mailman -- LTS security update

2015-04-06T00:00:00
ID DLA-186
Type debian
Reporter Debian
Modified 2015-04-06T00:00:00

Description

A path traversal vulnerability was discovered in Mailman, the mailing list manager. Installations using a transport script (such as postfix-to-mailman.py) to interface with their MTA instead of static aliases were vulnerable to a path traversal attack. To successfully exploit this, an attacker needs write access on the local file system.

For Debian 6 Squeeze, these issues have been fixed in mailman version 1:2.1.13-6