From 15e222cef831c9f22890c7d3ec7c0ae93b91b238 Mon Sep 17 00:00:00 2001 From: Mark Sapiro Date: Fri, 22 Jun 2018 08:41:29 -0700 Subject: Preparing 2.1.27 release. --- NEWS | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'NEWS') diff --git a/NEWS b/NEWS index 7bc1b4c7..6e3a8a09 100644 --- a/NEWS +++ b/NEWS @@ -5,14 +5,16 @@ Copyright (C) 1998-2018 by the Free Software Foundation, Inc. Here is a history of user visible changes to Mailman. -2.1.27 (xx-xxx-xxxx) +2.1.27 (22-Jun-2018) Security - Existing protections against malicious listowners injecting evil scripts into listinfo pages have had a few more checks added. + JVN#00846677/JPCERT#97432283 - A few more error messages have had their values HTML escaped. + JVN#00846677/JPCERT#97432283 - The hash generated when SUBSCRIBE_FORM_SECRET is set could have been the same as one generated at the same time for a different list and -- cgit v1.2.3