[Bug 225703] japanese/mailman seems to be affected by CVE-2018-5950 also

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=225703

            Bug ID: 225703
           Summary: japanese/mailman seems to be affected by CVE-2018-5950
                    also
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: Individual Port(s)
          Assignee: tota at FreeBSD.org
          Reporter: freebsd-bug-report-yf at yf.bsdclub.org
          Assignee: tota at FreeBSD.org
             Flags: maintainer-feedback?(tota at FreeBSD.org)

Created attachment 190359
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=190359&action=edit
CVE-2018-5950 patch for Mailman 2.1.14+j7

Mailman/Cgi/options.py on Mailman 2.1.14+j7 seems to have the vulnerability
same as upstream GNU Mailman before 2.1.26, CVE-2018-5950.

This is a patch from https://bugs.launchpad.net/mailman/+bug/1747209 (re-create
for 2.1.14+j7, applied diff after that patch)

-- 
You are receiving this mail because:
You are the assignee for the bug.