HCE2-SA-2023-0093
An update for mailman is now available for HCE 2.0
Important
HCE 2.0
Security Fix(es):
A timing attack was found in the mailman administrative REST API due to the usage of a simple string comparison function when checking the password. This flaw allows an attacker who can talk to the REST API to discover the admin password due to timing leaks.
(CVE-2021-34337)
HCE 2.0
mailman-3.3.2-5.hce2.noarch.rpm