-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 07 May 2026 23:32:28 +0200
Source: postorius
Architecture: source
Version: 1.3.8-3+deb12u1
Distribution: bookworm-security
Urgency: medium
Maintainer: Debian Mailman Team <pkg-mailman-hackers@lists.alioth.debian.org>
Changed-By: Moritz Mühlenhoff <jmm@debian.org>
Changes:
 postorius (1.3.8-3+deb12u1) bookworm-security; urgency=medium
 .
   * Fix XSS in queue for held messages
Checksums-Sha1:
 10fa784687662f462f8ecd135965fa01cd09725b 2662 postorius_1.3.8-3+deb12u1.dsc
 f6c2aaa96e65126659d3376e2f7de20dd260f041 3222195 postorius_1.3.8.orig.tar.gz
 5793e2c3a618c8c30507749721cc8e6b154abba6 833 postorius_1.3.8.orig.tar.gz.asc
 d4b7a486a45254b3f052f68c4e6e799030b8bdff 118272 postorius_1.3.8-3+deb12u1.debian.tar.xz
 9a4fe635432058facc54315d771992ee87372f34 8399 postorius_1.3.8-3+deb12u1_amd64.buildinfo
Checksums-Sha256:
 512f07b743efbf16f56e30b2973ee2ff1f75a532445063a905dbd515ec5888f5 2662 postorius_1.3.8-3+deb12u1.dsc
 d664adf8f571df15090dce49c2b0a62a244d203c1bb238db336162e52833ea1f 3222195 postorius_1.3.8.orig.tar.gz
 e79f75fbde6141a779c81dac6b34135f4676468c67fa872b8eebc0c90009d09a 833 postorius_1.3.8.orig.tar.gz.asc
 514cbc604b8f8c5e54a2f65790aa381b2db83fb8f3af8d113ab47334c73108e7 118272 postorius_1.3.8-3+deb12u1.debian.tar.xz
 a5e8471502f5ff129b59dfa1367a75acb942fd7d76013b0bc87d5bb331aae1b3 8399 postorius_1.3.8-3+deb12u1_amd64.buildinfo
Files:
 c72cea56937ebad692f9d0defcb56c6a 2662 python optional postorius_1.3.8-3+deb12u1.dsc
 4039e7558a3974fea0d9bf02394a394e 3222195 python optional postorius_1.3.8.orig.tar.gz
 65043cfe663889811b1c4d8d3f40cb78 833 python optional postorius_1.3.8.orig.tar.gz.asc
 b20fa0c21060c5e194340d7ea23f7176 118272 python optional postorius_1.3.8-3+deb12u1.debian.tar.xz
 75ed64e90f8d3edcc6b36c1979247d23 8399 python optional postorius_1.3.8-3+deb12u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=oYn/
-----END PGP SIGNATURE-----