aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* - Changed cmd_who.py to show hidden members when authorization is by list ↵msapiro2007-02-072-18/+41
| | | | | admin or moderator password. - Changed cmd_who.py public roster syntax to accept optional list admin or moderator password.
* Changed header_filter_rules processing to ignore blank patterns.msapiro2007-01-201-1/+4
|
* Fixed documentation for POSTFIX_STYLE_VIRTUAL_DOMAINS to clarify that themsapiro2007-01-071-7/+8
| | | empty list is the appropriate value if Postfix virtual domains aren't used.
* Ensure that exported XML is written in utf-8, at least if we're writing to abwarsaw2007-01-021-5/+7
| | | | | file other than stdout. Fix a typo in getting the digest style. Update copyright years.
* Port from the trunk: include the widget_type in the <options> tag.bwarsaw2006-12-301-3/+27
|
* Added the ability to specify a password hashing scheme for output ofbwarsaw2006-12-301-10/+61
| | | | | | | | | | user passwords. Default is 'none' which disables passwords altogether in the resulting XML. Other choices include: plain -- output passwords in plain text sha -- sha1 hash of password ssha -- sha1 hash salted with 4 random bytes (only available if os.urandom() works)
* Port the Mailman trunk's export.py script to Mailman 2.1. Anyone wanting tobwarsaw2006-12-294-1108/+4335
| | | | | | | | | upgrade from Mailman 2.1 to the trunk -- after the merge of the SQLAlchemy code -- will need this. Note that I don't intend to implement import in MM2.1. This script is a little diffferent than what's on the trunk, but functionally (and schema-wise) equivalent.
* Delete the .bak file from the queue for an unparseable message.msapiro2006-11-171-0/+1
|
* 2 links fixed -- submitted by Thijs Kinkhorst <thijs@debian.org>. Thanks!pheinlein2006-10-221-3/+3
|
* With python2.5, importing JapaneseCodecs triggers LookupError becausetkikuchi2006-10-121-3/+18
| | | | | | | | | 'iso2022_jp' does not exist in japanese (but 'iso_2022_jp'). We try to test Japanese (and Korean) codecs before changing path order and do not import japanese/korean if the codecs already exist in python distribution. (as in 2.4 and 2.5) Importing japanese/korean is going away in mailman-2.2.
* Fixed admin.py so null VARHELP category is handled (1573393).msapiro2006-10-112-4/+9
|
* Removed the "Discard all messages marked Defer" checkbox from themsapiro2006-09-211-2/+2
| | | details=all page.
* Correct a long-standing oversight by acknowledging the contributions of Bradbwarsaw2006-09-181-0/+6
| | | | Knowles and JC Dill.
* external in the shared admin directory from the trunkbwarsaw2006-09-170-0/+0
|
* Copy the mm21 admin directory out of the mm21 branch. We'll svnbwarsaw2006-09-17235-38639/+0
| | | | | external the latter to get that back into the release, but I really don't want to maintain multiple copies of the web pages.
* We can no longer provide tarball downloads from list.org.bwarsaw2006-09-132-53/+13
|
* Set things up for 2.1.10a0bwarsaw2006-09-132-3/+5
|
* Tag as 2.1.9 (final). Also, remove version.ht* since it's redundant.bwarsaw2006-09-1328-244/+32
|
* Fix an unexploitable format string vulnerability. Even though unexploitable,bwarsaw2006-09-112-1/+5
| | | | | it's still crappy coding that should be fixed. CVE-2006-2191. Thanks go to Karl Chen, Martin 'Joey' Schulze, and Elie Mamane.
* 2006-09-07 Committed updated Dutch translations of the messages mailman.po ↵clytie2006-09-072-1885/+1675
| | | | | file and the template admindbdetails.html by Jan Veuger <info@janveuger.com> Clytie Siddall <clytie@riverland.net.au>
* vi.po Updated Vietnamese translation, Clytie Siddall <clytie@riverland.net.au>clytie2006-09-071-1254/+1356
|
* Updates for 2.1.9 and beyond. Remove the inthenews.ht files and insteadbwarsaw2006-09-0525-1556/+75
| | | | | include a new 'Community' link in the topbar that points to the COM space in the wiki.
* minors corrections from P.GEORGEp_george2006-09-043-16/+36
|
* Several fixes done in the last months.pheinlein2006-09-031-149/+101
|
* 2.1.9 final will be released this monthbwarsaw2006-09-021-1/+1
|
* Update web pages and version numbers for 2.1.9rc1.bwarsaw2006-09-0226-39/+35
|
* Message template and catalogs update.tkikuchi2006-09-0135-7113/+7287
|
* Revised translation by IKEDA Soji.tkikuchi2006-09-012-20/+39
|
* A much improved release script, which now knows about Subversion (though isn'tbwarsaw2006-09-0123-290/+236
| | | | | | | yet ready to work from the trunk). Also, get rid of all the obsolete .cvsignore directories, they're no longer needed. Almost ready for 2.1.9rc1!
* Catalog updates.bwarsaw2006-08-302-3316/+3347
|
* Make a sweep through the web pages to update various bits of information.bwarsaw2006-08-3031-750/+476
| | | | This is in prep for the 2.1.9 release.
