Branches for Hardy

Author: Emanuele Gentili
Revision Date: 2008-03-07 02:55:22 UTC

* debian/control:
 + updated maintainer field
* SECURITY UPDATE:
 + debian/patches/100_CVE-2008-0564.dpatch (LP: #199338)
  - Multiple cross-site scripting (XSS) vulnerabilities in Mailman
    before 2.1.10b1 allow remote attackers to inject arbitrary web
    script or HTML via unspecified vectors related to (1) editing
    templates and (2) the list's "info attribute" in the web
    administrator interface.
* References
 + http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0564
 + http://bugs.gentoo.org/show_bug.cgi?id=208710

Author: Imre Gergely
Revision Date: 2010-12-07 23:44:02 UTC

debian/mailman.logrotate: quiet down logrotate for mailman log
files (LP: #244233)

Author: Marc Deslauriers
Revision Date: 2011-02-17 10:10:41 UTC

* SECURITY UPDATE: Cross-Site Scripting vulnerability in confirm.py
  - debian/patches/101_CVE-2011-0707.patch: properly clean strings in
    Mailman/Cgi/confirm.py.
  - CVE-2011-0707
* SECURITY UPDATE: Cross-Site Scripting vulnerabilities in list
  information and description fields
  - debian/patches/102_CVE-2010-3089.patch: properly clean strings in
    Mailman/Cgi/{listinfo,HTMLFormatter,Utils}.py.
  - CVE-2010-3089

Author: Marc Deslauriers
Revision Date: 2011-02-17 10:10:41 UTC

* SECURITY UPDATE: Cross-Site Scripting vulnerability in confirm.py
  - debian/patches/101_CVE-2011-0707.patch: properly clean strings in
    Mailman/Cgi/confirm.py.
  - CVE-2011-0707
* SECURITY UPDATE: Cross-Site Scripting vulnerabilities in list
  information and description fields
  - debian/patches/102_CVE-2010-3089.patch: properly clean strings in
    Mailman/Cgi/{listinfo,HTMLFormatter,Utils}.py.
  - CVE-2010-3089

Author: James Page
Revision Date: 2010-10-18 11:02:01 UTC

Patched bundled python-2.5.8 email package to correctly parse
email addresses (LP: #659975)