Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 06 Feb 2018 14:56:03 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-ports-bugs@FreeBSD.org
Subject:   [Bug 225703] japanese/mailman seems to be affected by CVE-2018-5950 also
Message-ID:  <bug-225703-13@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D225703

            Bug ID: 225703
           Summary: japanese/mailman seems to be affected by CVE-2018-5950
                    also
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: Individual Port(s)
          Assignee: tota@FreeBSD.org
          Reporter: freebsd-bug-report-yf@yf.bsdclub.org
          Assignee: tota@FreeBSD.org
             Flags: maintainer-feedback?(tota@FreeBSD.org)

Created attachment 190359
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D190359&action=
=3Dedit
CVE-2018-5950 patch for Mailman 2.1.14+j7

Mailman/Cgi/options.py on Mailman 2.1.14+j7 seems to have the vulnerability
same as upstream GNU Mailman before 2.1.26, CVE-2018-5950.

This is a patch from https://bugs.launchpad.net/mailman/+bug/1747209 (re-cr=
eate
for 2.1.14+j7, applied diff after that patch)

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-225703-13>