diff options
| author | Mark Sapiro <mark@msapiro.net> | 2021-11-30 09:50:49 -0800 |
|---|---|---|
| committer | Mark Sapiro <mark@msapiro.net> | 2021-11-30 09:50:49 -0800 |
| commit | a306294cf9e4d4a4ded2c840f9a1ce8ba412b6a7 (patch) | |
| tree | 9f8f2843bf72bc8cfabe4d752eb7914e535d8f08 /NEWS | |
| parent | f63f8d81d718d779dd6cdb55c66bf3def0fe9041 (diff) | |
| download | mailman2-a306294cf9e4d4a4ded2c840f9a1ce8ba412b6a7.tar.gz mailman2-a306294cf9e4d4a4ded2c840f9a1ce8ba412b6a7.tar.xz mailman2-a306294cf9e4d4a4ded2c840f9a1ce8ba412b6a7.zip | |
Block CSRF attack against admin or admindb pages.
Diffstat (limited to '')
| -rw-r--r-- | NEWS | 7 |
1 files changed, 6 insertions, 1 deletions
@@ -5,7 +5,12 @@ Copyright (C) 1998-2020 by the Free Software Foundation, Inc. Here is a history of user visible changes to Mailman. -2.1.38 (xx-xxx-xxxx) +2.1.38 (30-Nov-2021) + + Security + + - A potential CSRF attack against a list admin from a list member or + moderator has been blocked. CVE-2021-44227 (LP: #1952384) Bug Fixes and other patches |