Gentoo Linux Security Advisory GLSA 200609-12 - Mailman fails to properly handle standards-breaking RFC 2231 formatted headers. Furthermore, Moritz Naumann discovered several XSS vulnerabilities and a log file injection. Versions less than 2.1.9_rc1 are affected.
9d4ad5cc18161edea49563eb06d62383b7b3a0d3c92b0e2bb56b1b5cbe4d58cb