From 7d7489577f3012195e1d5b49f5bd5a41a0de115a Mon Sep 17 00:00:00 2001
From: Mark Sapiro <mark@msapiro.net>
Date: Mon, 13 Dec 2021 10:13:41 -0800
Subject: Fix NameError and case sensitivity in CSRF check.

---
 NEWS | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'NEWS')

diff --git a/NEWS b/NEWS
index 6e29cf46..8db9c765 100644
--- a/NEWS
+++ b/NEWS
@@ -5,6 +5,13 @@ Copyright (C) 1998-2020 by the Free Software Foundation, Inc.
 
 Here is a history of user visible changes to Mailman.
 
+2.1.39 (xx-xxx-xxxx)
+
+  Bug Fixes and other patches
+
+    - User matching for CSRF tokens is no longer case sensitive., and a
+      potential NamerError in logging is fixed.  (LP: #1954694)
+
 2.1.38 (30-Nov-2021)
 
   Security
-- 
cgit v1.2.3