Skip to content
OpenAdvisories
Unscored RHSA-2021:1751 2 CVEs

Red Hat Security Advisory: mailman:2.1 security update

Published Sep 16, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream mailman 3:2.1.29-11.module+el8.4.0+8277+5e2c6e6e
Red Hat · RHEL 8 enterprise_linux:8::appstream mailman-debuginfo 3:2.1.29-11.module+el8.4.0+8277+5e2c6e6e
Red Hat · RHEL 8 enterprise_linux:8::appstream mailman-debugsource 3:2.1.29-11.module+el8.4.0+8277+5e2c6e6e

Vulnerabilities 2

  • Unscored —
    CVE-2020-12108

    /options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.

    mailman Ubuntu
  • Unscored —
    CVE-2020-15011

    GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.

    mailman Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1848856
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1850684
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1751.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-12108
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-12108
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-12108
  • article
    https://bugs.launchpad.net/mailman/+bug/1873722
  • report
    https://access.redhat.com/security/cve/CVE-2020-15011
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-15011
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-15011