From 64ea6bb62e3665c5f212e9f0dd7156857ea5ed3c Mon Sep 17 00:00:00 2001 From: hmeland Date: Sun, 13 Jun 1999 09:15:01 +0000 Subject: My annotation, v1 :) --- ACKNOWLEDGMENTS | 2 +- NEWS | 18 ++++++++++++++++++ 2 files changed, 19 insertions(+), 1 deletion(-) diff --git a/ACKNOWLEDGMENTS b/ACKNOWLEDGMENTS index 8f9cd9a14..eaaf9e153 100644 --- a/ACKNOWLEDGMENTS +++ b/ACKNOWLEDGMENTS @@ -4,7 +4,7 @@ The following folks are the primary maintainers of Mailman: Ken Manheimer, Mailman's savior Barry Warsaw, Mailman's yappy guard dog (and current hydrant pisser) Scott Cotton, Cookie-Monster - Harald Meland + Harald Meland, Norse Mailman They can be contacted directly via mailman-cabal@python.org. diff --git a/NEWS b/NEWS index c9dc13905..8eb9e036b 100644 --- a/NEWS +++ b/NEWS @@ -2,6 +2,24 @@ Mailman - The GNU Mailing List Management System Copyright (C) 1998 by the Free Software Foundation, Inc. 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA +1.0rc2 + +- A security flaw in the CGI cookie mechanisms was discovered -- the + Mailman-issued cookies were easily spoofable, implying that + e.g. admin access to all Mailman lists via the web interface could + be compromised. This flaw has now been fixed. + +- Handling of SMTP errors has been improved. + +- Both "Mass Subscription" via web admin interface and bin/add_members + have been greatly sped up. + +- autoconf check for syslog has been revamped, and is now verified to + work on SCO OpenServer 5. If syslog can't be found, the C wrappers + will compile, but without any syslog calls. + +- Various other bug fixes. + 1.0rc1 - There is a new Mailman logo, contributed by The Dragon De Monsyne. -- cgit v1.2.3-70-g09d2