Bug 56865
| Summary: | Security updates have been released by the authors | ||
|---|---|---|---|
| Product: | [Retired] Red Hat Linux | Reporter: | mcisar |
| Component: | mailman | Assignee: | Nalin Dahyabhai <nalin> |
| Status: | CLOSED ERRATA | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | 7.2 | CC: | daniel |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2001-11-29 04:35:06 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
Errata has been released: https://www.redhat.com/support/errata/RHSA-2001-168.html |
From Bugzilla Helper: User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Q312461) Description of problem: This clip was recently posted by the authors of Mailman... Hot on the heels of Mailman 2.0.7, I'm now releasing 2.0.8 which fixes several cross-site scripting security holes, and a few other minor bug fixes. More information on cross-site scripting exploits in general can be found at http://www.cert.org/advisories/CA-2000-02.html I recommend anybody running a version of Mailman up to, and including 2.0.7 to upgrade to version 2.0.8. I've made both full source tarballs and patches available. Actually, patches going all the way back to 2.0 are now available on SourceForge. See http://sourceforge.net/project/showfiles.php?group_id=103 for links to download all the patches and the source tarball. If you decide to install the patches, please do read the release notes first: http://sourceforge.net/project/shownotes.php?release_id=63042 Currently the SourceForge and www.list.org sites are up-to-date, and I expect the gnu.org site to be updated soon. See also: http://www.gnu.org/software/mailman http://www.list.org http://mailman.sf.net I've also included links on the FAQ page to the Mailman FAQ wizard. Thanks everybody for contributing good entries! (I may do some reorg when I get a chance.) See the FAQ wizard at http://www.python.org/cgi-bin/faqw-mm.py Cheers, -Barry Version-Release number of selected component (if applicable): How reproducible: Always Steps to Reproduce: See Description for details. Additional info: