From aab0efe4e81950567bc44c3c6148cc9cf6a9f167 Mon Sep 17 00:00:00 2001 From: Mark Sapiro Date: Sat, 3 Jun 2017 13:33:49 -0700 Subject: Fixed the -V option to list_lists to not show subdomains. --- NEWS | 7 +++++++ 1 file changed, 7 insertions(+) (limited to 'NEWS') diff --git a/NEWS b/NEWS index b1f35fa3..0d2c4cb4 100644 --- a/NEWS +++ b/NEWS @@ -5,6 +5,13 @@ Copyright (C) 1998-2016 by the Free Software Foundation, Inc. Here is a history of user visible changes to Mailman. +2.1.25 (xx-xxx-xxxx) + + Bug fixes and other patches + + - Fixed the -V option to bin/list_lists to not show lists whose host is a + subdomain of the given domain. (LP: #1695610) + 2.1.24 (02-Jun-2017) Security -- cgit v1.2.3 From bdba0e977c9d6e7a69c722a1074f89082c1632b4 Mon Sep 17 00:00:00 2001 From: Mark Sapiro Date: Sun, 4 Jun 2017 17:27:02 -0700 Subject: Added -a to default (e)grep in contrib/mmdsr. --- NEWS | 3 +++ 1 file changed, 3 insertions(+) (limited to 'NEWS') diff --git a/NEWS b/NEWS index 0d2c4cb4..9b0bbd46 100644 --- a/NEWS +++ b/NEWS @@ -9,6 +9,9 @@ Here is a history of user visible changes to Mailman. Bug fixes and other patches + - Added a -a option to the (e)grep commands in contrib/mmdsr to account + for logs that may have non-ascii and be seen as binary. + - Fixed the -V option to bin/list_lists to not show lists whose host is a subdomain of the given domain. (LP: #1695610) -- cgit v1.2.3 From 845dc52970be426af2a766be4609a8bef2bd1c05 Mon Sep 17 00:00:00 2001 From: Mark Sapiro Date: Sun, 4 Jun 2017 18:52:11 -0700 Subject: Fixed a regression in Cgi/options.py. --- NEWS | 3 +++ 1 file changed, 3 insertions(+) (limited to 'NEWS') diff --git a/NEWS b/NEWS index 9b0bbd46..8ac616bb 100644 --- a/NEWS +++ b/NEWS @@ -9,6 +9,9 @@ Here is a history of user visible changes to Mailman. Bug fixes and other patches + - The fix for LP: #1614841 caused a regression in the options CGI. This + has been fixed. (LP: #1602608) + - Added a -a option to the (e)grep commands in contrib/mmdsr to account for logs that may have non-ascii and be seen as binary. -- cgit v1.2.3 From 0d11dc90ee6fc9cc61d32ca3ea6819ca95ac1c12 Mon Sep 17 00:00:00 2001 From: Mark Sapiro Date: Mon, 5 Jun 2017 20:48:34 -0700 Subject: Defend against CGI requests with multiple values for the same parameter. --- NEWS | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'NEWS') diff --git a/NEWS b/NEWS index 8ac616bb..9b6d4753 100644 --- a/NEWS +++ b/NEWS @@ -9,6 +9,10 @@ Here is a history of user visible changes to Mailman. Bug fixes and other patches + - Defended against certain web attacks that cause exceptions and "we hit + a bug" responses when POST data or query fragments contain multiple + values for the same parameter. (LP: #1695667) + - The fix for LP: #1614841 caused a regression in the options CGI. This has been fixed. (LP: #1602608) -- cgit v1.2.3 From b10ddd1173595992cd02748d8fcc633199b1b873 Mon Sep 17 00:00:00 2001 From: Mark Sapiro Date: Tue, 6 Jun 2017 14:44:09 -0700 Subject: Ensure aliases.db and virtual-mailman.db are world readable and owned by the Mailman user. --- NEWS | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'NEWS') diff --git a/NEWS b/NEWS index 9b6d4753..ee6e8449 100644 --- a/NEWS +++ b/NEWS @@ -9,6 +9,10 @@ Here is a history of user visible changes to Mailman. Bug fixes and other patches + - Fixed MTA/Postfix.py to ensure that created aliases(.db) and + virtual-mailman(.db) files are readable by Postfix and the .db files are + owned by the Mailman user. (LP: #1696066) + - Defended against certain web attacks that cause exceptions and "we hit a bug" responses when POST data or query fragments contain multiple values for the same parameter. (LP: #1695667) -- cgit v1.2.3 From cb1005561f03c223dd592af19d5dfe129d2a62e5 Mon Sep 17 00:00:00 2001 From: Mark Sapiro Date: Fri, 9 Jun 2017 14:49:45 -0700 Subject: Display date of held subscriptions and keep newest. --- NEWS | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'NEWS') diff --git a/NEWS b/NEWS index ee6e8449..82df3f05 100644 --- a/NEWS +++ b/NEWS @@ -7,6 +7,11 @@ Here is a history of user visible changes to Mailman. 2.1.25 (xx-xxx-xxxx) + New Features + + - The admindb held subscriptions listing now includes the date of the + most recent request from the address. (LP: #1697097) + Bug fixes and other patches - Fixed MTA/Postfix.py to ensure that created aliases(.db) and -- cgit v1.2.3