From 8f7fc30bde024165d742ecae082858d80f1012b8 Mon Sep 17 00:00:00 2001 From: Mark Sapiro Date: Thu, 23 Apr 2015 17:42:33 -0700 Subject: If SUBSCRIBE_FORM_SECRET is enabled and a user's network has a load balancer or similar in use the POSTing IP might not exactly match the GETting IP. This is now accounted for by not requiring the last octet (16 bits for ipV6) to match. --- NEWS | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'NEWS') diff --git a/NEWS b/NEWS index b2f16bc5..e0c4951f 100755 --- a/NEWS +++ b/NEWS @@ -9,6 +9,11 @@ Here is a history of user visible changes to Mailman. Bug fixes and other patches + - If SUBSCRIBE_FORM_SECRET is enabled and a user's network has a load + balancer or similar in use the POSTing IP might not exactly match the + GETting IP. This is now accounted for by not requiring the last + octet (16 bits for ipV6) to match. (LP: #1447445) + - DKIM-Signature:, DomainKey-Signature: and Authentication-Results: headers are now removed by default from posts to anonymous lists. (LP: #1444673) -- cgit v1.2.3