I'm not sure if it makes sense to use the same patchinfo for 42.1 and 42.2 ;-)

For 42.2, it's just a minor update (3.0 -> 3.0.2) which fixes the CVE and a few other bugs.

For 42.1, the update is bigger (2.93 aka 3.0 beta3 -> 3.0.2), which means more changes. Also, 42.1 users will have to run PostfixAdmin's setup.php to upgrade the database.

See the texts in my original submit requests for what I'd use as patchinfo text ;-)