Skip to content
OpenAdvisories
Medium ELSA-2021-1751 2 CVEs

Moderate: mailman:2.1 security update (Oracle Linux 8)

Published May 25, 2021 · Updated May 25, 2021

Ecosystem: Oracle Linux

Summary

[3:2.1.29-11]
- Fixes for CVE-2020-12108 and CVE-2020-15011

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 8 mailman 3:2.1.29-11.module+el8.4.0+20063+5e2c6e6e

Vulnerabilities 2

  • Unscored —
    CVE-2020-12108

    /options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.

    mailman Ubuntu
  • Unscored —
    CVE-2020-15011

    GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.

    mailman Ubuntu