Sylvain Beucler pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f66d8f80 by Sylvain Beucler at 2022-06-08T20:36:17+02:00
CVE-2021-43331,CVE-2021-43332/mailman: vcs patch refs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -41523,12 +41523,15 @@ CVE-2021-43332 (In GNU Mailman before 2.1.36, the
CSRF token for the Cgi/admindb
[stretch] - mailman <no-dsa> (Minor issue)
NOTE:
https://mail.python.org/archives/list/[email protected]/message/I2X7PSFXIEPLM3UMKZMGOEO3UFYETGRL/
NOTE: https://bugs.launchpad.net/mailman/+bug/1949403
+ NOTE:
https://bazaar.launchpad.net/~mailman-coders/mailman/2.1/revision/1876 (2.1.36)
+ NOTE: Regression fix:
https://bazaar.launchpad.net/~mailman-coders/mailman/2.1/revision/1878 (2.1.37)
CVE-2021-43331 (In GNU Mailman before 2.1.36, a crafted URL to the
Cgi/options.py user ...)
- mailman <removed> (bug #1000367)
[buster] - mailman 1:2.1.29-1+deb10u3
[stretch] - mailman <no-dsa> (Minor issue)
NOTE:
https://mail.python.org/archives/list/[email protected]/message/I2X7PSFXIEPLM3UMKZMGOEO3UFYETGRL/
NOTE: https://bugs.launchpad.net/mailman/+bug/1949401
+ NOTE:
https://bazaar.launchpad.net/~mailman-coders/mailman/2.1/revision/1875 (2.1.36)
CVE-2021-43330
RESERVED
CVE-2021-43329
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f66d8f8063316de537e00a138e5eef3b65ecce07
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f66d8f8063316de537e00a138e5eef3b65ecce07
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
