Bug 113473

Summary:	CAN-2003-0965 CAN-2003-0992 XSS mailman issues
Product:	[Fedora] Fedora	Reporter:	Mark J. Cox <mjc>
Component:	mailman	Assignee:	John Dennis <jdennis>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	1	CC:	leonard-rh-bugzilla, mitr
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2004-01-23 21:56:40 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Mark J. Cox 2004-01-14 12:34:16 UTC

Two cross-site-scripting issues have been fixed since the version of
mailman 2.1.2 released with FC1.  

A XSS issue in admin CGI: CAN-2003-0965
A XSS issue in create CGI: CAN-2003-0992

Comment 3 Leonard den Ottolander 2004-02-08 00:11:12 UTC

How about making an announcement and pushing this to the stable tree?