RHSA-2011:0308: Moderate: mailman security update
Mailman is a program used to help manage email discussion lists.Multiple input sanitization flaws were found in the way Mailman displayedusernames of subscribed users on certain pages. If a user who is subscribedto a mailing list were able to trick a victim into visiting one of thosepages, they could perform a cross-site scripting (XSS) attack against thevictim. (CVE-2011-0707)Multiple input sanitization flaws were found in the way Mailman displayedmailing list information. A mailing list administrator could use this flawto conduct a cross-site scripting (XSS) attack against victims viewing alist's "listinfo" page. (CVE-2010-3089)Red Hat would like to thank Mark Sapiro for reporting these issues.Users of mailman should upgrade to this updated package, which containsbackported patches to correct these issues.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2011:0308?
The severity of RHSA-2011:0308 is classified as moderate.
What software is affected by RHSA-2011:0308?
RHSA-2011:0308 affects the Mailman package version 2.1.12-14.el6_0.2.
How do I fix RHSA-2011:0308?
To fix RHSA-2011:0308, update to Mailman version 2.1.12-14.el6_0.2 or a later version.
What vulnerabilities are associated with RHSA-2011:0308?
RHSA-2011:0308 addresses multiple input sanitization flaws in Mailman.
Can I continue using Mailman without addressing RHSA-2011:0308?
Continuing to use Mailman without addressing RHSA-2011:0308 could expose users to potential security risks.