Howdy everyone, In an effort to clean house a bit in Dada Mail, I’m tackling the issue with the CPAN Perl modules that are shipped with the Dada Mail distro. You’ll find them in, dada/DADA/perllib Of the distribution. There’s about a quarter of a million lines of code in there. Several problems I ask myself: What actual modules are in there? Which ones are out of date? Or unused? Which ones have security issues? Or bugs? Dunno! These are not good problems to have moving forward. To repair this, I’ve ...Continue Reading

Hello everyone, v11.18.2 has been released! Download and install: https://dadamailproject.com/d/install_dada_mail.pod.html Changelog (and below): https://dadamailproject.com/d/changes_11_x.pod.html#pod11.18.2 Focus This version of Dada Mail is a minor bug release. Some technical debt has been worked on to slim down the distro slightly. Bugfixes Plugins: Bridge, append_message_to_file sometimes called with wrong arguments https://github.com/justingit/dada-mail/issues/1112 Deleting Stationery/Schedule will create a new ...Continue Reading

Hello everyone, v11.18.1 has been released! Download and install: https://dadamailproject.com/d/install_dada_mail.pod.html Changelog (and below): https://dadamailproject.com/d/changes_11_x.pod.html#pod11.18.1 Focus This version of Dada Mail is a minor bug release. Bugfixes Core 5 File Manager Perl connector/upload script fails to work correctly if you set additional Perl libaries https://github.com/justingit/dada-mail/issues/1108 Changing Delivery Preferences (individual, digest, vacation) in Membership: View causes c ...Continue Reading

Hello everyone, v11.17.0 has been released! Download and install: https://dadamailproject.com/d/install_dada_mail.pod.html Changelog (and below): https://dadamailproject.com/d/changes_11_x.pod.html#pod11.17.0 Focus This version of Dada Mail has been released with some new features and a few small bug fixes. Features Only one mailing list? The default screen is now that list screen Dada Mail supports an arbitrary number of lists, but many people just run one mailing list. If this is the case, Dada Mail will show what i ...Continue Reading

Hello Everyone, v11.16.3 has been released (as well as v11.16.2 and 11.16.1). These small releases are just fix bugs dealing with the CSRF vulnerability - some of the functionality of Dada Mail broke (which are now fixed). If you’re running v11.16.0 to 11.16.2, you can just use this dada_mail.js file, https://raw.githubusercontent.com/justingit/dada-mail/v11_16_3-stable_2021_09_27/dada/static/javascripts/dada_mail.jsThis file goes into your dada_mail_support_files directory at,  dada_mail_support_files/static/ ...Continue Reading

Here’s the CVE report: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41083-- Justin J: Lead Dadaist*url:         dadamailproject.comemail:    justin@PROTECTEDtwitter:  @dadamailDada Mail Announcements: http://dadamailproject.com/cgi-bin/dada/mail.cgi/list/dada_announce/  On Sep 20, 2021, at 1:56 PM, Justin John justin@PROTECTED [Dada Mail Developers] <dadadev@PROTECTED> wrote: From: justin@PROTECTEDHello everyone, v11.16.0 h ...Continue Reading

Hello everyone, v11.16.0 has been released! Download and install: https://dadamailproject.com/d/install_dada_mail.pod.html A CSRF Vulnerability has been found in Dada Mail and this release is primarily put out to fix it. All versions of Dada Mail below v11.16.0 are vulnerable and it’s another upgrade that I would suggest for absolutely everyone. Changelog (and below): https://dadamailproject.com/d/changes_11_x.pod.html#pod11.16.0 Focus This version of Dada Mail has been released primarily to fix a security vulnerabil ...Continue Reading

Hello everyone, v11.15.1 has been released! Download and install: https://dadamailproject.com/d/install_dada_mail.pod.html This release includes a few bug fixes dealing with potential security issues. The biggest one is the reCAPTCHA v2 problem - it’s very easy to circumvent its protection completely, so if you’re relying on reCAPTCHA v2, upgrade. Changelog (and below): https://dadamailproject.com/d/changes_11_x.pod.html#pod11.15.1 Focus This is a bugfix release, with changes to close up some potential security hole ...Continue Reading

Howdy everyone, how’s v11.15.0 working for everyone? While finishing up work on getting the GET requests found in email messages - things like confirming your subscriptions, it dawned on me that Dada Mail has no checks for other GET requests, that should be POSTs. Here’s a scenario: you want to log into your mailing list, so you fill out the password in the login form. Works a peach. The login form uses a POST request, as it’s sending pretty sensitive information through the pipes (your password), but there’s ...Continue Reading

It is working now    Richard Mourino ------ Original Message ------ From: "Mourino richard.mourino@PROTECTED [Dada Mail Developers]" <dadadev@PROTECTED> To: "Dada Mail Developers Subscriber" <richard.mourino@PROTECTED> Sent: 8/31/2021 6:03:15 PM Subject: Re: [dadadev] v11.15.0 Released!   From: richard.mourino@PROTECTED Check the link for the uncompress file   got a 404    Richard Mourino ...Continue Reading