Lucene search

RedHatRHSA-2021:1751

HistoryMay 18, 2021 - 6:00 a.m.

(RHSA-2021:1751) Moderate: mailman:2.1 security update

2021-05-1806:00:19

access.redhat.com

mailman program

arbitrary content injection

options login

private archive login

red hat enterprise linux

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS

0.009

Percentile

83.4%

JSON

Mailman is a program used to help manage e-mail discussion lists.

Security Fix(es):

mailman: arbitrary content injection via the options login page (CVE-2020-12108)
mailman: arbitrary content injection via the private archive login page (CVE-2020-15011)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.4 Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyppc64lemailman-debuginfo< 2.1.29-11.module+el8.4.0+8277+5e2c6e6emailman-debuginfo-2.1.29-11.module+el8.4.0+8277+5e2c6e6e.ppc64le.rpm
RedHatanyx86_64mailman< 2.1.29-11.module+el8.4.0+8277+5e2c6e6emailman-2.1.29-11.module+el8.4.0+8277+5e2c6e6e.x86_64.rpm
RedHatanyaarch64mailman< 2.1.29-11.module+el8.4.0+8277+5e2c6e6emailman-2.1.29-11.module+el8.4.0+8277+5e2c6e6e.aarch64.rpm
RedHatanyx86_64mailman-debugsource< 2.1.29-11.module+el8.4.0+8277+5e2c6e6emailman-debugsource-2.1.29-11.module+el8.4.0+8277+5e2c6e6e.x86_64.rpm
RedHatanyaarch64mailman-debuginfo< 2.1.29-11.module+el8.4.0+8277+5e2c6e6emailman-debuginfo-2.1.29-11.module+el8.4.0+8277+5e2c6e6e.aarch64.rpm
RedHatanys390xmailman< 2.1.29-11.module+el8.4.0+8277+5e2c6e6emailman-2.1.29-11.module+el8.4.0+8277+5e2c6e6e.s390x.rpm
RedHatanyx86_64mailman-debuginfo< 2.1.29-11.module+el8.4.0+8277+5e2c6e6emailman-debuginfo-2.1.29-11.module+el8.4.0+8277+5e2c6e6e.x86_64.rpm
RedHatanyppc64lemailman< 2.1.29-11.module+el8.4.0+8277+5e2c6e6emailman-2.1.29-11.module+el8.4.0+8277+5e2c6e6e.ppc64le.rpm
RedHatanys390xmailman-debugsource< 2.1.29-11.module+el8.4.0+8277+5e2c6e6emailman-debugsource-2.1.29-11.module+el8.4.0+8277+5e2c6e6e.s390x.rpm
RedHatanyaarch64mailman-debugsource< 2.1.29-11.module+el8.4.0+8277+5e2c6e6emailman-debugsource-2.1.29-11.module+el8.4.0+8277+5e2c6e6e.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	ppc64le	mailman-debuginfo	< 2.1.29-11.module+el8.4.0+8277+5e2c6e6e	mailman-debuginfo-2.1.29-11.module+el8.4.0+8277+5e2c6e6e.ppc64le.rpm
RedHat	any	x86_64	mailman	< 2.1.29-11.module+el8.4.0+8277+5e2c6e6e	mailman-2.1.29-11.module+el8.4.0+8277+5e2c6e6e.x86_64.rpm
RedHat	any	aarch64	mailman	< 2.1.29-11.module+el8.4.0+8277+5e2c6e6e	mailman-2.1.29-11.module+el8.4.0+8277+5e2c6e6e.aarch64.rpm
RedHat	any	x86_64	mailman-debugsource	< 2.1.29-11.module+el8.4.0+8277+5e2c6e6e	mailman-debugsource-2.1.29-11.module+el8.4.0+8277+5e2c6e6e.x86_64.rpm
RedHat	any	aarch64	mailman-debuginfo	< 2.1.29-11.module+el8.4.0+8277+5e2c6e6e	mailman-debuginfo-2.1.29-11.module+el8.4.0+8277+5e2c6e6e.aarch64.rpm
RedHat	any	s390x	mailman	< 2.1.29-11.module+el8.4.0+8277+5e2c6e6e	mailman-2.1.29-11.module+el8.4.0+8277+5e2c6e6e.s390x.rpm
RedHat	any	x86_64	mailman-debuginfo	< 2.1.29-11.module+el8.4.0+8277+5e2c6e6e	mailman-debuginfo-2.1.29-11.module+el8.4.0+8277+5e2c6e6e.x86_64.rpm
RedHat	any	ppc64le	mailman	< 2.1.29-11.module+el8.4.0+8277+5e2c6e6e	mailman-2.1.29-11.module+el8.4.0+8277+5e2c6e6e.ppc64le.rpm
RedHat	any	s390x	mailman-debugsource	< 2.1.29-11.module+el8.4.0+8277+5e2c6e6e	mailman-debugsource-2.1.29-11.module+el8.4.0+8277+5e2c6e6e.s390x.rpm
RedHat	any	aarch64	mailman-debugsource	< 2.1.29-11.module+el8.4.0+8277+5e2c6e6e	mailman-debugsource-2.1.29-11.module+el8.4.0+8277+5e2c6e6e.aarch64.rpm