Advisories » MGASA-2018-0313

Updated mailman packages fix security vulnerability

Publication date: 11 Jul 2018
Modification date: 11 Jul 2018
Type: security
Affected Mageia releases : 6
CVE: CVE-2018-0618

Description

It was discovered that mailman version prior to 2.1.27 contained a
vulnerability where malicious list owners could inject evil scripts into
listinfo pages (CVE-2018-0618).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=23256
• https://lists.opensuse.org/opensuse-updates/2018-06/msg00147.html
• https://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-0618.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0618

SRPMS

6/core

• mailman-2.1.27-1.mga6