Subject: Re: Mailman vulnerability
To: None <>
From: Steven M. Bellovin <>
List: current-users
Date: 12/10/2005 09:07:09
In message <>, "D'Arcy J.M. Cain" write
>I still get this when trying to install mailman:
>===> Checking for vulnerabilities in mailman-2.1.6nb1
>*** WARNING - 1542,denial-of-service vulnerability in mailman-2.1.6nb1
>- see for more information *** or
>define ALLOW_VULNERABLE_PACKAGES if this package is absolutely essential
>However, Manuel Bouyer supposedly fixed this:
>revision 1.27
>date: 2005/12/08 21:09:04;  author: bouyer;  state: Exp;  lines: +2 -1
>Apply patch (from debian via Kimmo Suominen) to address
> (denial of service).
>Is there something else that needs to be fixed?

I was poking around the Mailman site a few days ago, and did not see 
any official fix for it there.  We'd have to import the Debian fix
mentioned in the advisory.

		--Steven M. Bellovin,