-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 14 Jul 2018 23:26:09 +0200 Source: mailman Binary: mailman Architecture: source Version: 1:2.1.23-1+deb9u3 Distribution: stretch-security Urgency: high Maintainer: Mailman for Debian <pkg-mailman-hackers@lists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Description: mailman - Powerful, web-based mailing list manager Changes: mailman (1:2.1.23-1+deb9u3) stretch-security; urgency=high . * Non-maintainer upload by the Security Team. * XSS vulnerability allows malicious listowners to inject scripts into listinfo pages (CVE-2018-0618) Checksums-Sha1: e5bef6556fc4266e164b86c8a56bf9656faea1de 2308 mailman_2.1.23-1+deb9u3.dsc 0b1e2c6163e171e3a0a7bab95aa9b7c43f891cd0 104176 mailman_2.1.23-1+deb9u3.debian.tar.xz Checksums-Sha256: 755b9f5a54558001f8cb96b34dcdf82f817928cc320a259efa7a752972ffb134 2308 mailman_2.1.23-1+deb9u3.dsc e9cecde3b98f4cb707179636e8692c04f681b312bcb3a91e803c3654d985eb44 104176 mailman_2.1.23-1+deb9u3.debian.tar.xz Files: bdfc4f06c3aaeb92536b6efeef6d1a26 2308 mail optional mailman_2.1.23-1+deb9u3.dsc 9353633a8f7348391b8a2c54312d52bb 104176 mail optional mailman_2.1.23-1+deb9u3.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAltLVMBfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89Ef+EP/jg/TO0eCpvYOiN+edYP+rPxaBF6lm5H smVAYbc38E+1h6ggTTI4cT9skwRUXZTYBnwt6TvalxoEoz4Fnn6KwUEBSwrCCjwh 00nj/fITP5CsyxA2pgEYgTLqHKmeR6WCcKuhPdfAD+EOjXWRvMJJVx/AvItZLMnY LZsNk5hzf8HRKAyXR2YIdCvSUvIhszJdrF+QVdOsKeg9ZJfDB6ChMajn8514TXHJ wgKoQWyMzmIsUDAw6Cc+Of7ofDuMuyYtGfkhdFxeMYlGiqea+6nRtmZ12sreg+hE b5vRkBlCSgfJ/4RmMBP0nzIX3R5RmThBpUPJoTjmH81CC/iZPGAtDlADBinUKSva Th3pqGOj9Fhlo473aqrLeiVj9goZTbfymn2IaSeuRlUz7MmDOv2edyyurkDJ5afz li/i/ckr32ET/h0VjyVrHkdq292f+euIkg71pdPiO15xFFXrB08i5VXHFV33vJHC IbtblR7BZ2h8JsKxe3SJI50saZYhDFsiKFbne9UtpvOI9YDYkAUBrNzhfiWYpiQx bmTPV1sgRsAIquZK5m+fVeSDCGowTcY7j9ihjOPq03IuY5Hka9Or4YTw/0kBoPpv 1YwXQdIwqoWYqa3KVEJ5zLg1BR66YCcnkw449RwMg2U+SWahz61L0SITc9LOVXEk 095aiBcT94aT =fNam -----END PGP SIGNATURE-----