-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 03 Sep 2018 22:00:38 +0200 Source: mailman Binary: mailman Architecture: source Version: 1:2.1.23-1+deb9u4 Distribution: stretch Urgency: medium Maintainer: Mailman for Debian <pkg-mailman-hackers@lists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 903674 Description: mailman - Powerful, web-based mailing list manager Changes: mailman (1:2.1.23-1+deb9u4) stretch; urgency=medium . * Non-maintainer upload. * Arbitrary text injection vulnerability in Mailman CGIs (CVE-2018-13796) (Closes: #903674) Checksums-Sha1: 3012bc7ace1fe98067d70e670dfc45178303b0dc 2308 mailman_2.1.23-1+deb9u4.dsc af347fe0a946afba8da9c6f214367bf0ee446221 104776 mailman_2.1.23-1+deb9u4.debian.tar.xz Checksums-Sha256: 6643613999573df02a389901e731960d607fe3943ca35d21b5742090899802ea 2308 mailman_2.1.23-1+deb9u4.dsc 1640ba7df8a208386da341e964c6577fd43cd749627285a7f401d602ccbb851e 104776 mailman_2.1.23-1+deb9u4.debian.tar.xz Files: 9e953d5621120d4c4915edc2904589dc 2308 mail optional mailman_2.1.23-1+deb9u4.dsc e192389efc2a0e696fa288d029e2312d 104776 mail optional mailman_2.1.23-1+deb9u4.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAluNlGdfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EtdQQAJs7fSzri8piDWraU7zyM5JBVQOnhsSa 6EvcYjQx7g9rG3QbcTLjH5Xf2wFih47AINdzrLJ0xHjoIadeizI2CHWmRiHz5wAz ug29YNgDoTcjhyXKTK4/OYMlGvIehEPPI91UHF9AsSfaELB0X2xoOiEBYY+wufON TYuHQhzWmyh4SaUJPGd5zMZ+zqq9NSEPIyIiMxGYPuptFtMoxvW6/1SJvvnusti3 SFAGo15/rWjX38XFIFxynb39Hjl5yLh+ms1/epeei1Y5VV1qs5eHB59DGUQumx57 ovPEKdicgClZURN4vGQkfxQvbeUNR9Ow0250lPnVWiW+QCJPvchTnXWDpn6kW8Qo h4oXdlSzQ7G9TQfeJcBrRPcyy9hIpHZjK3jkg+/NylT50XiRG+x7IhWMBBLJs5xz zv4kUum/VMb/JAQo3SkszjGiLYLCIgoDOxtod3BbwdaABqg9uWtfOP0Q91Aw8ME6 hTiERGkpNhyrdxMQ0KHWN+IQTSlwq+KQKOCFeNAy4EfV1HmyKtkRuPz/PC78zIIQ 5pHkHsFMJNxDbD0MQ0bInjgcpdM0Wcr4tN/lF9QcA1T09tJEWGz7B+4CX5QCjc9B I2KteXoFv2nRWZj/uOEg5OrFaEvuUy/KDvEyuM+E4whzpy2kd/KFVeHXrLtIBfP1 cn4VWRQvjn0U =ue4b -----END PGP SIGNATURE-----