Re: Mailman vulnerability

[Michal Jaegermann <michal harddata com>]

On Thu, Oct 05, 2006 at 09:19:48AM -0300, Martin Marques wrote:
> I have a FC4 web server installed and got this mailman report:
> 
> http://www.securityfocus.com/bid/19831/discuss
> 
> Is it to worry?

Probably.  See also http://rhn.redhat.com/errata/RHSA-2006-0600.html

FC4 is using mailman-2.1.5-35 so fixes in sources used by
RHEL4, as specified by RHSA-2006-0600, will likely apply directly
or after minimal modifications.  You can produce your own
update before something general eventually will show up.
Add patches, edit specs and rebuild rpm.

  Michal