Skip to content
OpenAdvisories
Unscored DLA-2791-1 2 CVEs

mailman - security update

Published Oct 23, 2021 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 mailman 1:2.1.23-1+deb9u7

Vulnerabilities 2

  • Unscored —
    CVE-2021-42096

    GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrf_token value is derived from the admin p…

    mailman Ubuntu
  • Unscored —
    CVE-2021-42097

    GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not specific to a single user ac…

    mailman Ubuntu