GNU Mailman

This is a patch release to GNU Mailman 2.1. A cross-site scripting vulnerability has been closed, and four new languages have been added: Catalan, Croatian, Romanian, and Slovenian. Header filtering has been expanded for use with upstream virus and spam filters (see Privacy -> Spam Filters). Many other bugfixes have been included as well.

New language translations (pt/pl). Defaults.py improved to be more readable. Email addresses containing 8-bit characters are rejected (real names still allow 8-bit characters). X-Originating-Email header removed for anonymous lists. Now it's possible to build mailman specifying $DESTDIR. Now using email package 2.5.1. Semantics for the extend.py hook to MailList objects have changed slightly. bin/genaliases has a -q (quiet) flag. bin/transcheck now checks for double-%'s. The --change-msg (-c) option has been removed from bin/add_members. There are other improvements.

Bugfixes and language updates. A cross-site scripting vulnerability in the user options page has been fixed. The ability to control headers shown in pages included in plaintext and MIME digests has been restored. Messages included in the plaintext digests are now sent through the scrubber to remove (and archive) attachments. MIME digests include attachments inline.

Major new features include full internationalization (17 languages), list creation and removal via the Web, real name support, improved user and admin workflow, personalization and VERP-ish bounce detection, emergency moderation, MIME-based content filtering, regular expression based topics, member searching, moderated newsgroups, a new architecture for the email delivery subsystem, new moderation and privacy controls, invitations, autoresponse governors, global user options, improved MIME and i18n support in the archiver, a new list moderator role, urgent postings, and more.

Some Python 1.5.2 compatibility problems that crept into Mailman 2.0.12 have been fixed. Another minor cross site scripting vulnerability has been fixed.