[Mailman-Developers] Mailman Security Patch Announcement

[Mark Sapiro]

David Brown wrote:

>Sorry for the n00b moment, but am I correct to think that the way to apply
>the patch is to issue the command:
>
>patch <pathTo_Mailman/cgi/confirm.py> <pathTo_confirm_xss.patch.txt>
>
>...when logged in with appropriate permissions and where each
><thingInBrackets> is replaced with the appropriate file path.


That will work in this case because the patch changes only the one
file. In general, the preferred method is

cd $prefix
patch -p0 < path_to_patch_file

where $prefix is the directory that contains the Mailman/ directory. In
a default source install, this is /usr/local/mailman/ - YMMV.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan