-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Package : mailman Version : 1:2.1.13-6 CVE ID : CVE-2015-2775 Debian Bug : 781626
A path traversal vulnerability was discovered in Mailman, the mailing list manager. Installations using a transport script (such as postfix-to-mailman.py) to interface with their MTA instead of static aliases were vulnerable to a path traversal attack. To successfully exploit this, an attacker needs write access on the local file system. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBCAAGBQJVIr5fAAoJEFb2GnlAHawEkKgH/jEV77DJ6u7Bl6+JkhrAhu2I kIqbr4DYzy4L/vxM1JRDEu0TtuxcG9P2CggDE0PzXD7mdhswXTI6//7MBg0Gdmnd enQxDZuQynXtT0aUSTR7XxdmlT3ac4u2Q4fd5kgdHb5SUgE4zUwXMWkgVpUlemVs TLY25xiIvk4qerthkIF1XvkjIRY/PgmzGRhuVd6mVN3uyi7wkojZfBUmve9Bsu3B PRzkHCg7zlAysbN9AMGDTtNWJqQA0lYQKdqYsdRW2TCH49gymiMMBVjKbiwoWM+V g0OGdMrv/lcohkL7F5jTuh4MDbiB+2rYzZtJ56SLw9TVQKQqeEJILNXA06feobk= =J0k4 -----END PGP SIGNATURE----- -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected] Archive: https://lists.debian.org/[email protected]
