Thanks for the info.
Do we know if nonpublic information was accessed such as hidden email subscribers and the email contents of private lists?
Will subscriber passwords be reset?
Thanks, Pine On Nov 12, 2015 9:08 PM, "Daniel Zahn" dzahn@wikimedia.org wrote:
Hello list admins,
due to http://blog.wikimedia.org/2015/11/12/mailman-security-incident/
we have reset all list admin passwords. You should have already received a new pass in the mail earlier.
I just wanted to add that we also changed all _moderator_ passwords, but as opposed to admin passwords we could not just mail the owner address.
We don't expect that many lists actually use a separate moderator role where people moderate who are _not_ also the list admin, but if this is the case for one your lists, please change it to something new and let your moderators know the new password.
Best regards,
-- Daniel Zahn dzahn@wikimedia.org Operations Engineer
Listadmins mailing list Listadmins@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins