-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 06 Apr 2015 18:31:36 +0200 Source: mailman Binary: mailman Architecture: source amd64 Version: 1:2.1.13-6 Distribution: squeeze-lts Urgency: high Maintainer: Mailman for Debian <pkg-mailman-hackers@lists.alioth.debian.org> Changed-By: Thijs Kinkhorst <thijs@debian.org> Description: mailman - Powerful, web-based mailing list manager Closes: 781626 Changes: mailman (1:2.1.13-6) squeeze-lts; urgency=high . * Upload to squeeze-lts to fix security issue. * Fix security issue: path traversal through local_part. Affects installations which use an Exim or Postfix transport instead of fixed aliases; attacker needs to be able to place files on the local filesystem. (CVE-2015-2775, Closes: 781626) Checksums-Sha1: 6855c79fe2e5c85ad153163452ca594931223773 1619 mailman_2.1.13-6.dsc 807f3059ea6d1837ae35b9f8c09de9396b146a23 110663 mailman_2.1.13-6.debian.tar.gz a71b7db9e6d0680d3d64e3e5292b78109cfa702b 9676108 mailman_2.1.13-6_amd64.deb Checksums-Sha256: d00c7cd10ba6223da16a7e055c9c5ddd61b9cf47df0ede7437e9ba238f4e64f5 1619 mailman_2.1.13-6.dsc 6f054b68af5363bc9ab08e178429cee8ef13d284672f70e5ee0996f96db96cba 110663 mailman_2.1.13-6.debian.tar.gz ac82dc42d0457d5d14a8b9ebb309e90b5be97f08ff48a258984f3b24f8fe4e02 9676108 mailman_2.1.13-6_amd64.deb Files: 520404025d9aa0068be6729ebeb46838 1619 mail optional mailman_2.1.13-6.dsc 67ba11645e78fdd4051e565135ee800d 110663 mail optional mailman_2.1.13-6.debian.tar.gz 2b4b8dc4f86499faa916ef7985c6e106 9676108 mail optional mailman_2.1.13-6_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBCAAGBQJVIrfKAAoJEFb2GnlAHawEHMMH+wVjSRJdDwsIzdB+x5pOdVOH PsKfOkHMdGU66V69Umqhtd8XuqcdOV78ZPr4Y/a8qNQotmrgYPK7nIGn+++V29d6 phFYsyO2bBJCNrPHoV51t6DeGu+tiRnstvUslFA50dJrSIYmofDzS0MF+BMLOQDB KehawIZiVQvfrIq/0mSD9WqYZRj0Apf5d+W3AUJNNjd/3Q+ZlgJTI4+HjY587/Rx yj+L1mzIsTh8kQMXEZL5o2kFSLN2PE2uBGTOHuBLZFOmqhsN/ipUoynvocI2tESL ucDocjCH4hljteLU7aiepGZ2KaWXcn9crZl0ScsAXF45dF3O3wHE47vSGVzM39E= =aeh9 -----END PGP SIGNATURE-----
