[SECURITY] Fedora 28 Update: mailman-2.1.29-1.fc28
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-e071e178f8
2018-08-07 01:13:44.522326
--------------------------------------------------------------------------------
Name : mailman
Product : Fedora 28
Version : 2.1.29
Release : 1.fc28
URL : http://www.list.org/
Summary : Mailing list manager with built in Web access
Description :
Mailman is software to help manage email discussion lists, much like
Majordomo and Smartmail. Unlike most similar products, Mailman gives
each mailing list a webpage, and allows users to subscribe,
unsubscribe, etc. over the Web. Even the list manager can administer
his or her list entirely from the Web. Mailman also integrates most
things people want to do with mailing lists, including archiving, mail
<-> news gateways, and so on.
Documentation can be found in: /usr/share/doc/mailman
When the package has finished installing, you will need to perform some
additional installation steps, these are described in:
/usr/share/doc/mailman/INSTALL.REDHAT
--------------------------------------------------------------------------------
Update Information:
New version 2.1.29. Security fix for CVE-2018-13796
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 27 2018 Pavel Zhukov <pzhukov(a)redhat.com> - 3:2.1.29-1
- New version 2.1.29
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> -
3:2.1.27-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Mon Jun 25 2018 Pavel Zhukov <pzhukov(a)redhat.com> - 3:2.1.27-2
- Delete .in files with genertic shebang
* Mon Jun 25 2018 Pavel Zhukov <pzhukov(a)redhat.com> - 3:2.1.27-1
- New release 2.1.27 (#1594437)
* Tue Jun 19 2018 Pavel Zhukov <pzhukov(a)redhat.com> - 3:2.1.26-3
- Do not require initscripts
* Sat May 5 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 3:2.1.26-2
- Update Python macros to new packaging standards
(See https://fedoraproject.org/wiki/Changes/Avoid_usr_bin_python_in_RPM_Build)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1609090 - CVE-2018-13796 mailman: Mishandled URLs in Utils.py:GetPathPieces()
allows attackers to display arbitrary text on trusted sites
https://bugzilla.redhat.com/show_bug.cgi?id=1609090
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-e071e178f8' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------