[ubuntu/vivid-proposed] mailman 1:2.1.18-1ubuntu1 (Accepted)

[Marc Deslauriers]

mailman (1:2.1.18-1ubuntu1) vivid; urgency=medium

  * SECURITY UPDATE: path traversal vulnerability
    - debian/patches/CVE-2015-2775.patch: validate list name in
      Mailman/Utils.py, add comment to Mailman/Defaults.py.in.
    - CVE-2015-2775

Date: Fri, 03 Apr 2015 08:03:39 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/mailman/1:2.1.18-1ubuntu1
-------------- next part --------------
Format: 1.8
Date: Fri, 03 Apr 2015 08:03:39 -0400
Source: mailman
Binary: mailman
Architecture: source
Version: 1:2.1.18-1ubuntu1
Distribution: vivid
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description:
 mailman    - Powerful, web-based mailing list manager
Changes:
 mailman (1:2.1.18-1ubuntu1) vivid; urgency=medium
 .
   * SECURITY UPDATE: path traversal vulnerability
     - debian/patches/CVE-2015-2775.patch: validate list name in
       Mailman/Utils.py, add comment to Mailman/Defaults.py.in.
     - CVE-2015-2775
Checksums-Sha1:
 aa05d2ed4f08287a7280efcbee7624c0cc967fbe 2182 mailman_2.1.18-1ubuntu1.dsc
 2a9869fc4ce99055a202d3956470df74f30f2181 104324 mailman_2.1.18-1ubuntu1.debian.tar.xz
Checksums-Sha256:
 0556101c45a47f3ebecbbaa3fe70df4855849c62e04131608bf1a77773a89daa 2182 mailman_2.1.18-1ubuntu1.dsc
 06441c155c647e78c698b88976661336cd229f0ffc4c04fa9df913d2367a1d2c 104324 mailman_2.1.18-1ubuntu1.debian.tar.xz
Files:
 ac2ebee97be42b69f429e981ddf5af80 2182 mail optional mailman_2.1.18-1ubuntu1.dsc
 afad8a538cd5e955fa46cb5910c3bcf7 104324 mail optional mailman_2.1.18-1ubuntu1.debian.tar.xz
Original-Maintainer: Mailman for Debian <pkg-mailman-hackers at lists.alioth.debian.org>