Advisories MDVSA-2010:191: mailman

[paul 9]

Multiple vulnerabilities has been found and corrected in mailman:

 

Multiple cross-site scripting (XSS) vulnerabilities in GNU Mailman

before 2.1.14rc1 allow remote authenticated users to inject arbitrary

web script or HTML via vectors involving (1) the list information

field or (2) the list description field (CVE-2010-3089).

 

Packages for 2008.0 and 2009.0 are provided as of the Extended

Maintenance Program. Please visit this link to learn more:

http://store.mandriva.com/product_info.php?cPath=149&products_id=490

 

The updated packages have been patched to correct these issues.