Ubuntu Security Notice 5121-2 - USN-5009-1 fixed vulnerabilities in Mailman. This update provides the corresponding updates for Ubuntu 20.04 LTS. It was discovered that Mailman allows arbitrary content injection. An attacker could use this to inject malicious content. It was discovered that Mailman improperly sanitize the MIME content. An attacker could obtain sensitive information by sending a special type of attachment.
3e1981a243b75d6cb9eb3b871c11554d027734dba3c108e22426fdec3c295c82
Debian Linux Security Advisory 4991-1 - Several vulnerabilities were discovered in mailman, a web-based mailing list manager, which could result in arbitrary content injection via the options and private archive login pages, and CSRF attacks or privilege escalation via the user options page.
954d8b9822764173dd884577e87a44ad7f9a8af40f4ebc025e3d191931336710
Red Hat Security Advisory 2021-1751-01 - Mailman is a program used to help manage e-mail discussion lists.
8d4246ac1b4f1b751a04210b5c5b00972cf9f3d903e3a4131010123fd02459c0
Ubuntu Security Notice 4354-1 - It was discovered that Mailman incorrectly handled certain inputs. An attacker could possibly use this issue to inject arbitrary content in the login page.
96eb32f6eeb5ee8e842942305c87b7cc075ea5cd01f0471a1da82d361474c889