Unscored DSA-4818-1 4 CVEs

sympa - security update

Published Dec 23, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	sympa	6.2.40~dfsg-1+deb10u1

Vulnerabilities 4

Unscored —

CVE-2020-10936

Sympa before 6.2.56 allows privilege escalation.

sympa sympa Debian Ubuntu

May 27, 2020
Unscored —

CVE-2020-26932

debian/sympa.postinst for the Debian Sympa package before 6.2.40~dfsg-7 uses mode 4755 for sympa_newaliases-wrapper, wh…

sympa sympa Debian Ubuntu

Oct 10, 2020
Unscored —

CVE-2020-29668

Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any arbitrary string (except o…

sympa sympa Debian Ubuntu

Dec 10, 2020
Unscored —

CVE-2020-9369

Sympa 6.2.38 through 6.2.52 allows remote attackers to cause a denial of service (disk consumption from temporary files…

sympa Debian

Feb 24, 2020