mailman security update

CentOS Errata and Security Advisory CESA-2018:0505 An update for mailman is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

mailman security update

CentOS Errata and Security Advisory CESA-2018:0504 An update for mailman is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Scientific Linux Security Update : mailman on SL6.x i386/x86_64 (20180313)

Security Fixes : - mailman: Cross-site scripting XSS vulnerability in web UI CVE-2018-5950 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid108333; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...

RHEL 6 : mailman (RHSA-2018:0504)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2018:0504 advisory. Mailman is a program used to help manage e-mail discussion lists. Security Fixes: mailman: Cross-site scripting XSS vulnerability in web UI...

RHEL 7 : mailman (RHSA-2018:0505)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2018:0505 advisory. Mailman is a program used to help manage e-mail discussion lists. Security Fixes: mailman: Cross-site scripting XSS vulnerability in web UI...

Scientific Linux Security Update : mailman on SL7.x x86_64 (20180313)

Security Fixes : - mailman: Cross-site scripting XSS vulnerability in web UI CVE-2018-5950 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid108334; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...

Oracle Linux 7 : mailman (ELSA-2018-0505)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2018-0505 advisory. 3:2.1.15-26.1 - Related: 1545974 - Add import regular expression module 3:2.1.15-26 - Related: 1545974 - Bump release to make it higher than 7.5 3:2.1.15-24.2 -...

Oracle Linux 6 : mailman (ELSA-2018-0504)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2018-0504 advisory. 3:2.1.12-26.3 - Related: 1545967 - Add missed import 3:2.1.12-26.2 - Resolves: 1545967 - Fix XSS vulnerability in web UI. Add sanitizer 3:2.1.12-26.1 - Resolves...

Moderate: Red Hat Security Advisory: mailman security update

An update for mailman is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

mailman: Cross-site scripting (XSS) vulnerability in web UI

A cross-site scripting XSS flaw was found in mailman. An attacker, able to trick the user into visiting a specific URL, can execute arbitrary web scripts on the user's side and force the victim to perform unintended actions...

Moderate: Red Hat Security Advisory: mailman security update

An update for mailman is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

mailman: Cross-site scripting (XSS) vulnerability in web UI

A cross-site scripting XSS flaw was found in mailman. An attacker, able to trick the user into visiting a specific URL, can execute arbitrary web scripts on the user's side and force the victim to perform unintended actions...

mailman security update

3:2.1.15-26.1 - Related: 1545974 - Add import regular expression module 3:2.1.15-26 - Related: 1545974 - Bump release to make it higher than 7.5 3:2.1.15-24.2 - Resolves: 1545974 - Add sanitizer to mitigate XSS injection 3:2.1.15-24.1 - Resolves: 1545974 - Fix XSS vulnerability in web UI...

mailman security update

3:2.1.12-26.3 - Related: 1545967 - Add missed import 3:2.1.12-26.2 - Resolves: 1545967 - Fix XSS vulnerability in web UI. Add sanitizer 3:2.1.12-26.1 - Resolves: 1545967 - Fix XSS vulnerability in web UI...

mailman -- hardening against malicious listowners injecting evil HTML scripts

Mark Sapiro reports: Existing protections against malicious listowners injecting evil scripts into listinfo pages have had a few more checks added. A few more error messages have had their values HTML escaped. The hash generated when SUBSCRIBEFORMSECRET is set could have been the same as one...

Debian: Security Advisory (DLA-1272-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4108-1 : mailman - security update

Calum Hutton and the Mailman team discovered a cross site scripting and information leak vulnerability in the user options page. A remote attacker could use a crafted URL to steal cookie information or to fish for whether a user is subscribed to a list with a private roster. C Tenable Network...

[SECURITY] [DSA 4108-1] mailman security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4108-1 [email protected] https://www.debian.org/security/ Thijs Kinkhorst February 09, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4108-1] mailman security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4108-1 [email protected] https://www.debian.org/security/ Thijs Kinkhorst February 09, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1272-1] mailman security update

Package : mailman Version : 1:2.1.15-1+deb7u3 CVE ID : CVE-2018-5950 Debian Bug : 888201 The mailman package has a Cross-site scripting XSS vulnerability in the web UI before 2.1.26 which allows remote attackers to inject arbitrary web script or HTML via a user-options URL For Debian 7 "Wheezy",...