>> I plan to release Mailman 2.1.26 along with a patch for older releases >> to fix this issue on Feb 4, 2018. At that time, full details of the >> vulnerability will be public.
I've reserved time on Sunday to in any case to sid when the fix is released, and depending on the details/severity look into a security upload. Thijs
