-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 09 Sep 2021 14:04:00 +0200
Source: postorius
Architecture: source
Version: 1.3.4-2+deb11u1
Distribution: bullseye-security
Urgency: high
Maintainer: Debian Mailman Team <pkg-mailman-hackers@lists.alioth.debian.org>
Changed-By: Jonas Meurer <jonas@freesources.org>
Changes:
 postorius (1.3.4-2+deb11u1) bullseye-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * CVE-2021-40347: Check a user owns the email they are trying to
     unsubscribe (Fixes: #993746)
Checksums-Sha1:
 8830e22f23a72f1fd7492c0441fae64944e399b7 2632 postorius_1.3.4-2+deb11u1.dsc
 6156d8954ce2c3b05de6e6cc722374b5e3410ea2 2802672 postorius_1.3.4.orig.tar.gz
 377dfee6c573fd54073a0fc5149a00afdbc4c50b 833 postorius_1.3.4.orig.tar.gz.asc
 33a9c13257522968f5ae2180789b2aaded804f23 117780 postorius_1.3.4-2+deb11u1.debian.tar.xz
 43d4bcef49e2f39a13caead7653cd15b281416ce 7769 postorius_1.3.4-2+deb11u1_amd64.buildinfo
Checksums-Sha256:
 c823a3ae24bc938fcc6e006754196b859610e825e201aeca0b8a155ae3763fa2 2632 postorius_1.3.4-2+deb11u1.dsc
 2f602950640dbd1d1456fa1d54cfb03338d82d991e808e1f4f8c94894fdc89b5 2802672 postorius_1.3.4.orig.tar.gz
 e9d2e6f31761de99429eea5d2e34305d20ee96abfa233f31fa5f0b5932f3b927 833 postorius_1.3.4.orig.tar.gz.asc
 1f3183f2aaa5234358796216309542c517c00e000fcfe0390fe302662615e6f3 117780 postorius_1.3.4-2+deb11u1.debian.tar.xz
 20ec6bc52b224c17b51112803e9f5939efbffa79936b43dcb121bfc60025d81e 7769 postorius_1.3.4-2+deb11u1_amd64.buildinfo
Files:
 85dbb56aa935d222c048156dbd2875df 2632 python optional postorius_1.3.4-2+deb11u1.dsc
 8b8cba904fa1828da3907a4fb5344669 2802672 python optional postorius_1.3.4.orig.tar.gz
 89de7e2ec734080bc452da69fd100873 833 python optional postorius_1.3.4.orig.tar.gz.asc
 a123aa56e54aade57b808bdddbd57c13 117780 python optional postorius_1.3.4-2+deb11u1.debian.tar.xz
 58814379eeab2460885854da9d26c4e5 7769 python optional postorius_1.3.4-2+deb11u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=BEqa
-----END PGP SIGNATURE-----