Change logs for mailman source package in Wheezy

  • mailman (1:2.1.15-1+deb7u1) wheezy-security; urgency=high
    
      * Fix security issue: path traversal through local_part.
        Affects installations which use an Exim or Postfix transport
        instead of fixed aliases; attacker needs to be able to place
        files on the local filesystem.
        (CVE-2015-2775, Closes: 781626)
    
     -- Thijs Kinkhorst <email address hidden>  Mon, 06 Apr 2015 18:17:34 +0200
  • mailman (1:2.1.15-1) unstable; urgency=low
    
    
      * New upstream release.
      * Improve Exim4 instructions, thanks Andrew Hodgson.
      * Remove obsolete PRIVATE_ARCHIVE_URL variable, thanks Matthew Hall
        (closes: #676481).
      * Correct mmarch man page, thanks Francesco Potortì (closes: #583369).
      * Specify need for MTA=None in postfix-to-mailman.py (closes: #648976).
    
     -- Thijs Kinkhorst <email address hidden>  Sat, 16 Jun 2012 12:04:40 +0200
  • mailman (1:2.1.15~rc1-1) unstable; urgency=low
    
    
      [ Thijs Kinkhorst ]
      * New upstream release candidate.
      * Remove obsolete patches, applied upstream:
        02_use_dpkg_buildflags.patch
        07_snooze.patch
        59_fix_missing_language_crash.patch
        70_invalid_utf8_dos.patch
        71_date_overflows.patch
        74_admin_non-ascii_emails.patch
        80_CVE-2011-0707_confirm_xss.patch
        99_js_templates.patch
    
      [ Thorsten Glaser ]
      * Update the watch file for Launchpad
    
     -- Thijs Kinkhorst <email address hidden>  Sun, 20 May 2012 14:01:42 +0200
  • mailman (1:2.1.14-4) unstable; urgency=low
    
    
      * Ensure CPPFLAGS and LDFLAGS are actually used during build,
        thanks Simon Ruderich for the patch! (closes: #663590)
        Additionally, enable all available hardening features.
      * Checked for policy 3.9.3, add DEP3 patch headers.
      * Add Danish debconf translation, thanks Joe Dalton (closes: #659467).
      * Add 'su root list' statements to logrotate config, to cope
        with logrotate >= 3.8; thanks Joël Bertrand (closes: #653766).
      * Avoid config file prompt for mailman crontab entry if this
        file was unmodified (closes: #655837).
    
     -- Thijs Kinkhorst <email address hidden>  Sun, 18 Mar 2012 14:12:49 +0100
  • mailman (1:2.1.14-3) unstable; urgency=low
    
    
      * Make man page descruptions match more keywords (closes: #597112).
      * Add cull_bad_shunt command to default cron job (closes: #615204)
        and improve cron job handling in the package.
      * Import dpkg buildflags, also enabling hardening features.
      * Remove gate_news debconf question.
    
     -- Thijs Kinkhorst <email address hidden>  Sat, 08 Oct 2011 17:27:51 +0200
  • mailman (1:2.1.14-2) unstable; urgency=low
    
    
      [ Thijs Kinkhorst ]
      * Move mail-transport-agent to Recommends, since Mailman can be
        configured to run with a remote MTA (closes: #616292).
      * Update to policy 3.9.2, add build-{arch,indep} targets.
    
      [ Thorsten Glaser ]
      * Add myself to Uploaders, as suggested by Thijs.
      * Apply patch from Barry Warsaw to switch from python-support
        to dh_python2. (LP: #788514) (Closes: #637398)
    
     -- Thijs Kinkhorst <email address hidden>  Wed, 17 Aug 2011 12:00:50 +0000
  • mailman (1:2.1.14-1) unstable; urgency=medium
      * New upstream release. Patches incorporated:    - 15_mailmanctl_daemonize.patch    - 83-CVE-2010-3089--bug599833.patch  * Add upstream patch for CVE-2011-0707: XSS in confirmations. -- Thijs Kinkhorst <email address hidden>  Sat, 19 Feb 2011 08:26:43 +0100
  • mailman (1:2.1.13-4.1) unstable; urgency=high
    
    
      * Non-maintainer upload.
      * debian/patches
        - (83): New. CVE-2010-3089 security fix from mailman 2.14. Patch
          thanks to <email address hidden> (grave, security; Closes: #599833).
    
     -- Jari Aalto <email address hidden>  Sat, 16 Oct 2010 08:46:55 +0300