Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 543
Alerts This Week
Warning Icon 1 543

Ubuntu 18.04 & 16.04: USN-4348-1 Moderate: Mailman Security Issues

ubuntu
Calendar Grey April 29, 2020
Dist Ubuntu Esm H88
Recent Ubuntu releases have resolved security vulnerabilities in Mailman. This notice offers update instructions and an overview of the related potential risks
Several security issues were fixed in Mailman.

Summary

Several security issues were fixed in Mailman.

Software Description:

- mailman: Web-based mailing list manager (legacy branch)

Details:

It was discovered that Mailman incorrectly handled certain inputs.

An attacker could possibly use this to issue execute arbitrary scripts

or HTML. (CVE-2018-0618)

It was discovered that Mailman incorrectly handled certain inputs.

An attacker could possibly use this issue to display arbitrary text

on a web page. (CVE-2018-13796)

It was discovered that Mailman incorrectly handled certain files.

An attacker could possibly use this issue to execute arbitrary code.

(CVE-2020-12137)

Topics%20covered

Topics Covered

security advisory code execution Ubuntu mailman input handling arbitrary text

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
  mailman                         1:2.1.26-1ubuntu0.1

Ubuntu 16.04 LTS:
  mailman                         1:2.1.20-1ubuntu0.4

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4348-1

CVE-2018-0618, CVE-2018-13796, CVE-2020-12137

April 29, 2020

Topics%20covered

Topics Covered

security advisory code execution Ubuntu mailman input handling arbitrary text

Package Information

https://launchpad.net/ubuntu/+source/mailman/1:2.1.26-1ubuntu0.1
https://launchpad.net/ubuntu/+source/mailman/1:2.1.20-1ubuntu0.4

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.