Hello Mathieu, Thank you for your report.
> But unfortunately, upgrading mailman on a production server is current > a real pain in the ass. It takes hour. This is inherent to the policy of Debian security updates: we can only make the minimal changes required to address the bug - changing the package installation procedure is not allowed. The goal is of course to minimise breakage; every unneeded change introduces an unneeded risk of something going wrong. By the way, I've never experienced this upgrade to take hours (or even more than say a minute or two). You are right about the qfiles that are annoying, but I'm not sure about whether that can be resolved easily. Especially within the constraints outlined below. Thijs
signature.asc
Description: This is a digitally signed message part
