0.3.12 Release

Mailman Core

• Bump Core to 3.3.4

Mailman Web

• Bump Postorius to 1.3.5
• Bump Mailmanclient to 3.3.3
• Bump Django-mailman3 to 1.3.7

Security

CVE-2021-40347: Allows any logged-in user to unsubscribe any other member on any other list on same Mailman installation using a specially crafted POST request due to a missing ownership check.

0.3.11 Release

Core

• Bump Mailman to 3.3.3

Web

• Bump Postorius to 1.3.4
• Bump Hyperkitty to 1.3.4
• Bump Django-mailman3 to 1.3.5
• Fix a typo in uWSGI configuration that resulted in 1 process instead of 4 in config (#428)
• Fix a bug where Core couldn’t fetch list’s welcome template from Postorius when subscribing a user (#368)

Postorius

• Bump Postorius to 1.3.4
• Same fixes for uWSGI config as Web image. (#429)
• Same fixes for templates as Web image. (#368)

0.3.10 Release

Mailman Core

• Remove pinned dependencies on flufl.lock and dnspython
• Bump Core to 3.3.2 release.

0.3.9 Release

Mailman Core

• Ping flufl.lock<5.0 and dnspython<2.0 due to incompatabilities.

Release 0.3.8

Mailman Core

• Pin dnspython<2.0 since the new versions aren’t compatible with currently released version of Core.
• Bump to using Alpine 3.12 instead of 3.8 which is EOL and switch to python 3.8

Mailman Web

• Bump to using Alpine 3.12 instead of 3.8 which is EOL and switch to python 3.8

0.3.7 Release

Mailman Web

• Compile locale files so that the Django is actually able to use the translations.

0.3.6 Release

Mailman Web

• Add python-memcached to web/ images. Thanks to @jGleitz .

0.3.5 Release

Mailman Web

Bump Mailmanclient to 3.3.1.

0.3.4 Release

Mailman web

• Fix a bug where starting 0.3.3 container would cause static files errors with Hyperkitty. (See #382)

0.3.3 Release

Mailman Web

• Bump Postorius and Hyperkitty to 1.3.3.
• Bump Django-mailman3 to 1.3.4

Mailman Core

Bump Core to 3.3.1

NOTE

Please clear the static files from the previous releases by running this command before upgrade:

sudo rm -rf /opt/mailman/web/static