gpp_maybe Security update for mailman

SUSE-SLE-SERVER-12-SP2-2018-3062

This update for mailman fixes the following security vulnerabilities: - Fixed a XSS vulnerability and information leak in user options CGI, which could be used to execute arbitrary scripts in the user's browser via specially encoded URLs (bsc#1077358 CVE-2018-5950) - Fixed a directory traversal vulnerability in MTA transports when using the recommended Mailman Transport for Exim (bsc#925502 CVE-2015-2775) - Fixed a XSS vulnerability, which allowed malicious listowners to inject scripts into the listinfo pages (bsc#1099510 CVE-2018-0618) - Fixed arbitrary text injection vulnerability in several mailman CGIs (CVE-2018-13796 bsc#1101288) - Fixed a CSRF vulnerability on the user options page (CVE-2016-6893 bsc#995352)

• Release Date
  Dec 28 2018
• References
  Bugzilla: 1077358, 925502, 1101288, 995352, 1099510
  CVEs: CVE-2018-0618, CVE-2018-5950, CVE-2016-6893, CVE-2015-2775, CVE-2018-13796
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server LTSS 12.2 s390x

• Packages
  mailman
  The GNU Mailing List Manager

  2.1.17-3.3.3 lock rpm lock src

SUSE Linux Enterprise Server LTSS 12.2 ppc64le

• Packages
  mailman
  The GNU Mailing List Manager

  2.1.17-3.3.3 lock rpm lock src

SUSE Linux Enterprise Server LTSS 12.2 x86_64

• Packages
  mailman
  The GNU Mailing List Manager

  2.1.17-3.3.3 lock rpm lock src