Skip to content
OpenAdvisories
High ELSA-2021-4826 2 CVEs

Important: mailman:2.1 security update (Oracle Linux 8)

Published Nov 24, 2021 · Updated Nov 24, 2021

Ecosystem: Oracle Linux

Summary

[3:2.1.29-12.1]
- Fix for CVE-2021-42096
- Fix for CVE-2021-42097
- Resolves: #2021139, #2020692

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 8 mailman 3:2.1.29-12.module+el8.5.0+20429+dde04a6e.1

Vulnerabilities 2

  • Unscored —
    CVE-2021-42096

    GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrf_token value is derived from the admin p…

    mailman Ubuntu
  • Unscored —
    CVE-2021-42097

    GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not specific to a single user ac…

    mailman Ubuntu