From MAILER-DAEMON Thu Jul 11 15:53:40 2002 Envelope-to: mailman-developers-bounces@python.org Received: from [200.61.188.243] (helo=m3srv02) by mail.python.org with esmtp (Exim 4.05) id 17Sk0S-0004e9-00 for mailman-developers-bounces@python.org; Thu, 11 Jul 2002 15:53:40 -0400 Received: from thedc02.thebas.com ([10.1.1.3]) by m3srv02 with Microsoft SMTPSVC(5.0.2195.4905); Thu, 11 Jul 2002 17:00:06 -0300 Received: by thedc02.thebas.com with Internet Mail Service (5.5.2653.19) id ; Thu, 11 Jul 2002 16:55:03 -0300 Message-ID: <1E774123429CC84995E7DA78FED5F49D408FEF@thedc02.thebas.com> From: System Administrator To: mailman-developers-bounces@python.org Subject: Undeliverable: [Mailman-Developers] RELEASED Mailman 2.0.12 Date: Thu, 11 Jul 2002 16:55:03 -0300 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) X-MS-Embedded-Report: Content-Type: multipart/mixed; boundary="----_=_NextPart_000_01C22914.D8CBF488" X-OriginalArrivalTime: 11 Jul 2002 20:00:06.0562 (UTC) FILETIME=[8D8C2820:01C22915] This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. ------_=_NextPart_000_01C22914.D8CBF488 Content-Type: text/html; charset="iso-8859-1" Undeliverable: [Mailman-Developers] RELEASED Mailman 2.0.12

Your message

  To:      mailman-announce@python.org
  Cc:      mailman-developers@python.org; mailman-users@python.org
  Subject: [Mailman-Developers] RELEASED Mailman 2.0.12
  Sent:    Thu, 11 Jul 2002 16:52:33 -0300

did not reach the following recipient(s):

omarmo@thebas.com on Thu, 11 Jul 2002 16:54:54 -0300
    The recipient name is not recognized
        The MTS-ID of the original message is: c=us;a= ;p=thebas sa;l=THEDC020207111954NZ5X2T9P
    MSEXCH:IMS:Thebas sa:CENTRAL:THEDC02 0 (000C05A6) Unknown Recipient

  ------_=_NextPart_000_01C22914.D8CBF488 Content-Type: message/rfc822 Message-ID: <15661.57857.753290.942668@anthem.wooz.org> From: barry@zope.com To: mailman-announce@python.org Cc: mailman-developers@python.org, mailman-users@python.org Subject: [Mailman-Developers] RELEASED Mailman 2.0.12 Date: Thu, 11 Jul 2002 16:52:33 -0300 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) X-MS-Embedded-Report: List-Help: List-Subscribe: , List-Unsubscribe: , Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable [Mailman-Developers] RELEASED Mailman 2.0.12

I' released Mailman 2.0.12 which fixes a cross-site = scripting
vulnerability, among other changes.  I = recommend that folks upgrade
their 2.0.x systems to this new version.  See = below for a NEWS file
excerpt.

As usual, I've made both full source tarballs and = patches available.
See

    http://sourceforge.net/project/showfiles.php?group_id=3D= 103

for links to download all the patches and the source = tarball.  If you
decide to install the patches, please do read the = release notes first:

    http://sourceforge.net/project/shownotes.php?release_i= d=3D97760

See also:

    http://www.gnu.org/software/mailman
    http://www.list.org
    http://mailman.sf.net

Cheers,
-Barry

-------------------- snip snip = --------------------
2.0.12 (02-Jul-2002)

    - Implemented a guard against some = reply loops and 'bot
      subscription = attacks.  Specifically, if a message to -request
      has a Precedence: = bulk (or list, or junk) header, the command is
      ignored.  = Well-behaved 'bots should always include such a
      header.

    - Changes to the configure script = so that you can pass in the mail
      host and web host by = setting the environment variables MAILHOST
      and WWWHOST = respectively.  configure will also exit if it can't
      figure out these = values (usually due to broken dns).

    - Closed another minor cross-site = scripting vulnerability.


_______________________________________________
Mailman-Developers mailing list
Mailman-Developers@python.org
http://mail.python.org/mailman-21/listinfo/mailman-dev= elopers

------_=_NextPart_000_01C22914.D8CBF488--