. Put this file +in your Mailman installation's bin directory. After running the script, you +might also want to manually run the cron/mailpasswds script so that your users +will be informed of their new passwords. +</li> +</ul> + +</td><!-- end of body cell --> +</tr><!-- end of sidebar/body row --> +</table><!-- end of page table --> +</body></html> diff --git a/admin/www/site.html b/admin/www/site.html index ea5566fd..d997c3c8 100644 --- a/admin/www/site.html +++ b/admin/www/site.html @@ -2,7 +2,7 @@ "http://www.w3.org/TR/html4/loose.dtd" > <html> <!-- THIS PAGE IS AUTOMATICALLY GENERATED. DO NOT EDIT. --> -<!-- Mon Dec 13 23:19:39 2004 --> +<!-- Thu Feb 10 08:31:48 2005 --> <!-- USING HT2HTML 2.0 --> <!-- SEE http://ht2html.sf.net --> <!-- User-specified headers: @@ -45,6 +45,9 @@ body { margin: 0px; } <a href="./index.html">Home</a> </td> <td bgcolor="#eecfa1"> +<a href="./security.html">Security</a> + </td> + <td bgcolor="#eecfa1"> <a href="./docs.html">Documentation</a> </td> <td bgcolor="#eecfa1"> @@ -52,6 +55,9 @@ body { margin: 0px; } </td> </tr><tr> <td bgcolor="#eecfa1"> + + </td> + <td bgcolor="#eecfa1"> <a href="./help.html">Help</a> </td> <td bgcolor="#eecfa1"> @@ -78,6 +84,9 @@ Overview <a href="index.html">Home</a> </td></tr> <tr><td bgcolor="#eecfa1"> +<a href="security.html"><b>Security</b></li> +</td></tr> +<tr><td bgcolor="#eecfa1"> <a href="features.html">Features</a> </td></tr> <tr><td bgcolor="#eecfa1"> @@ -158,7 +167,7 @@ Email Us </td></tr> <tr><td bgcolor="#eecfa1"> -© 1998-2004 +© 1998-2005 Free Software Foundation, Inc. Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved. diff --git a/admin/www/todo.ht b/admin/www/todo.ht index 2e1cb772..f1e0ea71 100644 --- a/admin/www/todo.ht +++ b/admin/www/todo.ht @@ -4,7 +4,7 @@ Title: The Mailman Wishlist <h3> The Mailman Wishlist </h3> <p> -<h3> (Last Update: $Date: 2003-09-29 04:30:24 +0100 (Mon, 29 Sep 2003) $) +<h3> (Last Update: $Date: 2005-02-10 14:10:10 +0000 (Thu, 10 Feb 2005) $) </h3> Here's the wish list for future versions of Mailman. Many new features have been added to Mailman 2.1, and it is currently diff --git a/admin/www/todo.html b/admin/www/todo.html index 2537fb8e..e3abd374 100644 --- a/admin/www/todo.html +++ b/admin/www/todo.html @@ -2,7 +2,7 @@ "http://www.w3.org/TR/html4/loose.dtd" > <html> <!-- THIS PAGE IS AUTOMATICALLY GENERATED. DO NOT EDIT. --> -<!-- Tue Oct 7 18:25:34 2003 --> +<!-- Thu Feb 10 08:31:48 2005 --> <!-- USING HT2HTML 2.0 --> <!-- SEE http://ht2html.sf.net --> <!-- User-specified headers: @@ -12,8 +12,8 @@ Title: The Mailman Wishlist <head> <title>The Mailman Wishlist</title> -<meta http-equiv="Content-Type" content="text/html; charset=us-ascii" /> -<meta name="generator" content="HT2HTML/2.0" /> +<meta http-equiv="Content-Type" content="text/html; charset=us-ascii" > +<meta name="generator" content="HT2HTML/2.0" > <style type="text/css"> body { margin: 0px; } </style> @@ -38,13 +38,16 @@ body { margin: 0px; } <td width="90%" bgcolor="#eecfa1" class="banner"> <!-- start of site links table --> <table width="100%" border="0" -CELLSPACING=0 CELLPADDING=0 + CELLSPACING=0 CELLPADDING=0 bgcolor="#ffffff"> <tr> <td bgcolor="#eecfa1"> <a href="./index.html">Home</a> </td> <td bgcolor="#eecfa1"> +<a href="./security.html">Security</a> + </td> + <td bgcolor="#eecfa1"> <a href="./docs.html">Documentation</a> </td> <td bgcolor="#eecfa1"> @@ -52,6 +55,9 @@ CELLSPACING=0 CELLPADDING=0 </td> </tr><tr> <td bgcolor="#eecfa1"> + + </td> + <td bgcolor="#eecfa1"> <a href="./help.html">Help</a> </td> <td bgcolor="#eecfa1"> @@ -78,6 +84,9 @@ Overview <a href="index.html">Home</a> </td></tr> <tr><td bgcolor="#eecfa1"> +<a href="security.html"><b>Security</b></li> +</td></tr> +<tr><td bgcolor="#eecfa1"> <a href="features.html">Features</a> </td></tr> <tr><td bgcolor="#eecfa1"> @@ -139,7 +148,7 @@ Email Us </td></tr> <tr><td bgcolor="#eecfa1"> -© 1998-2003 +© 1998-2005 Free Software Foundation, Inc. Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved. @@ -150,12 +159,12 @@ entire article is permitted in any medium, provided this notice is preserved. <td width="15"> </td><!--spacer--> <!-- end of sidebar cell --> <!-- start of body cell --> -<td valign="top" width="90%" class="body"><br /> +<td valign="top" width="90%" class="body"><br> <p> <h3> The Mailman Wishlist </h3> <p> -<h3> (Last Update: $Date: 2003-10-07 23:26:58 +0100 (Tue, 07 Oct 2003) $) +<h3> (Last Update: $Date: 2005-02-10 14:10:10 +0000 (Thu, 10 Feb 2005) $) </h3> Here's the wish list for future versions of Mailman. Many new features have been added to Mailman 2.1, and it is currently diff --git a/admin/www/users.html b/admin/www/users.html index 2cd35c47..3ab57783 100644 --- a/admin/www/users.html +++ b/admin/www/users.html @@ -2,7 +2,7 @@ "http://www.w3.org/TR/html4/loose.dtd" > <html> <!-- THIS PAGE IS AUTOMATICALLY GENERATED. DO NOT EDIT. --> -<!-- Mon Dec 13 23:13:55 2004 --> +<!-- Thu Feb 10 08:31:48 2005 --> <!-- USING HT2HTML 2.0 --> <!-- SEE http://ht2html.sf.net --> <!-- User-specified headers: @@ -45,6 +45,9 @@ body { margin: 0px; } <a href="./index.html">Home</a> </td> <td bgcolor="#eecfa1"> +<a href="./security.html">Security</a> + </td> + <td bgcolor="#eecfa1"> <a href="./docs.html">Documentation</a> </td> <td bgcolor="#eecfa1"> @@ -52,6 +55,9 @@ body { margin: 0px; } </td> </tr><tr> <td bgcolor="#eecfa1"> + + </td> + <td bgcolor="#eecfa1"> <a href="./help.html">Help</a> </td> <td bgcolor="#eecfa1"> @@ -78,6 +84,9 @@ Overview <a href="index.html">Home</a> </td></tr> <tr><td bgcolor="#eecfa1"> +<a href="security.html"><b>Security</b></li> +</td></tr> +<tr><td bgcolor="#eecfa1"> <a href="features.html">Features</a> </td></tr> <tr><td bgcolor="#eecfa1"> @@ -158,7 +167,7 @@ Email Us </td></tr> <tr><td bgcolor="#eecfa1"> -© 1998-2004 +© 1998-2005 Free Software Foundation, Inc. Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved. diff --git a/admin/www/version.html b/admin/www/version.html index 208f5248..147edb8c 100644 --- a/admin/www/version.html +++ b/admin/www/version.html @@ -2,7 +2,7 @@ "http://www.w3.org/TR/html4/loose.dtd" > <html> <!-- THIS PAGE IS AUTOMATICALLY GENERATED. DO NOT EDIT. --> -<!-- Sun Jan 16 17:07:21 2005 --> +<!-- Thu Feb 10 08:31:48 2005 --> <!-- USING HT2HTML 2.0 --> <!-- SEE http://ht2html.sf.net --> <!-- User-specified headers: @@ -45,6 +45,9 @@ body { margin: 0px; } <a href="./index.html">Home</a> </td> <td bgcolor="#eecfa1"> +<a href="./security.html">Security</a> + </td> + <td bgcolor="#eecfa1"> <a href="./docs.html">Documentation</a> </td> <td bgcolor="#eecfa1"> @@ -52,6 +55,9 @@ body { margin: 0px; } </td> </tr><tr> <td bgcolor="#eecfa1"> + + </td> + <td bgcolor="#eecfa1"> <a href="./help.html">Help</a> </td> <td bgcolor="#eecfa1"> @@ -78,6 +84,9 @@ Overview <a href="index.html">Home</a> </td></tr> <tr><td bgcolor="#eecfa1"> +<a href="security.html"><b>Security</b></li> +</td></tr> +<tr><td bgcolor="#eecfa1"> <a href="features.html">Features</a> </td></tr> <tr><td bgcolor="#eecfa1"> |