[Mailman-Users] Re: Mailman 2.1.31 security release

2020-05-05 Thread Mark Sapiro
There were some i18n issues in this morning's Mailman 2.1.31 release so
I have released Mailman 2.1.32 to fix these.

Python 2.6 is the minimum supported, but Python 2.7, preferably 2.7.18 -
the final Python 2 release, is strongly recommended.

Mailman 2.1.31 is a security fix release with an update to the Spanish
translation and another couple of minor fixes. See the attached
README.txt and the bug report at
 for details.

For those who don't want to install the full update, the above bug
report contains a simple patch to fix the security issue.

As noted Mailman 2.1.30 was the last feature release of the Mailman 2.1
branch from the GNU Mailman project. There has been some discussion as
to what this means. It means there will be no more releases from the GNU
Mailman project containing any new features. There may be future patch
releases to address the following:
 - i18n updates.
 - security issues.
 - bugs affecting operation for which no satisfactory workaround exists.

Mailman 2.1.31 is the first such patch release and Mailman 2.1.32 is the
second.

Mailman is free software for managing email mailing lists and
e-newsletters. Mailman is used for all the python.org and
SourceForge.net mailing lists, as well as at hundreds of other sites.

For more information, please see our web site at one of:

http://www.list.org
https://www.gnu.org/software/mailman
http://mailman.sourceforge.net/

Mailman 2.1.32 can be downloaded from

https://launchpad.net/mailman/2.1/
https://ftp.gnu.org/gnu/mailman/
https://sourceforge.net/projects/mailman/

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
2.1.32 (05-May-2020)

  i18n

Fixed a typo in the Spanish translation and updated mailman.pot and
the message catalog for 2.1.31 security fix.

2.1.31 (05-May-2020)

  Security

- A content injection vulnerability via the options login page has been
  discovered and reported by Vishal Singh. This is fixed.  (LP: #1873722)

  i18n

- The Spanish translation has been updated by Omar Walid Llorente.

  Bug Fixes and other patches

- Bounce recognition for a non-compliant Yahoo format is added.

- Archiving workaround for non-ascii in string.lowercase in some Python
  packages is added.


signature.asc
Description: OpenPGP digital signature
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: Mailman 2.1.31 security release

2020-05-05 Thread Mark Sapiro
On 5/5/20 9:01 AM, Mark Sapiro wrote:
> 
> Python 2.6 is the minimum supported, but Python 2.7, preferably 2.7.17 -
> the final Python 2 release, is strongly recommended.

It has been brought to my attention that the final Python 2 release is
2.7.18, released April 20, 2020, and that is what is recommended.

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan



signature.asc
Description: OpenPGP digital signature
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Mailman 2.1.31 security release

2020-05-05 Thread Mark Sapiro
I am pleased to announce the release of Mailman 2.1.31

Python 2.6 is the minimum supported, but Python 2.7, preferably 2.7.17 -
the final Python 2 release, is strongly recommended.

This is a security fix release with an update to the Spanish translation
and another couple of minor fixes. See the attached README.txt and the
bug report at  for details.

For those who don't want to install the full update, the above bug
report contains a simple patch to fix the security issue.

As noted Mailman 2.1.30 was the last feature release of the Mailman 2.1
branch from the GNU Mailman project. There has been some discussion as
to what this means. It means there will be no more releases from the GNU
Mailman project containing any new features. There may be future patch
releases to address the following:
 - i18n updates.
 - security issues.
 - bugs affecting operation for which no satisfactory workaround exists.

Mailman 2.1.31 is the first such patch release

Mailman is free software for managing email mailing lists and
e-newsletters. Mailman is used for all the python.org and
SourceForge.net mailing lists, as well as at hundreds of other sites.

For more information, please see our web site at one of:

http://www.list.org
https://www.gnu.org/software/mailman
http://mailman.sourceforge.net/

Mailman 2.1.31 can be downloaded from

https://launchpad.net/mailman/2.1/
https://ftp.gnu.org/gnu/mailman/
https://sourceforge.net/projects/mailman/


-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
2.1.31 (05-May-2020)

  Security

- A content injection vulnerability via the options login page has been
  discovered and reported by Vishal Singh. This is fixed.  (LP: #1873722)

  i18n

- The Spanish translation has been updated by Omar Walid Llorente.

  Bug Fixes and other patches

- Bounce recognition for a non-compliant Yahoo format is added.

- Archiving workaround for non-ascii in string.lowercase in some Python
  packages is added.


signature.asc
Description: OpenPGP digital signature
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/