[Mailman-Users] security heads up - path traversal with 2.1.5

[Brad Knowles]

At 11:19 AM -0800 2005-02-09, Ron Brogden wrote:

>  Hey folks.  I haven't see an official post here yet but as this has already
>  gone out on at least one full-disclosure list I thought it worth mentioning
>  since this will be an actively exploited 0 day:
>
>  http://lists.netsys.com/pipermail/full-disclosure/2005-February/031562.html

	Generally speaking, notices of security issues should be dealt 
with according to the instructions at 
<http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp>.

-- 
Brad Knowles, <brad at stop.mail-abuse.org>

"Those who would give up essential Liberty, to purchase a little
temporary Safety, deserve neither Liberty nor Safety."

     -- Benjamin Franklin (1706-1790), reply of the Pennsylvania
     Assembly to the Governor, November 11, 1755

   SAGE member since 1995.  See <http://www.sage.org/> for more info.