From 7f4f431eaa75bbf4b2dba764b61f5e9ca01b4cb5 Mon Sep 17 00:00:00 2001
From: Mark Sapiro <mark@msapiro.net>
Date: Sat, 9 Jul 2022 17:06:49 -0700
Subject: Fixed a possible list membership leak via the user options CGI.

---
 NEWS | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

(limited to 'NEWS')

diff --git a/NEWS b/NEWS
index a3538f4c..8c1f36c9 100644
--- a/NEWS
+++ b/NEWS
@@ -7,6 +7,10 @@ Here is a history of user visible changes to Mailman.
 
 2.1.40 (xx-xxx-xxxx)
 
+  i18n
+
+    - The German translation of `Esperanto` is fixed.  (LP: #1966685)
+
   Bug Fixes and other patches
 
     - Test for a valid header following a Unix From_ line in bin/cleanarch
@@ -14,7 +18,8 @@ Here is a history of user visible changes to Mailman.
     - A 500 Internal Server Error when requesting the options page for a
       non-member address on a list with private rosters is avoided.
       (LP: #1961762)
-    - The German translation of Esperanto is fixed.  (LP: #1966685)
+    - A possible list membership leak via the user options CGI is fixed.
+      (LP: #1968443)
 
 2.1.39 (13-Dec-2021)
 
-- 
cgit v1.2.3