Skip to content
OpenAdvisories
Unscored USN-5151-2 2 CVEs

mailman vulnerabilities

Published Nov 25, 2021 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

USN-5151-1 fixed several vulnerabilities in Mailman. This update provides
the corresponding update for Ubuntu 20.04 ESM.

Original advisory details:

It was discovered that Mailman incorrectly handled certain URL.
An attacker could possibly use this issue to execute arbitrary code.
(CVE-2021-43331)

It was discovered that Mailman incorrectly handled certain inputs.
An attacker could possibly use this issue to expose sensitive information.
(CVE-2021-43332)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS mailman 1:2.1.29-1ubuntu3.1+esm1

Vulnerabilities 2

  • Unscored —
    CVE-2021-43331

    In GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute arbitrary JavaScript fo…

    mailman Ubuntu
  • Unscored —
    CVE-2021-43332

    In GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an encrypted version of the l…

    mailman Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2021-43331
  • report
    https://ubuntu.com/security/CVE-2021-43332