Advisories » MGASA-2018-0383

Updated mailman packages fix security vulnerability

Publication date: 21 Sep 2018
Modification date: 21 Sep 2018
Type: security
Affected Mageia releases : 6
CVE: CVE-2018-13796

Description

Updated mailman package fixes security vulnerability:

It was discovered that mailman prior to 2.1.29 mishandled URLs in
Utils.py:GetPathPieces() which allowed attackers to display arbitrary
text on trusted sites (CVE-2018-13796).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=23409
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/QMI7UFFD7ZLOTUTAKJZPPN6H6ME47ECQ/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13796

SRPMS

6/core

• mailman-2.1.29-1.mga6