Lucene search

K
altlinuxHttps://packages.altlinux.org/en/sisyphus/security/F14FA6E542A8C8BAF6D10E00D0BA4DCC
HistoryNov 13, 2021 - 12:00 a.m.

Security fix for the ALT Linux 9 package mailman version 5:2.1.36-alt1

2021-11-1300:00:00
https://packages.altlinux.org/en/sisyphus/security/
packages.altlinux.org
12
alt linux 9
package mailman
security fix
cve-2021-43331
xss attack
user options
cve-2021-43332
list moderator
offline brute force
admin password

EPSS

0.003

Percentile

70.1%

Nov. 13, 2021 Konstantin Lepikhov 5:2.1.36-alt1

- Updated to 2.1.36.
- Security fixes:
  + CVE-2021-43331: A potential XSS attack via the user options.
  + CVE-2021-43332: A potential for for a list moderator to carry out an
                    off-line brute force attack to obtain the list
		    admin password.