From d9e523199b4203dfeddfe2d8b03524ccf9fdf4a3 Mon Sep 17 00:00:00 2001 From: Mark Sapiro Date: Thu, 11 Nov 2021 11:08:02 -0800 Subject: Bumped branch version to: 2.1.36 --- NEWS | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) (limited to 'NEWS') diff --git a/NEWS b/NEWS index 184f968b..9614c1dd 100644 --- a/NEWS +++ b/NEWS @@ -5,17 +5,17 @@ Copyright (C) 1998-2020 by the Free Software Foundation, Inc. Here is a history of user visible changes to Mailman. -2.1.36 (xx-Nov-2021) +2.1.36 (12-Nov-2021) Security - A potential XSS attack via the user options page has been reported by - Harsh Jaiswal. This is fixed. CVE-2021-43331 (LP:#1949401) + Harsh Jaiswal. This is fixed. CVE-2021-43331 (LP: #1949401) - A potential for for a list moderator to carry out an off-line brute force attack to obtain the list admin password has been reported by Andre Protas, Richard Cloke and Andy Nuttall of Apple. This is fixed. - CVE-2021-43332 (LP:#1949403) + CVE-2021-43332 (LP: #1949403) 2.1.35 (19-Oct-2021) @@ -24,10 +24,10 @@ Here is a history of user visible changes to Mailman. - A potential for for a list member to carry out an off-line brute force attack to obtain the list admin password has been reported by Andre Protas, Richard Cloke and Andy Nuttall of Apple. This is fixed. - CVE-2021-42096 (LP:#1947639) + CVE-2021-42096 (LP: #1947639) - A CSRF attack via the user options page could allow takeover of a users - account. This is fixed. CVE-2021-42097 (LP:#1947640) + account. This is fixed. CVE-2021-42097 (LP: #1947640) Bug Fixes and other patches -- cgit v1.2.3