-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Wed, 16 Feb 2011 21:02:42 +0100 Source: mailman Binary: mailman Architecture: source amd64 Version: 1:2.1.11-11+lenny2 Distribution: oldstable-security Urgency: high Maintainer: Mailman for Debian Changed-By: Thijs Kinkhorst Description: mailman - Powerful, web-based mailing list manager Closes: 599833 Changes: mailman (1:2.1.11-11+lenny2) oldstable-security; urgency=high . * Upload to lenny-security. * CVE-2010-3089: cross-site scripting (XSS) vulnerabilities which can be exploited by list administrators (Closes: 599833). * CVE-2011-0707: Cross site scripting in subscriber names. Checksums-Sha1: 9ad70f45e4608886a2018bb9711639364e68077f 1657 mailman_2.1.11-11+lenny2.dsc 068f1927f4d8dd0896b5064bdf6d102798491b72 7992229 mailman_2.1.11.orig.tar.gz add58740d7b7f853433429fb41e6a66f7130db2d 147724 mailman_2.1.11-11+lenny2.diff.gz 37b78573ce83ba998aa434bd5877d825a3687e65 9530080 mailman_2.1.11-11+lenny2_amd64.deb Checksums-Sha256: 6275a708ba661f17419763d4098945ad2cef2c615dec58d6937ea94ae55610ab 1657 mailman_2.1.11-11+lenny2.dsc 66f2e1d27b6d1f253a8ebbe218cacaab947e6b421f7513fbaea2314b24f06bda 7992229 mailman_2.1.11.orig.tar.gz 5e018ab23c8c7bb928979c40863317e82b5b845361420df05da7ebb9a983aeed 147724 mailman_2.1.11-11+lenny2.diff.gz a4ac3368c04f60277b4703ef7975e866699a8fa364bb655dd1d0cb0ecc7a831e 9530080 mailman_2.1.11-11+lenny2_amd64.deb Files: 2ecb278dcf2651bc8582e1bb7b19f105 1657 mail optional mailman_2.1.11-11+lenny2.dsc d9fd89f54c4743dbcb3b3eec8c6146d6 7992229 mail optional mailman_2.1.11.orig.tar.gz 96a171f07ed038469d49ac93822a85f3 147724 mail optional mailman_2.1.11-11+lenny2.diff.gz c0b43828d177a283d25597a39df48b67 9530080 mail optional mailman_2.1.11-11+lenny2_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAEBAgAGBQJNXDDJAAoJEOxfUAG2iX57LP4H/1oiLwsAPiU/8dZXusaLJ41Z ml/rrwdWJ4zKp2EfoBUxOIqtaLT4cYVEDsm+RWHzTAobZzuN80ckSqoQ5CwBbI4r Br2740LW9Ieoh0M1UM3tYoN0LZ9vN03VW+EiaVO120BX7zNX0TQ6HHFhLOybMNDN HkcdcP8/BOcyq6OgT7eNR87qTo0aMpCNqANmjvFBUu3c4csvQwyPzlQqUk/1WsM/ k0py4n6bCEp+IjKNJ3L3rJuhE6zQL0SXQo8dCps36BaXECyJg9/yLODGZim0EicO 0a3E6SDtp7qxHSL6YOZEiv4UtjFqoRojji7ZRwns11G/evS9FOAUP4oYGXMPFyM= =s5ZO -----END PGP SIGNATURE-----