Lucene search
SuseOPENSUSE-SU-2018:2309-1HistoryAug 13, 2018 - 3:08 p.m.
Security update for mailman (moderate)
2018-08-1315:08:02
lists.opensuse.org
54
0.002 Low
EPSS
Percentile
52.4%
This update for mailman fixes the following issues:
Security issue fixed:
- CVE-2018-13796: Fix a content spoofing vulnerability with invalid list
name messages inside the web UI (boo#1101288).
Bug fixes:
-
update to 2.1.29:
- Fixed the listinfo and admin overview pages that were broken
-
update to 2.1.28:
- It is now possible to edit HTML and text templates via the web admin
UI in a supported language other than the list’s preferred_language. - The Japanese translation has been updated
- The German translation has been updated
- The Esperanto translation has been updated
- The BLOCK_SPAMHAUS_LISTED_DBL_SUBSCRIBE feature added in 2.1.27 was
not working. This is fixed. - Escaping of HTML entities for the web UI is now done more selectively.
- It is now possible to edit HTML and text templates via the web admin
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| openSUSE Leap | 42.3 | x86_64 | mailman | < 2.1.29-2.11.2 | mailman-2.1.29-2.11.2.x86_64.rpm |
| openSUSE Leap | 15.0 | x86_64 | mailman-debugsource | < 2.1.29-lp150.2.8.1 | mailman-debugsource-2.1.29-lp150.2.8.1.x86_64.rpm |
| openSUSE Leap | 42.3 | x86_64 | mailman-debuginfo | < 2.1.29-2.11.2 | mailman-debuginfo-2.1.29-2.11.2.x86_64.rpm |
| openSUSE Leap | 15.0 | x86_64 | mailman | < 2.1.29-lp150.2.8.1 | mailman-2.1.29-lp150.2.8.1.x86_64.rpm |
| openSUSE Leap | 15.0 | x86_64 | mailman-debuginfo | < 2.1.29-lp150.2.8.1 | mailman-debuginfo-2.1.29-lp150.2.8.1.x86_64.rpm |
| openSUSE Leap | 42.3 | x86_64 | mailman-debugsource | < 2.1.29-2.11.2 | mailman-debugsource-2.1.29-2.11.2.x86_64.rpm |
References
Related
nessus
nessus
EulerOS 2.0 SP5 : mailman (EulerOS-SA-2020-2291)
2020-10-30 00:00:00
openSUSE Security Update : mailman (openSUSE-2019-556)
2019-03-27 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2018-0383)
2022-01-28 00:00:00
Huawei EulerOS: Security Advisory for mailman (EulerOS-SA-2020-2291)
2020-10-30 00:00:00
openSUSE: Security Advisory for mailman (openSUSE-SU-2018:2309-1)
2018-08-14 00:00:00
mageia
mageia
Updated mailman packages fix security vulnerability
2018-09-21 19:26:22
freebsd
freebsd
fedora
fedora
[SECURITY] Fedora 28 Update: mailman-2.1.29-1.fc28
2018-08-07 01:19:36
osv
osv
Moderate severity vulnerability that affects mailman
2018-09-11 18:57:16
mailman - security update
2018-07-24 00:00:00
debian
debian
[SECURITY] [DLA 1442-2] mailman regression update
2018-07-27 05:54:23
[SECURITY] [DLA 1442-1] mailman security update
2018-07-24 21:22:21
ubuntucve
ubuntucve
CVE-2018-13796
2018-07-12 00:00:00
cve
cve
CVE-2018-13796
2018-07-12 18:29:00
github
github
Moderate severity vulnerability that affects mailman
2018-09-11 18:57:16
prion
prion
Design/Logic Flaw
2018-07-12 18:29:00
veracode
veracode
URL Mishandling
2020-04-01 00:38:22
debiancve
debiancve
CVE-2018-13796
2018-07-12 18:29:00
redhatcve
redhatcve
CVE-2018-13796
2018-07-27 02:18:43
oraclelinux
oraclelinux
mailman security and bug fix update
2020-04-06 00:00:00
amazon
amazon
Medium: mailman
2020-10-22 18:27:00
Medium: mailman
2020-07-14 01:54:00
gentoo
gentoo
Mailman: Multiple vulnerabilities
2019-04-08 00:00:00
redhat
redhat
(RHSA-2020:1054) Moderate: mailman security and bug fix update
2020-03-31 09:13:11
centos
centos
mailman security update
2020-04-08 18:45:57
altlinux
altlinux
Security fix for the ALT Linux 9 package mailman version 5:2.1.29-alt1
2019-01-06 00:00:00
ubuntu
ubuntu
Mailman vulnerabilities
2020-04-29 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1913
2021-07-02 17:27:17