aboutsummaryrefslogtreecommitdiffstats
path: root/NEWS
diff options
context:
space:
mode:
authorYasuhito FUTATSUKI at POEM <futatuki@poem.co.jp>2017-04-26 14:33:19 +0900
committerYasuhito FUTATSUKI at POEM <futatuki@poem.co.jp>2017-04-26 14:33:19 +0900
commit588da6057bfe19df9ef7d8667da41fc9888c7bd9 (patch)
treedfd1cb72b8761cc43ffb49be6129d85fcb0aef0a /NEWS
parent2ad1a49e7210ef6cd1f1752508da571c08abe763 (diff)
parent4657d9ae7b6c0b696ae2557a89469ac7f29c9289 (diff)
downloadmailman2-588da6057bfe19df9ef7d8667da41fc9888c7bd9.tar.gz
mailman2-588da6057bfe19df9ef7d8667da41fc9888c7bd9.tar.xz
mailman2-588da6057bfe19df9ef7d8667da41fc9888c7bd9.zip
merge lp:mailman/2.1 up to rev 1699
Diffstat (limited to 'NEWS')
-rw-r--r--NEWS9
1 files changed, 9 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index 0be02873..083f4027 100644
--- a/NEWS
+++ b/NEWS
@@ -7,6 +7,12 @@ Here is a history of user visible changes to Mailman.
2.1.24 (xx-xxx-xxxx)
+ Security
+
+ - A most likely unexploitable XSS attach that relies on the Mailman web
+ server passing a crafted Host: header to the CGI environment has been
+ fixed. Apache for one is not vulnerable. Thanks to Alqnas Eslam.
+
New Features
- cron/senddigests has a new -e/--exceptlist option to send pending
@@ -26,6 +32,9 @@ Here is a history of user visible changes to Mailman.
Bug fixes and other patches
+ - Treat message and digest headers and footers as empty if they contain
+ only whitespace. (LP: #1673307)
+
- Ensured that added message and digest headers and footers always have
a terminating new-line. (LP: #1670033)