* CVE-2006-3636. Fixes for various cross-site scripting issues. Discovery bybwarsaw2006-08-3010-33/+67
| | | | | Moritz Naumann and most of the repair work done by Mark Sapiro (with some additional work by Barry).
* Update copyright years.bwarsaw2006-08-071-1/+1
|
* svn:ignore .mo files.bwarsaw2006-08-070-0/+0
|
* Bump version number to 2.1.9a0bwarsaw2006-08-071-4/+5
|
* New language -> languages. Sorry we don't have plurals in japanese.tkikuchi2006-08-051-1/+1
|
* Add new language: Arabic.tkikuchi2006-08-051-539/+3340
|
* Arabic templates.tkikuchi2006-08-0444-0/+1267
|
* Arabic directory and file.tkikuchi2006-08-041-0/+10112
|
* Language files update. New languages: Arabic, Vietnamese.tkikuchi2006-08-0436-14148/+16524
|
* Back port Python 2.5 compatibility changes to Mailman 2.1. Specifically,bwarsaw2006-07-303-15/+25
| | | | | | | | | | | | | | | | | | - In SecurityManager.py, fix the parsecookie() code to work with Python 2.5 generated cookie text. The latter was changed to be more RFC compliant so it does not output trailing semicolons for each line of cookie text. This broke the splitting rules, so now first split on newlines, then on ';\s*'. This should work across all Python versions. - In Python 2.5, exceptions are new-style, and thus are no longer of ClassType. The instantiation type test in hold_for_approval() was too naive. This one is fixed differently here than in the MM trunk because in Python 2.1, 'type' isn't a type, it's a function and so can't be used as the second argument to isinstance() directly. - Raising strings generates deprecation warnings in Python 2.5. Switch the one weird use of this in Utils.py to use a class exception. Don't call it "quick exit" though because it's probably not.
* Update to email 2.5.8bwarsaw2006-07-263-1/+1
|
* SendSubscribeAck() - Removed test of self.send_welcome_message.msapiro2006-07-241-3/+1
| | | The caller may want to override the list setting.
* - Switchboard.py Changed "while key in times.keys():" tomsapiro2006-07-231-1/+1
| | | | "while times.has_key(key):" for execution efficiency while maintaining Python 2.1 compatibility.
* - Switchboard.py Added missing newline at EOF.msapiro2006-07-221-1/+1
|
* - bin/unshuntmsapiro2006-07-223-14/+47
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Queue/Runner.py - Queue/Switchboard.py Backported the gfiles backup changes from the trunk. The following comments are from the trunk checkin. Note that the test cases are not added. Added robustness to Switchboards and Runners so that if a runner crashes uncleanly (e.g. segfaults the Python interpreter), messages being processed will not be lost. The vulnerability, ideas, and patches are credited to Richard Barrett and Mark Sapiro. Their original work was modified by Barry for this commit and any bugs are his fault. The basic idea is that instead of unlinking a .pck file in dequeue(), the file is renamed to a .bak file. The Switchboard grows a finish() method which then unlinks the .bak file. That class's constructor also grows a 'restore' argument (defaulting to false), which when true moves all .bak files it finds in its hash space to .pck, thereby restoring a file lost while "in flight". This relies on the fact that even with multiple qrunners, exactly one process will be responsible for one hash space slice, so it's never possible (under normal operation) for a .bak file to be renamed to .pck by some other process. Test cases for both the new Switchboard behavior and the use of that by Runner subclasses has been added. There are two things to watch out for, either of which may require some additional changes. There is some small potential to duplicate messages in various queues, if say 'mailmanctl' were improperly started more than once by a site admin. This usually won't happen unless an admin is overly eager with the mailmanctl -s switch, so we can chalk this one up to operator error. I'm not sure what more we can do about that. There's also a possibility that if we're processing a message that continually causes the Python interpreter to crash, we could end up duplicating messages endlessly. This is especially troublesome for the Outgoing runner which could conceivably cause a mail flood. I consider this the more critical issue to defend against, probably by adding a numbering scheme to the .bak file names and refusing to restore a .bak file more than say 3 times without human intervention.
* Committed messages mailman.po and a stack of added and updated templates for ↵clytie2006-07-2146-3720/+3394
| | | | | Dutch. Clytie Siddall <clytie@riverland.net.au>
* - Switchboard.py - Closed very tiny holes at the upper ends of queuemsapiro2006-07-092-5/+17
| | | | | slices that could result in unprocessable queue entries. Improved FIFO processing when two queue entries have the same timestamp.
* - Decorate.py Fixed bug 1507248 by ignoring header/footer charactersmsapiro2006-06-233-4/+25
| | | | | | | | outside the character set of the list's language. - Utils.py Fixed a security hole which allowed a crafted URI to inject bogus apparent messages into the error log, possibly inducing an admin to visit a phishing site.
* 2006-04-27 Clytie Siddall <clytie@riverland.net.au>clytie2006-04-271-0/+1
| | | | | | * Defaults.py.in: Added Vietnamese to add_languages.
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-30 06:20:29 +0000