-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 09 Sep 2021 13:15:03 +0200 Source: postorius Architecture: source Version: 1.3.5-1 Distribution: unstable Urgency: medium Maintainer: Debian Mailman Team <pkg-mailman-hackers@lists.alioth.debian.org> Changed-By: Jonas Meurer <jonas@freesources.org> Changes: postorius (1.3.5-1) unstable; urgency=medium . * New upstream release - CVE-2021-40347: Check a user owns the email they are trying to unsubscribe (Fixes: #993746) * d/control: - Bump Standards-Version to 4.6.0 Checksums-Sha1: 1bd9c6bd6e1e22f83c3b92ebd91378ebd3ecdbc5 2600 postorius_1.3.5-1.dsc 9dd557dfee4ac199c423381d25f03d9abe2f252b 2775722 postorius_1.3.5.orig.tar.gz 9de8e44cb4996035b23e09def2e9c3c7baa247b4 833 postorius_1.3.5.orig.tar.gz.asc 8082ebba5829243e9a8b5e8c81540a669c7bde97 117072 postorius_1.3.5-1.debian.tar.xz ebfad5e23252e2fadf55b72d45e1d6af42cf0100 7934 postorius_1.3.5-1_amd64.buildinfo Checksums-Sha256: 9954d4d3d66262720105fad2e4e28d82e170d3194605c1c0c09ddc251911f30f 2600 postorius_1.3.5-1.dsc 0f23c6542bf0f6e6364d678c094ee5804acfe59ecbcc0e944bc4c13834e24e80 2775722 postorius_1.3.5.orig.tar.gz 01690e63b4a27c87816f06363f0e0f022e247f1a957cecc9692ace88f083dacc 833 postorius_1.3.5.orig.tar.gz.asc 2e7b8833d6caa2b63f7f850fa291d963615f2df8742a4bfbcd119ca4a5dd5531 117072 postorius_1.3.5-1.debian.tar.xz c4b4d19b7fd5e9b335c6a74a3774c8b8507a2006654351f2266fa65713a16561 7934 postorius_1.3.5-1_amd64.buildinfo Files: e778aab7ac12ca2011dc95c7624bd406 2600 python optional postorius_1.3.5-1.dsc 89369cc22442362a92100aa1c8c25467 2775722 python optional postorius_1.3.5.orig.tar.gz fe1a9754c2e9d93c150b0b131641f3e2 833 python optional postorius_1.3.5.orig.tar.gz.asc 47b1edfaf7619c7f61e2e7f4628fa262 117072 python optional postorius_1.3.5-1.debian.tar.xz cb8b2dbe4768cd0704157b2aa9273de9 7934 python optional postorius_1.3.5-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEELIzSg9Pv30M4kOeDUmLn/0kQSf4FAmE58KUACgkQUmLn/0kQ Sf5r2Q/+JcULd/vf8V6Fbl7Wuo2eaoe+IIPAryj3SJbcEh3vql8nAv0LDUgYKlf/ te8EzXI2nqSpfyNCYoAbj94wAHHr7FqN1nykzwsMY5RLY/hASuTPEhm0ckHcIa2j q/dWe/RCTEx5PLS7JqaFoeBRUslQrKF0VI91u/x5deTRVkq7JnTt8eJ5QevzIcvi 9PBgI+b8YDgydRJ0woRbvV/x8hKYsN2zwukqc0RC8lCG/3e2GV9Dgdpr7O+eOyEm c2ya1jhQduJBMfNI8DysGFDLwVmds1nQvK6izkywywA0THKRKeZONxDWoeC16XAG 3+alVqTK7cq4XfZVZPDuCjnRWbuUDue3KFvE0EVBKQOkf0XPVSupDVrKP9412lj7 F3zzGFWVY43j2AzRLtlk7xOgKJ9NlOj95pLUPcohgansKBrXtB6ntNRAuwmR4B1q 0vMqG2ta1uhy53G7zqjdaLEylKzjbQq5DcOEWWrOYM93Ijj+I6wKAuiioSSH9Yka NPLWEyfhLM8V4vCOytXAWKWs3ZfyUCcu4fs7y96DIdMH3iSGWVkFCCgK2nQevB0+ 5M/QmU8u2N0Hx4aZ8HT+lLivJZk9/0PWITV8gYcwyp15GJKauOCJjJD/a7ZK5E8V J6ufWYQ3z+ZxPM8Y9W1vDlTdpH2tEfVCb/bD7rmoI9Xgp0rAZVg= =MEo/ -----END PGP SIGNATURE-----