The mailing list for listmasters using Sympa

[Matthew Goebel <address@concealed>]

Is this in regards to the comments in :: https://github.com/sympa-community/sympa/issues/1654 ?

Thanks,
Matt

On Sat, Jan 18, 2025 at 7:07 AM Harald Weidner <address@concealed> wrote:

Hello,

> > It seems there's an SQL injection bug for Sympa 6.2.70 (from Debian).  I
> > can't find any docs on this.  Is this known?

> Please provide sensitive information about security flaw to
> <address@concealed <mailto:address@concealed>>.  Thank you.

Is there any news on this topic? Does the SQL injection vulnerability exist,
and is version 6.2.70 in Debian stable affected?

Best regards,
Harald

--

Matthew Goebel : maddress@concealed : Unix Jockey @ EMU : Hail Eris
Neo-Student, Net Lurker, Donut consumer, and procrastinating medher...
 "Always with the negative waves, Moriarty" - Oddball
 "Comfort the troubled, and trouble the comfortable." - Dietrich Bonhoeffer