Mailman Upgrade? When?

[Ashocka]

As I understand it CPanel's version of Mailman is 2.1.9cp2. Can I ask why CPanel has not upgraded to the most recent version 2.1.11 (2008-06-07)

version 2.1.10 was released (2008-04-21)

Is anyone at CPanel following these upgrades... and where do you post update announcements on the website?

[Infopro]

http://layer2.cpanel.net/

http://changelog.cpanel.net/

[Ashocka]

http://layer2.cpanel.net/

http://changelog.cpanel.net/

I have WHM 11.23.2 cPanel 11.23.3-S25971 installed.

I'm sorry, whatever you are trying to say, which is obvious to you, is not obvious to me.

[Infopro]

Sorry, you asked:

where do you post update announcements on the website?

Those links are where you can follow updates.

[Ashocka]

Okay, thanks, but what I was more looking for was a concise listing of all the packages within CPanel and their current version. In this case CPanel is lagging well behind. Why?

[Ashocka]

It's amazing one pays for a product like this and such a simple and reasonable request goes unanswered.

[cPanelDavidG]

It's amazing one pays for a product like this and such a simple and reasonable request goes unanswered.

We are currently working on setting up such a thing. If you need to know about any specific version of any software we bundle with cPanel, simply email sales@cpanel.net with your inquiry and we'll be able to provide you with the most up-to-date information until we can get this new web page up and running .

[Ashocka]

Thanks for the reply and clarification

[brianc]

I noticed the original question was never answered:

Can I ask why CPanel has not upgraded to the most recent version 2.1.11 (2008-06-07)

When can we expect an upgrade of mailman within cPanel?

Thanks!

[Ashocka]

I noticed the original question was never answered:



When can we expect an upgrade of mailman within cPanel?

Thanks!

Yes, exactly. It just amazes me in this day and age of information that you cannot get a simple answer to a question that must have some project status somewhere in CPanel. Sometimes these things just astound me.

[handsonhosting]

Just adding to this thread that a MailMan update is urgently needed.

PCI Compliance companies are now failing the PCI Scan as the Mailman version in the latest cPanel is exploitable to under the heading of "Mailman Multiple Input Validation Vulnerabilities".

Vulnerability Mailman Multiple Input Validation Vulnerabilities
Port 443/tcp
Scan Date 28-AUG-2008 03:27
URL
Protocol https Port 443 Read Timeout 10000 Method GET Demo
Path /mailman/admin/mailman

[misterMan]

Need mailman 2.1.10 for PCI compliance, and while we're at it openSSL HAS to get to past 0.9.8b. This is imperative.

PS I've read all the other forums on Open SSL, ...not much there. Unless someone has info I haven't seen.

Thanks for any info!

[compunet2]

Vote for this bugzilla update:

http://bugzilla.cpanel.net/show_bug.cgi?id=6527

[mambovince]

I've seen recent discussions that hosts have been phasing out mailman because hardly anyone uses it and it consumes a considerable amount of resources when enabled.

Any server experts confirm this?

Thanks

- Vince

[brianc]

That is not true for us. Mailman is a very important part of our service offering. We also do not throttle our smtp servers either as seems to be the typical trend these days. We do a simple screening of any mailman list to get a feel of what their list volume is doing and then put them on the appropriate server.

We host hundreds of mailing lists along with standard web/email hosting services and with some simple configuration tweaks, our server load has been no problem at all.