mailman - Powerful, web-based mailing list manager

Distribution: Debian 8 (Jessie)
Repository: Debian Main amd64
Package name: mailman
Package version: 2.1.18
Package release: 2+deb8u1
Package architecture: amd64
Package type: deb
Installed size: 34.75 KB
Download size: 4.09 MB
Official Mirror:
The GNU Mailing List Manager, which manages email discussion lists much like Majordomo and Smartmail. Unlike most similar products, Mailman gives each mailing list a web page, and allows users to subscribe, unsubscribe, etc. over the web. Even the list manager can administer his or her list entirely from the web. Mailman also integrates most things people want to do with mailing lists, including archiving, mail <-> news gateways, and so on. It has all of the features you expect from such a product, plus integrated support for the web (including web based archiving), automated bounce handling and integrated spam prevention.



    Source package: mailman

    Install Howto

    1. Update the package index:
      # sudo apt-get update
    2. Install mailman deb package:
      # sudo apt-get install mailman


    2016-09-15 - Thijs Kinkhorst <> mailman (1:2.1.18-2+deb8u1) jessie-security; urgency=high * CVE-2016-6893: Fix CSRF vulnerability associated in the user options page which could allow an attacker to obtain a user's password. (Closes: #835970)

    2015-04-06 - Thijs Kinkhorst <> mailman (1:2.1.18-2) unstable; urgency=high * Fix security issue: path traversal through local_part. Affects installations which use an Exim or Postfix transport instead of fixed aliases; attacker needs to be able to place files on the local filesystem. (CVE-2015-2775, Closes: 781626)

    2014-07-10 - Thijs Kinkhorst <> mailman (1:2.1.18-1) unstable; urgency=medium * New upstream release. - Adds DMARC support. (Closes: #746592) - Drop obsolete patches: 20_qmail_to_mailman.debian.patch 80_sync_members_unicode.patch * Add lsb-release to debian/tests/control. (Closes: #734180) * Fix ownership on /var/lib/mailman/archives/private as upstream suggests, also reflecting group ownership for public archives. Thanks Luca Capello! (closes: #603904) * Checked for policy 3.6.5, no changes.

    2014-02-03 - Thorsten Glaser <> mailman (1:2.1.16-2) unstable; urgency=medium * Upload to unstable, as requested by Thijs; we did not encounter any unexpected trouble with the version in experimental, and it does fix an RC bug as well as a release goal.

    2013-12-29 - Thorsten Glaser <> mailman (1:2.1.16-1exp2) experimental; urgency=low * Try harder to use UTF-8

    2013-12-29 - Thorsten Glaser <> mailman (1:2.1.16-1exp1) experimental; urgency=low * Convert to UTF-8. (Closes: #398777, #535296, #732929) * Apply upstream bugfix for sync_members. (Closes: #732741)

    2013-11-06 - Thijs Kinkhorst <> mailman (1:2.1.16-1) unstable; urgency=low * New upstream release.

    2013-08-04 - Thijs Kinkhorst <> mailman (1:2.1.16~rc2-1) unstable; urgency=low [ Thijs Kinkhorst ] * New upstream release candidate. - Exposes message-id to templates (closes: #614340). * Remove obsolete patches, applied upstream: 21_newlist_help.patch * Updates to Russian debconf templates, thanks Ivan Krylov! (closes: #710268). * Needs at least version 3.8.0 of logrotate (closes: #687215). * Add autopkgtests, thanks Yolanda Robla! (closes: #710095) * Packaging cleanup: checked for policy 3.9.4, update Vcs URL, recommend default-mta instead of exim4. [ Thorsten Glaser ] * Prevent losing stderr in the init script when there are many lists. (closes: #702002) * debian/watch: mangle the epoch away so DDPO is green again.

    2012-06-16 - Thijs Kinkhorst <> mailman (1:2.1.15-1) unstable; urgency=low * New upstream release. * Improve Exim4 instructions, thanks Andrew Hodgson. * Remove obsolete PRIVATE_ARCHIVE_URL variable, thanks Matthew Hall (closes: #676481). * Correct mmarch man page, thanks Francesco Potortì (closes: #583369). * Specify need for MTA=None in (closes: #648976).

    2012-05-20 - Thijs Kinkhorst <> mailman (1:2.1.15~rc1-1) unstable; urgency=low [ Thijs Kinkhorst ] * New upstream release candidate. * Remove obsolete patches, applied upstream: 02_use_dpkg_buildflags.patch 07_snooze.patch 59_fix_missing_language_crash.patch 70_invalid_utf8_dos.patch 71_date_overflows.patch 74_admin_non-ascii_emails.patch 80_CVE-2011-0707_confirm_xss.patch 99_js_templates.patch [ Thorsten Glaser ] * Update the watch file for Launchpad