Skip to content
OpenAdvisories
Medium DSA-4970-1 1 CVE

postorius - security update

Published Sep 9, 2021 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 10 postorius 1.2.4-1+deb10u1
Debian · 11 postorius 1.3.4-2+deb11u1

Vulnerabilities 1

  • Medium 5.4
    CVE-2021-40347

    GNU Mailman Postorius Access Control Issues

    An issue was discovered in views/list.py in GNU Mailman Postorius before 1.3.5. An attacker (logged into any account) can send a crafted POST request to unsubscribe any user from a mailing list, also revealing whether that address was subscribed in the first …

    postorius postorius postorius Debian Ubuntu PyPI