[Git][security-tracker-team/security-tracker][master] CVE-2021-43331,CVE-2021-43332/mailman: vcs patch refs

[Sylvain Beucler (@beuc)]

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f66d8f80 by Sylvain Beucler at 2022-06-08T20:36:17+02:00
CVE-2021-43331,CVE-2021-43332/mailman: vcs patch refs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -41523,12 +41523,15 @@ CVE-2021-43332 (In GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb
 	[stretch] - mailman <no-dsa> (Minor issue)
 	NOTE: https://mail.python.org/archives/list/mailman-announce@python.org/message/I2X7PSFXIEPLM3UMKZMGOEO3UFYETGRL/
 	NOTE: https://bugs.launchpad.net/mailman/+bug/1949403
+	NOTE: https://bazaar.launchpad.net/~mailman-coders/mailman/2.1/revision/1876 (2.1.36)
+	NOTE: Regression fix: https://bazaar.launchpad.net/~mailman-coders/mailman/2.1/revision/1878 (2.1.37)
 CVE-2021-43331 (In GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user ...)
 	- mailman <removed> (bug #1000367)
 	[buster] - mailman 1:2.1.29-1+deb10u3
 	[stretch] - mailman <no-dsa> (Minor issue)
 	NOTE: https://mail.python.org/archives/list/mailman-announce@python.org/message/I2X7PSFXIEPLM3UMKZMGOEO3UFYETGRL/
 	NOTE: https://bugs.launchpad.net/mailman/+bug/1949401
+	NOTE: https://bazaar.launchpad.net/~mailman-coders/mailman/2.1/revision/1875 (2.1.36)
 CVE-2021-43330
 	RESERVED
 CVE-2021-43329



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f66d8f8063316de537e00a138e5eef3b65ecce07

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f66d8f8063316de537e00a138e5eef3b65ecce07
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220608/cc5059d7/attachment.htm>