Skip to content
OpenAdvisories
Medium ELSA-2018-0505 1 CVE

Moderate: mailman security update (Oracle Linux 7)

Published Mar 13, 2018 · Updated Mar 13, 2018

Ecosystem: Oracle Linux

Summary

[3:2.1.15-26.1]
- Related: #1545974 - Add import regular expression module

[3:2.1.15-26]
- Related: #1545974 - Bump release to make it higher than 7.5

[3:2.1.15-24.2]
- Resolves: #1545974 - Add sanitizer to mitigate XSS injection

[3:2.1.15-24.1]
- Resolves: #1545974 - Fix XSS vulnerability in web UI

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 7 mailman 3:2.1.15-26.el7_4.1

Vulnerabilities 1

  • Unscored —
    CVE-2018-5950

    Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbit…

    mailman Ubuntu