ELSA-2015-1417

ELSA-2015-1417 - mailman security and bug fix update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2015-07-28

Description

[3:2.1.12-25]
- fix CVE-2002-0389 - local users able to read private mailing list archives

[3:2.1.12-24]
- fix CVE-2015-2775 - directory traversal in MTA transports

[3:2.1.12-23]
- fix #1095359 - handle update when some mailing lists have been created
by newer Mailman than this one

[3:2.1.12-22]
- fix #1095359 - add support for DMARC

[3:2.1.12-21]
- fix #1056366 - fix bad subject of the welcome email when creating list using
newlist command

[3:2.1.12-20]
- fix #745409 - do not set Indexes in httpd configuration for public archive
- fix #1008139 - fix traceback when list_data_dir is not a child of var_prefix

[3:2.1.12-19]
- fix #765807 - fix traceback when message is received to moderated list

Related CVEs

CVE-2002-0389

CVE-2015-2775

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (i386)	mailman-2.1.12-25.el6.src.rpm	3451a25eaf2a6a3e3ef5f701482b45006ecdb48cc4c2fda5faec0e0096263caf	ELSA-2018-0504	ol6_i386_latest_archive
	mailman-2.1.12-25.el6.src.rpm	3451a25eaf2a6a3e3ef5f701482b45006ecdb48cc4c2fda5faec0e0096263caf	ELSA-2018-0504	ol6_u7_i386_base
	mailman-2.1.12-25.el6.src.rpm	3451a25eaf2a6a3e3ef5f701482b45006ecdb48cc4c2fda5faec0e0096263caf	ELSA-2018-0504	ol6_u8_i386_base
	mailman-2.1.12-25.el6.i686.rpm	24e2495cccc50c8796fb9bc3f4d6b4249c83749157c84232ad9dae0a6ae22014	ELSA-2018-0504	ol6_i386_latest_archive
	mailman-2.1.12-25.el6.i686.rpm	24e2495cccc50c8796fb9bc3f4d6b4249c83749157c84232ad9dae0a6ae22014	ELSA-2018-0504	ol6_u7_i386_base
	mailman-2.1.12-25.el6.i686.rpm	24e2495cccc50c8796fb9bc3f4d6b4249c83749157c84232ad9dae0a6ae22014	ELSA-2018-0504	ol6_u8_i386_base
Oracle Linux 6 (x86_64)	mailman-2.1.12-25.el6.src.rpm	3451a25eaf2a6a3e3ef5f701482b45006ecdb48cc4c2fda5faec0e0096263caf	ELSA-2018-0504	ol6_u7_x86_64_base
	mailman-2.1.12-25.el6.src.rpm	3451a25eaf2a6a3e3ef5f701482b45006ecdb48cc4c2fda5faec0e0096263caf	ELSA-2018-0504	ol6_u8_x86_64_base
	mailman-2.1.12-25.el6.src.rpm	3451a25eaf2a6a3e3ef5f701482b45006ecdb48cc4c2fda5faec0e0096263caf	ELSA-2018-0504	ol6_x86_64_latest_archive
	mailman-2.1.12-25.el6.x86_64.rpm	81e9bfd244677f4d77a9d8a304cfed5058e0f1eaac4000aa6bc515c0b6eeb3ee	ELSA-2018-0504	ol6_u7_x86_64_base
	mailman-2.1.12-25.el6.x86_64.rpm	81e9bfd244677f4d77a9d8a304cfed5058e0f1eaac4000aa6bc515c0b6eeb3ee	ELSA-2018-0504	ol6_u8_x86_64_base
	mailman-2.1.12-25.el6.x86_64.rpm	81e9bfd244677f4d77a9d8a304cfed5058e0f1eaac4000aa6bc515c0b6eeb3ee	ELSA-2018-0504	ol6_x86_64_latest_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team