Comment
A flaw in Mailman 2.1.* allows a remote attacker to retrieve the mailman password of any subscriber by sending a carefully crafted email request to the mailman server.
Updated libxml2 packages that fix an overflow when parsing remote resources are now available.
This vulnerability could potentially be exploited by a local user to execute arbitrary code with root privileges.