Name | Modified | Size | Downloads / Week |
---|---|---|---|
Parent folder | |||
mailman-2.1.24.tgz | 2017-06-02 | 9.3 MB | |
mailman-2.1.24.tgz.sig | 2017-06-02 | 72 Bytes | |
README | 2017-06-02 | 1.4 kB | |
Totals: 3 Items | 9.3 MB | 0 |
2.1.24 (02-Jun-2017) Security - A most likely unexploitable XSS attach that relies on the Mailman web server passing a crafted Host: header to the CGI environment has been fixed. Apache for one is not vulnerable. Thanks to Alqnas Eslam. New Features - There is a new RCPT_BASE64_HEADER_NAME setting. If this is set to a non-empty string, that string is the name of a header that will be added to personalized and VERPed deliveries with value equal to the base64 encoding of the recipient's email address. This is intended to enable identification of the recipient otherwise redacted from "spam report" feedback loop messages. - cron/senddigests has a new -e/--exceptlist option to send pending digests for all but a named list. (LP: #1619770) - The values for DEFAULT_DIGEST_FOOTER and DEFAULT_MSG_FOOTER have been changed to use a standard signature separator for DEFAULT_MSG_FOOTER and to remove the unneded line of underscores from DEFAULT_DIGEST_FOOTER. (LP: #266269) i18n - The Polish html templates have been recoded to use html entities instead of non-ascii characters. - The Basque (Euskara) translation has been updated by Gari Araolaza. - The German "details for personalize" page has been updated by Christian F Buser. - The Japanese translation has been updated by Yasuhito FUTATSUKI.