Comment 1 for bug 1632244

Revision history for this message
Joshua Powers (powersj) wrote :

Thank you for taking the time to report this bug and helping to make Ubuntu better.

It appears that this CVE was fixed in version 2.1.23-1 in Debian:
http://metadata.ftp-master.debian.org/changelogs//main/m/mailman/mailman_2.1.23-1_changelog

As such, an SRU with a backported fix will be required for the supported releases.