Accepted mailman 1:2.1.15-1+deb7u1 (source amd64) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 06 Apr 2015 18:17:34 +0200
Source: mailman
Binary: mailman
Architecture: source amd64
Version: 1:2.1.15-1+deb7u1
Distribution: wheezy-security
Urgency: high
Maintainer: Mailman for Debian <pkg-mailman-hackers@lists.alioth.debian.org>
Changed-By: Thijs Kinkhorst <thijs@debian.org>
Description:
mailman - Powerful, web-based mailing list manager
Closes: 781626
Changes:
mailman (1:2.1.15-1+deb7u1) wheezy-security; urgency=high
.
* Fix security issue: path traversal through local_part.
Affects installations which use an Exim or Postfix transport
instead of fixed aliases; attacker needs to be able to place
files on the local filesystem.
(CVE-2015-2775, Closes: 781626)
Checksums-Sha1:
aee14030d2520c20a86296801bd6354080b3dd20 1699 mailman_2.1.15-1+deb7u1.dsc
462ac96331491c76aca0128d8f9ced18c50a75d7 8468107 mailman_2.1.15.orig.tar.gz
fc82154bac4573c6e0d64ad85bbf82969c2f2024 99583 mailman_2.1.15-1+deb7u1.debian.tar.gz
6f15299e7c0a075ce6ebd6e8c484f6d13d4e21fc 10153246 mailman_2.1.15-1+deb7u1_amd64.deb
Checksums-Sha256:
4e4f460bf88ab0bee805ba841ee8ad7ca6c5dbda6b336d03d7b157ece8c301c2 1699 mailman_2.1.15-1+deb7u1.dsc
f355fb3d31772b488449e6f5173dafd31edca93172c307244c791d25d9e2bec8 8468107 mailman_2.1.15.orig.tar.gz
1bd1b8227d0642de2a63106451c8ce81f5499ed165c3b2a1b9c4be8334512218 99583 mailman_2.1.15-1+deb7u1.debian.tar.gz
c8317fc177ceb2723cbb5ec8c76c4852b2c06f9ba39a83b7174f71568f10e284 10153246 mailman_2.1.15-1+deb7u1_amd64.deb
Files:
d865f6501606c842008afe395801defa 1699 mail optional mailman_2.1.15-1+deb7u1.dsc
7d207489e8e9de0727cb334d46029833 8468107 mail optional mailman_2.1.15.orig.tar.gz
a67a347f2c8b023fa7ad4fa6b6f4ff5b 99583 mail optional mailman_2.1.15-1+deb7u1.debian.tar.gz
bab8e5b6b8c12a35bb3532178925218d 10153246 mail optional mailman_2.1.15-1+deb7u1_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQEcBAEBCAAGBQJVIrJxAAoJEFb2GnlAHawE7aMH+wfUeW7YntBJ9zbPqQsc7yRC
AZ1+DV9dO2tcI0/cXajrWuY37F7aHYb7PXCCsesvZRcY7StmP7f6puncuAy/QXab
GsU0V0go0ZuR7Eh+QdNcivd+Yh1z0om2nTq5BqpqIfh2M7AqIOk+HsQrcb3c0qFm
vukEITVzGN56D2dynyDjPTUfwoQehX6vL1sMjVQlGhjFOA8GSySXYLPBs6odduPR
CminPU1EEXAPqS/pfCezOVfRHBWM4oWBzGwBfmsKvxqxsoDHDatF2Xry+wiZJsFU
7qeA3b+ktiWN6HoeF5F+7W4vQALCQoqqxqyfvNSCt+KvKmX5b7ELsx915ZMaVsQ=
=pxo1
-----END PGP SIGNATURE-----