Synopsis

Moderate: mailman security update

Type/Severity

Security Advisory: Moderate

Topic

An update for mailman is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Mailman is a program used to help manage e-mail discussion lists.

Security Fix(es):

• mailman: Cross-site scripting (XSS) vulnerability in web UI (CVE-2018-5950)
  

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64

Fixes

• BZ - 1537941 - CVE-2018-5950 mailman: Cross-site scripting (XSS) vulnerability in web UI

CVEs

• CVE-2018-5950

References

• https://access.redhat.com/security/updates/classification/#moderate

Red Hat Enterprise Linux Server 6

SRPM
mailman-2.1.12-26.el6_9.3.src.rpm	SHA-256: 0a083706a1273a6c907faa85ccd4817851580a08c6680f187b279da1e550c17d
x86_64
mailman-2.1.12-26.el6_9.3.x86_64.rpm	SHA-256: 107180ccefa5efe42bdc5c780b8f6fe0303ece1d6f58dac27be2bd361e937800
mailman-debuginfo-2.1.12-26.el6_9.3.x86_64.rpm	SHA-256: 1542cf1245a9d18836934c0e824876d084300569a7ffd423dc60964b36d3289a
i386
mailman-2.1.12-26.el6_9.3.i686.rpm	SHA-256: ec0f47bcc288db918c8ba52b42f63d1d44960ce796ffc0be6ae4fc860826133d
mailman-debuginfo-2.1.12-26.el6_9.3.i686.rpm	SHA-256: fdd762de7d34402cd97cebe1c5c8219d137e25740370587e6b0cfe381daf464d

Red Hat Enterprise Linux Workstation 6

SRPM
mailman-2.1.12-26.el6_9.3.src.rpm	SHA-256: 0a083706a1273a6c907faa85ccd4817851580a08c6680f187b279da1e550c17d
x86_64
mailman-2.1.12-26.el6_9.3.x86_64.rpm	SHA-256: 107180ccefa5efe42bdc5c780b8f6fe0303ece1d6f58dac27be2bd361e937800
mailman-debuginfo-2.1.12-26.el6_9.3.x86_64.rpm	SHA-256: 1542cf1245a9d18836934c0e824876d084300569a7ffd423dc60964b36d3289a
i386
mailman-2.1.12-26.el6_9.3.i686.rpm	SHA-256: ec0f47bcc288db918c8ba52b42f63d1d44960ce796ffc0be6ae4fc860826133d
mailman-debuginfo-2.1.12-26.el6_9.3.i686.rpm	SHA-256: fdd762de7d34402cd97cebe1c5c8219d137e25740370587e6b0cfe381daf464d

Red Hat Enterprise Linux for IBM z Systems 6

SRPM
mailman-2.1.12-26.el6_9.3.src.rpm	SHA-256: 0a083706a1273a6c907faa85ccd4817851580a08c6680f187b279da1e550c17d
s390x
mailman-2.1.12-26.el6_9.3.s390x.rpm	SHA-256: 59ad6b56b4d049d3d8a4481b5f372a062076b6464ff8b2bd12020c9bb4bc6e85
mailman-debuginfo-2.1.12-26.el6_9.3.s390x.rpm	SHA-256: ab5c99454457103c02ef84a5a8369cbcce7359525b8ed9053a4ed1d7f6fae27a

Red Hat Enterprise Linux for Power, big endian 6

SRPM
mailman-2.1.12-26.el6_9.3.src.rpm	SHA-256: 0a083706a1273a6c907faa85ccd4817851580a08c6680f187b279da1e550c17d
ppc64
mailman-2.1.12-26.el6_9.3.ppc64.rpm	SHA-256: 8e4584c20b3ed0b9b6e6306fe1e2a36e0b3daea80bc08b8c93103818c312d3b8
mailman-debuginfo-2.1.12-26.el6_9.3.ppc64.rpm	SHA-256: 55a0dd27ea1ca5fedab55bc873b223e915371ae58748d9a25a708cb1584bcf7f