Format: 1.8
Date: Thu, 21 Oct 2021 14:24:48 -0700
Source: mailman
Binary: mailman
Architecture: ppc64el ppc64el_translations
Version: 1:2.1.26-1ubuntu0.4
Distribution: bionic
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos02-ppc64el-030.buildd>
Changed-By: Steve Beattie <steve.beattie@canonical.com>
Description:
 mailman    - Web-based mailing list manager (legacy branch)
Launchpad-Bugs-Fixed: 1947639 1947640
Changes:
 mailman (1:2.1.26-1ubuntu0.4) bionic-security; urgency=medium
 .
   * SECURITY UPDATE: Potential Privilege escalation via the user
     options page. (LP: #1947639)
     - debian/patches/CVE-2021-42096-CVE-2021-42097.patch: Always make
       the CSRF token for the user
     - CVE-2021-42096
   * SECURITY UPDATE: Potential CSRF attack via the user options page
     (LP: #1947640)
     - debian/patches/CVE-2021-42096-CVE-2021-42097.patch: ensure token
       is for the user whose option page is being requested
     - CVE-2021-42097
Checksums-Sha1:
 8d6694f776ac60f50fbd737c860dd4dbbb948105 17076 mailman-dbgsym_2.1.26-1ubuntu0.4_ppc64el.ddeb
 c854d17f0136602ba97b2425f4697012c0caca90 6843 mailman_2.1.26-1ubuntu0.4_ppc64el.buildinfo
 9f15acc3ce72d0c3035a9238e751228881d2229a 4350936 mailman_2.1.26-1ubuntu0.4_ppc64el.deb
 5e39a93e1e2ea26b3e2d9bb7ba7a857e180e81b3 8923725 mailman_2.1.26-1ubuntu0.4_ppc64el_translations.tar.gz
Checksums-Sha256:
 02ba02ea7a8c0e25fcbe3e14440855c767a2ccf732fa4a15bafde365242ab7e4 17076 mailman-dbgsym_2.1.26-1ubuntu0.4_ppc64el.ddeb
 7ee86330db98ce10317fbbbd0fb1be0c64a4cd1aeac2582d2f065ff466c2325b 6843 mailman_2.1.26-1ubuntu0.4_ppc64el.buildinfo
 7738456f5b3a5ae1a9e0cfcf28450ea40b19307bac969e120268b185d262bedd 4350936 mailman_2.1.26-1ubuntu0.4_ppc64el.deb
 dcc9f614d345b1dac782d9aa8e24b10b957cc643059e64445921045cc431884c 8923725 mailman_2.1.26-1ubuntu0.4_ppc64el_translations.tar.gz
Files:
 b8cc046141a52b3d3b7ccee19ade1fcc 17076 debug optional mailman-dbgsym_2.1.26-1ubuntu0.4_ppc64el.ddeb
 d2ae9636e740c23856b6cf94273f090e 6843 mail optional mailman_2.1.26-1ubuntu0.4_ppc64el.buildinfo
 57fb573e6e080d1582f0b3ba7c8618fe 4350936 mail optional mailman_2.1.26-1ubuntu0.4_ppc64el.deb
 96590070b84bbeee11742cc94e42c6fa 8923725 raw-translations - mailman_2.1.26-1ubuntu0.4_ppc64el_translations.tar.gz
Original-Maintainer: Mailman for Debian <pkg-mailman-hackers@lists.alioth.debian.org>