DSA-674-1 mailman - cross-site scripting, directory traversal

Bulletin has no description...