Debian alert DLA-2204-1 (mailman)

From:
             
 
"Chris Lamb" <lamby@debian.org> 
To:
             
 
debian-lts-announce@lists.debian.org 
Subject:
             
 
[SECURITY] [DLA 2204-1] mailman security update 
Date:
             
 
Thu, 07 May 2020 12:47:19 +0100
Message-ID:
             
 
<96af0d8b-d4c6-4f61-862a-c2f58a30d954@sloti26t01>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Package        : mailman
Version        : 1:2.1.18-2+deb8u6
CVE ID         : CVE-2020-12108

It was discovered that there was an arbitrary content injection
vulnerability in the Mailman mailing list manager.

For Debian 8 "Jessie", this issue has been fixed in mailman version
1:2.1.18-2+deb8u6.

We recommend that you upgrade your mailman packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Regards,

- -- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

-----BEGIN PGP SIGNATURE-----
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=eVnA
-----END PGP SIGNATURE-----