aboutsummaryrefslogtreecommitdiffstats
path: root/NEWS
diff options
context:
space:
mode:
authorMark Sapiro <mark@msapiro.net>2018-07-23 07:07:29 -0700
committerMark Sapiro <mark@msapiro.net>2018-07-23 07:07:29 -0700
commit0a86542dae3279874f731052f2a8fe9a41596940 (patch)
treefd68ad86db8d6ccf770dad96e48f6b47995d69f4 /NEWS
parent84db4a8d468922e0c5a7c8ecceda1d0c8ec55168 (diff)
downloadmailman2-0a86542dae3279874f731052f2a8fe9a41596940.tar.gz
mailman2-0a86542dae3279874f731052f2a8fe9a41596940.tar.xz
mailman2-0a86542dae3279874f731052f2a8fe9a41596940.zip
Truncate long invalid list names in web error messages.
Diffstat (limited to 'NEWS')
-rw-r--r--NEWS7
1 files changed, 6 insertions, 1 deletions
diff --git a/NEWS b/NEWS
index 041fc7cc..b22c7a90 100644
--- a/NEWS
+++ b/NEWS
@@ -5,7 +5,12 @@ Copyright (C) 1998-2018 by the Free Software Foundation, Inc.
Here is a history of user visible changes to Mailman.
-2.1.28 (xx-xxx-xxxx)
+2.1.28 (23-Jul-2018)
+
+ Security
+
+ - A content spoofing vulnerability with invalid list name messages in
+ the web UI has been fixed. CVE-2018-13796 (LP: #1780874)
New Features