Skip to content
OpenAdvisories
Medium RHSA-2020:1054 2 CVEs

Red Hat Security Advisory: mailman security and bug fix update

Published Sep 16, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::server mailman 3:2.1.15-30.el7
Red Hat · RHEL 7 enterprise_linux:7::server mailman-debuginfo 3:2.1.15-30.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation mailman 3:2.1.15-30.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation mailman-debuginfo 3:2.1.15-30.el7

Vulnerabilities 2

  • Medium 6.5
    CVE-2018-13796

    Moderate severity vulnerability that affects mailman

    An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site.

    mailman mailman Ubuntu PyPI
  • Unscored —
    CVE-2018-0618

    Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitr…

    GNU Mailman Mailman mailman Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.8_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1596458
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1609090
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1054.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-0618
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-0618
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-0618
  • report
    https://access.redhat.com/security/cve/CVE-2018-13796
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-13796
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-13796