diff options
| author | bwarsaw <> | 2005-05-30 20:09:15 +0000 |
|---|---|---|
| committer | bwarsaw <> | 2005-05-30 20:09:15 +0000 |
| commit | a3a2e764e98755d616c6c661ca7a9aadb6f0dc84 (patch) | |
| tree | 4ca62bf167314d0e7211fe107299387bba2c624a /admin/www/security.html | |
| parent | a3bafc9a8a54e2bfe5a9a37e6444908cd9659f22 (diff) | |
| download | mailman2-a3a2e764e98755d616c6c661ca7a9aadb6f0dc84.tar.gz mailman2-a3a2e764e98755d616c6c661ca7a9aadb6f0dc84.tar.xz mailman2-a3a2e764e98755d616c6c661ca7a9aadb6f0dc84.zip | |
Updates for 2.1.6 final.
Diffstat (limited to 'admin/www/security.html')
| -rw-r--r-- | admin/www/security.html | 11 |
1 files changed, 8 insertions, 3 deletions
diff --git a/admin/www/security.html b/admin/www/security.html index e1db9082..0bfbe3cf 100644 --- a/admin/www/security.html +++ b/admin/www/security.html @@ -2,7 +2,7 @@ "http://www.w3.org/TR/html4/loose.dtd" > <html> <!-- THIS PAGE IS AUTOMATICALLY GENERATED. DO NOT EDIT. --> -<!-- Thu Feb 24 10:23:20 2005 --> +<!-- Mon May 30 15:49:40 2005 --> <!-- USING HT2HTML 2.0 --> <!-- SEE http://ht2html.sf.net --> <!-- User-specified headers: @@ -172,8 +172,8 @@ This is a closed list that reaches the core Mailman developers. <ul> <li><b>CAN-2005-0202</b> -- This is a very serious issue affecting the Mailman -2.1 series up to and including version 2.1.5. Mailman 2.1.6 is not -affected. This issue can allow for the leakage of member passwords. +2.1 series up to and including version 2.1.5. <b>Mailman 2.1.6 is not +affected</b>. This issue can allow for the leakage of member passwords. <p>A quick, immediate fix is to remove the /usr/local/mailman/cgi-bin/private executable. However, this will break any private archives your lists may be @@ -196,6 +196,11 @@ will be informed of their new passwords. <p>Credit goes to Marcus Meissner for finding this issue. </li> + +<li><b>Mailman 2.1.6</b> -- allows for more cryptographically secure (but less +user-friendly) list admin and auto-generated user passwords. Also, a +potential cross-site scripting hole has been closed. + </ul> </td><!-- end of body cell --> |