[Pkg-mailman-hackers] Bug#903674: mailman: CVE-2018-13796: (yet) unspecified vulnerability in mailman

[Salvatore Bonaccorso]

Source: mailman
Version: 1:2.1.23-1
Severity: important
Tags: security upstream

Hi,

The following vulnerability was published for mailman, details are not
yet published. The 2.1.28 release along with details will be on 23th
July 2018.

CVE-2018-13796[0]:
| Unspecified vulnerability in Mailman before 2.1.28 has unknown impact
| and attack vectors.

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2018-13796
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13796
[1] https://mail.python.org/pipermail/mailman-users/2018-July/083536.html
[2] https://mail.python.org/pipermail/mailman-users/2018-July/083537.html

Regards,
Salvatore