Ubuntu
mailman package

mailman 1:2.1.14-3ubuntu0.4 source package in Ubuntu

Changelog

mailman (1:2.1.14-3ubuntu0.4) precise-security; urgency=medium

  * SECURITY UPDATE: CSRF vulnerability in the admin interface
    - debian/patches/CVE-2016-7123.patch: add CSRF checks to
      Mailman/CSRFcheck.py, Mailman/Cgi/admin.py, Mailman/Defaults.py.in,
      Mailman/htmlformat.py.
    - CVE-2016-7123
  * SECURITY UPDATE: CSRF vulnerability in the user options page
    - debian/patches/CVE-2016-6893.patch: add CSRF checks to
      Mailman/Cgi/admindb.py, Mailman/Cgi/edithtml.py,
      Mailman/Cgi/options.py, Mailman/HTMLFormatter.py,
      Mailman/htmlformat.py.
    - CVE-2016-6893

 -- Marc Deslauriers <email address hidden>  Fri, 28 Oct 2016 15:19:14 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Precise
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
mail
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Precise updates main mail
Precise security main mail

Downloads

File Size SHA-256 Checksum
mailman_2.1.14.orig.tar.gz 7.8 MiB 1d6be802b718639126c4069eb7f9cd3a347765e1cb199cc3bb14d71572d09523
mailman_2.1.14-3ubuntu0.4.debian.tar.gz 105.2 KiB b118e66667bb52180e5dad1c141566462161cdf42be984ef9fbf071dee80705f
mailman_2.1.14-3ubuntu0.4.dsc 2.1 KiB e728ab64a6237c638ec4b3cefc24c4f325940db2e1c03f42a74a50dba26e8e98

View changes file

Binary packages built by this source

mailman: Powerful, web-based mailing list manager

 The GNU Mailing List Manager, which manages email discussion lists
 much like Majordomo and Smartmail. Unlike most similar products,
 Mailman gives each mailing list a web page, and allows users to
 subscribe, unsubscribe, etc. over the web. Even the list manager can
 administer his or her list entirely from the web.
 .
 Mailman also integrates most things people want to do with mailing
 lists, including archiving, mail <-> news gateways, and so on. It
 has all of the features you expect from such a product, plus
 integrated support for the web (including web based archiving),
 automated bounce handling and integrated spam prevention.

mailman-dbgsym: debug symbols for package mailman

 The GNU Mailing List Manager, which manages email discussion lists
 much like Majordomo and Smartmail. Unlike most similar products,
 Mailman gives each mailing list a web page, and allows users to
 subscribe, unsubscribe, etc. over the web. Even the list manager can
 administer his or her list entirely from the web.
 .
 Mailman also integrates most things people want to do with mailing
 lists, including archiving, mail <-> news gateways, and so on. It
 has all of the features you expect from such a product, plus
 integrated support for the web (including web based archiving),
 automated bounce handling and integrated spam prevention.