• https://downloads.sourceforge.net/sourceforge/mailman/ (Download)

• (2022-02-10) Updated to version: mailman-2.1.39
• (2021-04-04) Updated to version: mailman-2.1.34
• (2020-05-08) Updated to version: mailman-2.1.32
• (2020-04-27) Updated to version: mailman-2.1.30
• (2018-09-05) Updated to version: mailman-2.1.29
• (2018-02-06) Updated to version: mailman-2.1.26
• (2018-01-03) Updated to version: mailman-2.1.25
• (2016-09-06) Updated to version: mailman-2.1.23
• (2016-04-28) Updated to version: mailman-2.1.22
• (2016-04-23) Updated to version: mailman-2.1.21

Log message:
update to 2.1.34; ok sthen

Log message:
Reverse the polarity of MODPY_VERSION; default is now 3.x,
if a port needs 2.x then set MODPY_VERSION=${MODPY_DEFAULT_VERSION_2}.
This commit doesn't change any versions currently used; it may be that
some ports have MODPY_DEFAULT_VERSION_2 but don't require it, those
should be cleaned up in the course of updating ports where possible.
Python module ports providing py3-* packages should still use
FLAVOR=python3 so that we don't have a mixture of dependencies some
using ${MODPY_FLAVOR} and others not.

Log message:
split the py2 version of py-dnspython off into net/py2-dnspython,
update the py3 version to 2.1.0, and adapt ports using it.

Log message:
security update to 2.1.32
ok jca, naddy

Log message:
security update to 2.1.32
ok jca, naddy

Log message:
update -stable; feedback from sthen.
> Update to 2.1.30; includes fix for CVE-2020-12137.
>
> ok sthen, jca

Log message:
Update to 2.1.30; includes fix for CVE-2020-12137.
ok sthen, jca

Log message:
replace simple PERMIT_PACKAGE_CDROM=Yes with PERMIT_PACKAGE=Yes

Log message:
Maintenance and security (CVE-2018-13796) update to 2.1.29.

Log message:
convert to PKGSTEM

Log message:
Update to 2.1.26; includes CVE-2018-5950 fix.
ok bcallah@

Log message:
Change the shebang line from /bin/sh to /bin/ksh in all ports rc.d
daemon scripts and bump subpackages that contain the *.rc scripts.
discussed with and OK aja@
OK tb

Log message:
Update mailman to 2.1.25
ok okan@

Log message:
Update to 2.1.23; includes CVE-2016-6893 fix.

Log message:
Maintenance update to 2.1.22.

Log message:
- Update to 2.1.21.
- gc configure patch since it hasn't been required since introducing
--without-permcheck in configure, despite the comment in Makefile.
- Some of Defaults.py are now upstream defaults.
Remove FLAVORs:
- Rewrite src/common.c:check_caller() for the cgi/mail wrapper to now
look at the defined group membership instead, _mailmanq (a new group).
This allows the administrator to switch mail servers and web servers
without requiring a FLAVOR for each combination; but rather, by simply
adding the cgi/mail user to the _mailmanq group. This is a diversion
from upstream, but will be proposed. At least sthen@ and dlg@ agree to
go in this general direction.

Log message:
pathes->paths in comment

Log message:
Require an explicit FLAVOR for mailman's GID checking, so that it's a bit
more obvious when people "pkg_add mailman" that they need to pick one.
(This could be improved by patching to extend the check to allow for one
of a number of possible GIDs, then we could just have a single package
covering all of them.)

Log message:
Cherry pick for CVE-2015-2775: Path traversal vulnerability
requested by jasper@

Log message:
Cherry pick for CVE-2015-2775: Path traversal vulnerability
requested by jasper@

Log message:
update to 2.1.20; includes fix for CVE-2015-2775.
feeback ajacoutot; feedback and ok jca

Log message:
Make default flavor expect group _smtpd to match our default mailer.
New 'sendmail' flavor to provide the old behavior.
ok sthen@

Log message:
bump after default python version switch

Log message:
Add a consistent header that substitutes FULLPKGNAME for the READMEs.
ok jasper@ sthen@

Log message:
Sanitize some @unexec/@extraunexec calls to rm: move them up in the
PLIST and delete everything under the @sample'd directory instead of the
directory itself to prevent a warning from pkg_delete(1) trying to
remove a non existing directory and to help preventing left-over files
and directories.
ok aja@

Log message:
Security fix for CVE-2011-0707.
Mailman "Full Name" Script Insertion Vulnerabilities.
Patch from upstream ML.

Log message:
Security fix for CVE-2011-0707.
Mailman "Full Name" Script Insertion Vulnerabilities.
Patch from upstream ML.

Log message:
Make use of rcexec.
While here, force postgresql to quit in rc_stop, ok pea@

Log message:
Simplify after recent rc.subr change.
The framework is now stable and we will start documenting it (at last).

Log message:
Cope with recent rc.subr changes.

Log message:
Cope with recent rc.subr changes.

Log message:
Move these to rc_reload=NO.

Log message:
Cope again with rc.subr changes.

Log message:
Adapt to new rc_start and fix RCS Id.
ok robert@

Log message:
Trailing space.

Log message:
- switch to pkg-readmes
- add an rc script
looks ok to sthen@

Log message:
- SECURITY UPDATE of mailman to 2.1.14
Fixes CVE-2010-3089: Mailman List Description Two Script Insertion Vulnerabilities
ok sthen@

Log message:
Bump revision after python's default change.

