shield Security update for mailman
slessp4-mailman-13649


This update for mailman to version 2.1.15 fixes the following issues: - CVE-2016-6893: Prevent cross-site request forgery (CSRF) vulnerability in the user options page that allowed remote attackers to hijack the authentication of arbitrary users for requests that modify an option (bsc#995352). - Various other hardenings against CSFR attacks For details please see https://launchpad.net/mailman/+milestone/2.1.15

  • Release Date
    Jun 11 2018
  • References
    Bugzilla: 995352
    CVEs: CVE-2016-6893
  • Type
    security
  • Severity
    moderate

cloud_download Downloads

SUSE Linux Enterprise Server 11.4 ia64
  • Packages
    mailman
    The GNU Mailing List Manager
    2.1.15-9.6.3.1 lock rpm lock src
SUSE Linux Enterprise Server 11.4 s390x
  • Packages
    mailman
    The GNU Mailing List Manager
    2.1.15-9.6.3.1 lock rpm lock src
SUSE Linux Enterprise Server for SAP Applications 11.4 ppc64
  • Packages
    mailman
    The GNU Mailing List Manager
    2.1.15-9.6.3.1 lock rpm lock src
SUSE Linux Enterprise Server for SAP All-in-One 11.4 x86_64
  • Packages
    mailman
    The GNU Mailing List Manager
    2.1.15-9.6.3.1 lock rpm lock src
SUSE Linux Enterprise Server 11.4 i586
  • Packages
    mailman
    The GNU Mailing List Manager
    2.1.15-9.6.3.1 lock rpm lock src