Red Hat Security Advisory

RHSA-2021:1751

mailman:2.1 security update

Released 2021-05-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) mailman-3:2.1.29-11.module+el8.4.0+8277+5e2c6e6e.aarch64::mailman:2.1, mailman-3:2.1.29-11.module+el8.4.0+8277+5e2c6e6e.ppc64le::mailman:2.1, mailman-3:2.1.29-11.module+el8.4.0+8277+5e2c6e6e.s390x::mailman:2.1 +2

TI-2020-09743 CVE-2020-12108 · GHSA-67xg-7gqq-pccf

LOW 34

/options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.02698 Published 2020-05-06 Partial fix CWE-74

TI-2020-11802 CVE-2020-15011 · GHSA-fvg8-xwx7-9x5m

LOW 24

GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01888 Published 2020-06-24 Partial fix CWE-74