Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

SciLinux SL6: SLSA-2018-0504-1 Moderate: Mailman XSS Threat Mitigation

Calendar Mar 13, 2018 • User Avatar LinuxSecurity Advisories
1 min read
Scientific Large Esm H446
Topics%20covered

Topics Covered

security advisory moderate cross-site scripting threat mailman scientific linux web ui
mailman: Cross-site scripting (XSS) vulnerability in web UI (CVE-2018-5950) SL6 x86_64 mailman-2.1.12-26.el6_9.3.x86_64.rpm mailman-debuginfo-2.1.12-26.el6_9.3.x86_64.rpm i386 mailman-2.1.12-26.el6_9.3.i686.rpm mailman-debuginfo-2.1.12-26.el6_9.3.i686.rpm - Scientific Linux Development Team 
Synopsis:          Moderate: mailman security update
Advisory ID:       SLSA-2018:0504-1
Issue Date:        2018-03-13
CVE Numbers:       CVE-2018-5950
--

Security Fix(es):

* mailman: Cross-site scripting (XSS) vulnerability in web UI
(CVE-2018-5950)
--

SL6
  x86_64
    mailman-2.1.12-26.el6_9.3.x86_64.rpm
    mailman-debuginfo-2.1.12-26.el6_9.3.x86_64.rpm
  i386
    mailman-2.1.12-26.el6_9.3.i686.rpm
    mailman-debuginfo-2.1.12-26.el6_9.3.i686.rpm

- Scientific Linux Development Team