Skip to content
OpenAdvisories
Unscored DLA-2276-1 2 CVEs

mailman - security update

Published Jul 10, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 mailman 1:2.1.23-1+deb9u6

Vulnerabilities 2

  • Unscored —
    CVE-2020-12108

    /options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.

    mailman Ubuntu
  • Unscored —
    CVE-2020-15011

    GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.

    mailman Ubuntu