USN-2558-1: Mailman vulnerability
7 April 2015
Mailman could be made to run programs if it processed a specially crafted list name.
Releases
Packages
- mailman - Powerful, web-based mailing list manager
Details
It was discovered that Mailman incorrectly handled special characters
in list names. A local attacker could use this issue to perform a path
traversal attack and execute arbitrary code as the Mailman user.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 14.10
Ubuntu 14.04
Ubuntu 12.04
In general, a standard system update will make all the necessary changes.