< back to search

gpp_maybe Security update for mailman

SUSE-SLE-SAP-12-SP2-2020-1301

This update for mailman fixes the following issues: Security issue fixed: - CVE-2020-12108: Fixed a content injection bug (bsc#1171363). - CVE-2020-12137: Fixed a XSS vulnerability caused by MIME type confusion (bsc#1170558). Non-security issue fixed: - Fixed rights and ownership on /var/lib/mailman/archives (bsc#1167068). - Don't default to invalid hosts for DEFAULT_EMAIL_HOST (bsc#682920).

Release Date

May 18 2020
References

Bugzilla: 1170558, 1167068, 1171363, 682920
CVEs: CVE-2020-12108, CVE-2020-12137
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Server for SAP Applications 12.2 ppc64le

Packages

mailman
The GNU Mailing List Manager

2.1.17-3.20.1 lock rpm lock src

SUSE Linux Enterprise Server for SAP Applications 12.2 x86_64

Packages

mailman
The GNU Mailing List Manager

2.1.17-3.20.1 lock rpm lock src