David Brown wrote:
Sorry for the n00b moment, but am I correct to think that the way to apply the patch is to issue the command:
patch <pathTo_Mailman/cgi/confirm.py> <pathTo_confirm_xss.patch.txt>
...when logged in with appropriate permissions and where each <thingInBrackets> is replaced with the appropriate file path.
That will work in this case because the patch changes only the one file. In general, the preferred method is
cd $prefix patch -p0 < path_to_patch_file
where $prefix is the directory that contains the Mailman/ directory. In a default source install, this is /usr/local/mailman/ - YMMV.