Skip to content
OpenAdvisories
Medium ELSA-2020-1054 2 CVEs

Moderate: mailman security and bug fix update (Oracle Linux 7)

Published Apr 6, 2020 · Updated Apr 6, 2020

Ecosystem: Oracle Linux

Summary

[3:2.1.15-30]
- Resolves: #1599692 - Sanitize input on listinfo page (CVE-2018-0618)

[3:2.1.15-29]
- Resolves: #1611689 - Trim long text in 'no such list' messages

[3:2.1.15-28]
- Resolves: #1718180 - Try to decode member name first

[3:2.1.15-27]
- Related : #1545973 - Bump release to override rhel-7.4.z version

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 7 mailman 3:2.1.15-30.el7

Vulnerabilities 2

  • Medium 6.5
    CVE-2018-13796

    Moderate severity vulnerability that affects mailman

    An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site.

    mailman mailman Ubuntu PyPI
  • Unscored —
    CVE-2018-0618

    Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitr…

    GNU Mailman Mailman mailman Ubuntu