Skip to content
OpenAdvisories
High ELSA-2021-4916 1 CVE

Important: mailman:2.1 security update (Oracle Linux 8)

Published Dec 2, 2021 · Updated Dec 2, 2021

Ecosystem: Oracle Linux

Summary

[3:2.1.29-12.2]
- Fix for CVE-2021-44227
- Resolves: #2026871

[3:2.1.29-12.1]
- Fix for CVE-2021-42096
- Fix for CVE-2021-42097
- Resolves: #2021139, #2020692

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 8 mailman 3:2.1.29-12.module+el8.5.0+20436+78a1860c.2

Vulnerabilities 1

  • High 8.8
    CVE-2021-44227

    Cross Site Request Forgery in mailman

    In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.

    mailman mailman Ubuntu PyPI