Summary
Mailman is a program used to help manage e-mail discussion lists.
Security Fix(es):
* mailman: arbitrary content injection via the options login page (CVE-2020-12108)
* mailman: arbitrary content injection via the private archive login page (CVE-2020-15011)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 8.4 Release Notes linked from the References section.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | mailman | 3:2.1.29-11.module+el8.4.0+539+54f8785b |
Vulnerabilities 2
-
Unscored —
/options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.
-
Unscored —
GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.