diff options
| author | Mark Sapiro <mark@msapiro.net> | 2018-06-03 16:52:44 -0700 |
|---|---|---|
| committer | Mark Sapiro <mark@msapiro.net> | 2018-06-03 16:52:44 -0700 |
| commit | eef7927345dd7a93c5290c9f0a3805e517e3f453 (patch) | |
| tree | 24570cf42d660043e5812d3fe404dedf691eea04 /NEWS | |
| parent | d1bbecfd795d3fb615dad0171a0a19c21d9937a9 (diff) | |
| parent | f1e9440ad3e4babcdc9999f572f7b4d7929130b1 (diff) | |
| download | mailman2-eef7927345dd7a93c5290c9f0a3805e517e3f453.tar.gz mailman2-eef7927345dd7a93c5290c9f0a3805e517e3f453.tar.xz mailman2-eef7927345dd7a93c5290c9f0a3805e517e3f453.zip | |
Modified SUBSCRIBE_FORM_SECRET hash generation.
Diffstat (limited to 'NEWS')
| -rw-r--r-- | NEWS | 5 |
1 files changed, 5 insertions, 0 deletions
@@ -14,6 +14,11 @@ Here is a history of user visible changes to Mailman. - A few more error messages have had their values HTML escaped. + - The hash generated when SUBSCRIBE_FORM_SECRET is set could have been + the same as one generated at the same time for a different list and + IP address. While this is not thought to be exploitable in any way, + the generation has been changed to avoid this. Thanks to Ralf Jung. + New Features - An option has been added to bin/add_members to issue invitations |