What is RHSA-2021:1751?

RHSA-2021:1751 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: mailman:2.1 security update

Which CVE IDs does RHSA-2021:1751 cover?

RHSA-2021:1751 covers the following CVE IDs: CVE-2020-12108, CVE-2020-15011. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2021:1751?

RHSA-2021:1751 has a CVSS v3 base score of 5.5, published by Red Hat Product Security.

Which products are affected by RHSA-2021:1751?

RHSA-2021:1751 affects 14 products, including: Red Hat Enterprise Linux AppStream (v. 8); mailman-3:2.1.29-11.module+el8.4.0+8277+5e2c6e6e.aarch64 (mailman:2.1) as a component of Red Hat Enterprise Linux AppStream (v. 8); mailman-3:2.1.29-11.module+el8.4.0+8277+5e2c6e6e.ppc64le (mailman:2.1) as a component of Red Hat Enterprise Linux AppStream (v. 8); mailman-3:2.1.29-11.module+el8.4.0+8277+5e2c6e6e.s390x (mailman:2.1) as a component of Red Hat Enterprise Linux AppStream (v. 8); mailman-3:2.1.29-11.module+el8.4.0+8277+5e2c6e6e.src (mailman:2.1) as a component of Red Hat Enterprise Linux AppStream (v. 8); and others — see the full list on the advisory page.

RHSA-2021:1751: Red Hat Security Advisory: m…

🔗 CVE IDs covered (2)

CVE-2020-12108 →CVE-2020-15011 →

📋 Description

CVE-2020-12108 — mailman: arbitrary content injection via the options login page CVE-2020-15011 — mailman: arbitrary content injection via the private archive login page

🎯 Affected products14

Red Hat Enterprise Linux AppStream (v. 8)
mailman-3:2.1.29-11.module+el8.4.0+8277+5e2c6e6e.aarch64 (mailman:2.1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
mailman-3:2.1.29-11.module+el8.4.0+8277+5e2c6e6e.ppc64le (mailman:2.1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
mailman-3:2.1.29-11.module+el8.4.0+8277+5e2c6e6e.s390x (mailman:2.1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
mailman-3:2.1.29-11.module+el8.4.0+8277+5e2c6e6e.src (mailman:2.1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
mailman-3:2.1.29-11.module+el8.4.0+8277+5e2c6e6e.x86_64 (mailman:2.1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
mailman-debuginfo-3:2.1.29-11.module+el8.4.0+8277+5e2c6e6e.aarch64 (mailman:2.1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
mailman-debuginfo-3:2.1.29-11.module+el8.4.0+8277+5e2c6e6e.ppc64le (mailman:2.1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
mailman-debuginfo-3:2.1.29-11.module+el8.4.0+8277+5e2c6e6e.s390x (mailman:2.1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
mailman-debuginfo-3:2.1.29-11.module+el8.4.0+8277+5e2c6e6e.x86_64 (mailman:2.1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
mailman-debugsource-3:2.1.29-11.module+el8.4.0+8277+5e2c6e6e.aarch64 (mailman:2.1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
mailman-debugsource-3:2.1.29-11.module+el8.4.0+8277+5e2c6e6e.ppc64le (mailman:2.1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
mailman-debugsource-3:2.1.29-11.module+el8.4.0+8277+5e2c6e6e.s390x (mailman:2.1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
mailman-debugsource-3:2.1.29-11.module+el8.4.0+8277+5e2c6e6e.x86_64 (mailman:2.1) as a component of Red Hat Enterprise Linux AppStream (v. 8)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 CVE IDs covered (2)

📋 Description

🎯 Affected products14

✅ Remediation

🔗 References (6)