Log message:
remove the group check completely, mirroring what was done for
MAILMAN_USER - allows for a build and package without having
_mailman:_mailman user and group
ok stephan@

Log message:
remove marc balmer as maintainer of all of his ports, to take away the
illusion marc still maintains them. as requested by himself.

Log message:
mailman-2.1.12; ok MAINTAINER mbalmer@

Log message:
- more missing package name bumps

Log message:
- MODPY_BIN is already in default SUBST_VARS with the lang/python MODULE

Log message:
Replace 'python' invocations with ${MODPY_BIN} via ${SUBST_CMD}.
While here, regen patches.
"looks reasonable" and requested by mbalmer@

Log message:
bump pkgname when changing maintainer

Log message:
give MAINTAINER to mbalmer@

Log message:
bump PKGNAME after python version switch

Log message:
Remove surrounding quotes in COMMENT*/PERMIT_*

Log message:
base64 checksums.

Log message:
upgrade to mailman 2.1.9

Log message:
talk about installing mm-icon.png as well; bump package.
maintainer and pvalchev@ ok.

Log message:
- remove obsolete @extraunexec lines in PLIST .
- bump PKGNAME .
ok jakob@

Log message:
Bump PKGNAMEs after recent python switch

Log message:
MFC:
upgrade to mailman 2.1.8; recommended upgrade as this fixes a cross-site
scripting security bug in the previous release (CVE-2006-1712).

Log message:
add missing files; noted by djm@

Log message:
upgrade to mailman 2.1.8; recommended upgrade as this fixes a cross-site
scripting security bug in the previous release (CVE-2006-1712).

Log message:
Use python module instead of hardcoded python version.
ok alek@ (some time ago)

Log message:
mailman v2.1.7

Log message:
fix mail-gid for postfix FLAVOR

Log message:
fix mail-gid for postfix FLAVOR

Log message:
fix postfix gid

Log message:
MFC:
do not check for the existence of _mailman:_mailman at configure time,
that user/group might not exist yet

Log message:
do not check for the existence of _mailman:_mailman at configure time,
that user/group might not exist yet
noticed by Chris Mika <cmika at seenothing.org>
maintainer timeout

Log message:
mailman-2.16; ok jakob@

Log message:
use python 2.3

Log message:
MFC:
fix CAN-2004-1143 (weak password generation)
ok brad@

Log message:
MFC:
fix CAN-2004-1143 (weak password generation)
ok brad@

Log message:
SECURITY:
fix a directory traversal vulnerability
http://www.vuxml.org/openbsd/b735b5b2-7b7c-11d9-b18e-080020fe8945.html
ok brad@

Log message:
SECURITY:
fix a directory traversal vulnerability
http://www.vuxml.org/openbsd/b735b5b2-7b7c-11d9-b18e-080020fe8945.html
ok brad@

Log message:
fix CAN-2004-1143 (weak password generation)

Log message:
critical security update (CAN-2005-0202)

Log message:
get rid of INSTALL script; from Aleksander Piotrowski

Log message:
MFC:
Florian Weimer has discovered a cross-site scripting vulnerability in
the error messages that are produced by Mailman.
CAN-2004-1177
ok brad@

Log message:
MFC:
Florian Weimer has discovered a cross-site scripting vulnerability in
the error messages that are produced by Mailman.
CAN-2004-1177
ok brad@

Log message:
Florian Weimer has discovered a cross-site scripting vulnerability in
the error messages that are produced by Mailman.
CAN-2004-1177

Log message:
SIZE

Log message:
Add WANTLIB markers

Log message:
initial sweep for MESSAGE decoration removal; ok espie@

Log message:
new style plists.

Log message:
use FILESDIR instead of hardcoding 'files/';
okay jakob@.

Log message:
MFC:
update to mailman v2.1.5

Log message:
MFC:
update to mailman v2.1.5

Log message:
remove messages about user/group change.

Log message:
update to mailman v2.1.5

Log message:
honour PYTHON_VER in PLIST, so we can build against python-2.3; ok jakob@

Log message:
upgrade to v2.1.4, take MAINTAINER

Log message:
@dirrm shared directories

Log message:
- update to mailman 2.1.3
- drop maintainership
- use @extra
- get rid of WWW while here

Log message:
explicitly state that the 'mailman' mailinglist is mandatory and has
to be created, otherwise mailman won't start
idea from Xavier Santolaria <xavier@santolaria.net>

Log message:
new user/group naming schema
bumped PKGNAME except for xcept

Log message:
better

Log message:
- change order in setup to a sensitive way
- adjust an error message in "Common Problems"

Log message:
update to mailman 2.1.2
- lots of bugfixes
- support for portuguese and polish
heads up and some testing by jakob

Log message:
update to mailman 2.1.1
- includes bugfixes and security patches
- more localization

Log message:
bump package version
thanks brad@

Log message:
Add a distribution patch, to fix an XSS bug. This patch is a quick fix and
will be part of the upcomming 2.1.1 version of mailman.
thanks to jakob@ for the reminder

Log message:
use the actual homepage in HOMEPAGE
from jakob@

Log message:
nearly forgotten

Log message:
update to mailman 2.1
- multi-lingual support
- list creation/removal through web interface
- MIME base content filtering (demime et.al.)
- new architecture of mail delivery subsystem
- better, faster, cheaper, ... ;-)
naddy@ OK

Log message:
set MAINTAINER to sturm@openbsd.org
naddy@ OK

Log message:
patch crontab.in, from MAINTAINER