On 7/10/18 6:03 PM, Mark Sapiro wrote:
This is a heads up. There is a recently identified minor security issue in Mailman 2.1.27 and earlier. This is not something that allows permanent compromise or information leak from your site, but is something that needs to be fixed. This issue has been given CVE ID CVE-2018-13796.
I plan to release Mailman 2.1.28 on 24 July, 2018 along with details of the issue and a patch to apply to earlier releases.
This is just notification of that plan for those that need to plan ahead.
Due to changed circumstances, I am changing the planned release date from 24 July to 23 July. -- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan