drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Cross-Site Scripting in MailMan
Name: |
Cross-Site Scripting in MailMan |
|
ID: |
DSA-3668-1 |
|
Distribution: |
Debian |
|
Plattformen: |
Debian sid, Debian jessie |
|
Datum: |
Do, 15. September 2016, 15:57 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6893 |
|
Applikationen: |
MailMan |
|
Originalnachricht |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
- ------------------------------------------------------------------------- Debian Security Advisory DSA-3668-1 security@debian.org https://www.debian.org/security/ Thijs Kinkhorst September 15, 2016 https://www.debian.org/security/faq - -------------------------------------------------------------------------
Package : mailman CVE ID : CVE-2016-6893 Debian Bug : 835970
It was discovered that there was a CSRF vulnerability in mailman, a web-based mailing list manager, which could allow an attacker to obtain a user's password.
For the stable distribution (jessie), this problem has been fixed in version 1:2.1.18-2+deb8u1.
For the unstable distribution (sid), this problem has been fixed in version 1:2.1.23-1.
We recommend that you upgrade your mailman packages.
Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iQEcBAEBCAAGBQJX2o9rAAoJEFb2GnlAHawE614H/19mvKKiWGlH4rqQ9wOf0FS7 Vfg/S+P1QDYCFPuoY3lmI7Zlqf47lseKkguI+KL5imS7oN9Anu2uCHEyjvFDSuPQ 0L9fnQA5k+DGoYnW0vpfy1B8pOy4u+3hSCSeKsDvVcwEx0T4KGxIcw9Azcp1xlyI eynNjQUX9Yg6bliVDzHK+ENj9X1xODC290hnWmL576lmOMDStOxkvjEeUkloNkQS TQvgMiOTv9xAaD/poF3TTqOlq2xKMnzllIDwywLGNmw1sGMwVv1wPU+b7j+8HL6z 5NlfjsGM1fkCfvHMaR8NXjeIqpVzyiKzGfjx5OLLibU3+VbFhuiu4GIUtm2Nfy4= =s2Tj -----END PGP SIGNATURE-----
|
|
|
|