- Add token to prevent CSRF [\#492](https://github.com/sympa-community/sympa/pull/492)([racke](https://github.com/racke)) [\#493](https://github.com/sympa-community/sympa/pull/493)([ikedas](https://github.com/ikedas))
- Added a `--copy_list` parameter in the sympa.pl command [\#470](https://github.com/sympa-community/sympa/issues/470)
- Feature: add a "report abuse" button on lists info page [\#323](https://github.com/sympa-community/sympa/issues/323)
**Fixed bugs:**
- Crash in `create_list_request` when list name is missing [\#490](https://github.com/sympa-community/sympa/issues/490)
- member dn fetched from first `ldap_2level` request are not exactly the same of the second ldap request [\#474](https://github.com/sympa-community/sympa/issues/474)
- Template parsing problems in parameterizable data sources [\#461](https://github.com/sympa-community/sympa/issues/461)
- Owners et editors dont get imported from config files while upgrading to 6.2.36 [\#459](https://github.com/sympa-community/sympa/issues/459)
- Family updates don't propagates owners/editors changes in the database [\#309](https://github.com/sympa-community/sympa/issues/309)
- Prevent warning on undefined salt variable. [\#488](https://github.com/sympa-community/sympa/pull/488)([racke](https://github.com/racke))
- Fix shared docs zip upload to send multiple files at once [\#482](https://github.com/sympa-community/sympa/pull/482)([ldidry](https://github.com/ldidry))
- Broken `custom_attribute` field in `member.dump`[\#480](https://github.com/sympa-community/sympa/pull/480)([ikedas](https://github.com/ikedas))
- Fix missing quotes in init script [\#479](https://github.com/sympa-community/sympa/pull/479)([rseichter](https://github.com/rseichter))
- WWSympa: Suppress verbose log on cookie [\#464](https://github.com/sympa-community/sympa/pull/464)([ikedas](https://github.com/ikedas))