Re: [Mailman-Developers] Patches in mandriva package

2006-09-11 Thread Tokio Kikuchi
Hi, Sorry that I was unable to respond. Barry Warsaw wrote: > On Sep 9, 2006, at 10:09 AM, Guillaume Rousse wrote: > >> I'd like to use this occasion to drop a maximum of patches we still >> have: >> - is 2.1.9 still vulnearble to CVE-2005-3573 ? I didn't found any >> reference to it in the r

Re: [Mailman-Developers] create.py: passing form values by URL

2006-09-11 Thread Brad Knowles
At 8:17 PM -0400 2006-09-11, Pierre-Marc Fournier wrote: > Here is the patch. I suggest that it be integrated in Mailman, as it > would enable everyone to use a similar system easily. If you want this considered for incorporation into Mailman, I would encourage you to upload it to the Mailman

[Mailman-Developers] create.py: passing form values by URL

2006-09-11 Thread Pierre-Marc Fournier
Hello, At our site, we have a web page with a form that users fill to request a new mailing list. If that mailing list gets approved, the admins use Mailman's create.py to effectively create it. A trivial patch allows the approval system (or any script) to pass the list name, owner, etc to create

Re: [Mailman-Developers] Patches in mandriva package

2006-09-11 Thread Barry Warsaw
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sep 9, 2006, at 10:09 AM, Guillaume Rousse wrote: > I'd like to use this occasion to drop a maximum of patches we still > have: > - is 2.1.9 still vulnearble to CVE-2005-3573 ? I didn't found any > reference to it in the release notes, and the pa

Re: [Mailman-Developers] Patches for security issues in 2.1.9rc1

2006-09-11 Thread Albert Chin
On Mon, Sep 11, 2006 at 10:52:03AM -0400, Barry Warsaw wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On Sep 10, 2006, at 4:25 AM, Albert Chin wrote: > > > What revisions contain the patch for CVE-2006-2941? > > - Fixed denial of service attack which can be caused by some > >

Re: [Mailman-Developers] Patches for security issues in 2.1.9rc1

2006-09-11 Thread Barry Warsaw
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sep 10, 2006, at 4:25 AM, Albert Chin wrote: > What revisions contain the patch for CVE-2006-2941? > - Fixed denial of service attack which can be caused by some > standards-breaking RFC 2231 formatted headers. CVE-2006-2941. http://svn.sou

Re: [Mailman-Developers] D'oh! CVS -> SVN...

2006-09-11 Thread Barry Warsaw
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sep 11, 2006, at 1:40 AM, Dale Newfield wrote: > So, it appears I'm still running version 2.1.8b1, and I'm doing so > from > code checked out of CVS (Tag = NRelease_2_1_8b1, but probably with > modifications...) > > I'd love to be able to do a cv