Page MenuHomePhabricator
Create Task
Maniphest T24708

Update Wikimedia's Mailman install
Closed, ResolvedPublic
Actions

Description

Mailmans changes 2.1.9 -> 2.1.13

We are currently running 2.1.9 and the latest stable is currently 2.1.13 (December '09).

The last few revisions have apparently been "dedicated" dealing with security issues from my understanding of reading another mailing list.

Also since I can never find the change log on their site I'm attaching a copy from their package (showing 2.1.9 -> 2.1.13 changes)

(Also cc'ing, Cary since he is involved with mailing lists.)

Version: unspecified
Severity: normal

Attached:

Mailman_Change_log.txt21 KBDownload

Details

Reference
bz22708

Related Objects
Search...

Event Timeline

• bzimport raised the priority of this task from to High.Nov 21 2014, 10:58 PM
• bzimport added projects: Wikimedia-Mailing-lists, acl*sre-team.
• bzimport set Reference to bz22708.
• bzimport added a subscriber: Unknown Object (MLST).
Peachey88 created this task.Mar 3 2010, 12:35 AM
• bzimport added a comment.Apr 26 2010, 7:18 AM

mike.lifeguard+bugs wrote:

(In reply to comment #0)

(Also cc'ing, Cary since he is involved with mailing lists.)

AFAIK, he just handles creating mailing lists. Fred has been doing more in-depth stuff.

• bzimport added a comment.Apr 26 2010, 7:31 PM

bugs wrote:

(In reply to comment #1)

AFAIK, he just handles creating mailing lists. Fred has been doing more
in-depth stuff.

He does, but there's nothing wrong with keeping him in the loop, hence the CC. :-)

• bzimport added a comment.May 2 2010, 8:56 PM

mike.lifeguard+bugs wrote:

(In reply to comment #2)

He does, but there's nothing wrong with keeping him in the loop, hence the CC.

It was just an excuse to ping Fred via CC to get attention :D

• bzimport added a comment.Jul 20 2010, 2:38 AM

mike.lifeguard+bugs wrote:

(In reply to comment #3)

(In reply to comment #2)

He does, but there's nothing wrong with keeping him in the loop, hence the CC.

It was just an excuse to ping Fred via CC to get attention :D

Too bad it dun work :(

hashar added a comment.Oct 29 2010, 1:20 PM

The current stable GNU Mailman version is 2.1.14, released on 20-Sep-2010.

• MZMcBride added a comment.Feb 5 2011, 8:46 PM

According to Mark yesterday (February 4, 2011) in #wikimedia-operations: "mailman will be moved to a new box and upgraded in the process soon"

• bzimport added a comment.Jun 20 2011, 2:04 AM

bugs wrote:

(In reply to comment #6)

According to Mark yesterday (February 4, 2011) in #wikimedia-operations:
"mailman will be moved to a new box and upgraded in the process soon"

Does anyone know if it was ever moved? Bark?

Reedy added a comment.Jul 6 2011, 8:10 PM

Removing "shell" keyword for things that aren't directly doable by shell users etc

Reedy added a comment.Jul 6 2011, 8:31 PM

Adding ops keyword

Reedy added a comment.Jul 6 2011, 8:32 PM

Removing shell keyword if exists

MarkAHershberger added a comment.Jul 16 2011, 9:05 PM

http://rt.wikimedia.org/Ticket/Display.html?id=1176

siebrand added a comment.Aug 28 2011, 10:04 PM

Mailman 2.1.9 being vulnerable to various XSS attacks has been reported in OTRS ticket 2011082210003661, too. According to http://www.list.org/, the current stable GNU Mailman version is 2.1.14, released on 20-Sep-2010, as also mentioned almost a year ago in comment 5 by Ashar.

• MZMcBride added a comment.Aug 29 2011, 12:48 AM

(In reply to comment #12)

Mailman 2.1.9 being vulnerable to various XSS attacks has been reported in OTRS
ticket 2011082210003661, too. According to http://www.list.org/, the current
stable GNU Mailman version is 2.1.14, released on 20-Sep-2010, as also
mentioned almost a year ago in comment 5 by Ashar.

If there are XSS vulnerabilities, that warrants an increased importance rating, in my view. And makes this no longer an enhancement. Not that these drop-downs really mean much, but still...

mark added a comment.Jan 19 2012, 5:01 PM

Mailman has been moved to a new server, and in the process was upgraded to the version in Ubuntu Lucid, 2.1.13.

Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL