Description
The attachment scrubber (Scrubber.py) in Mailman 2.1.5 and earlier, when using Python's library email module 2.5, allows remote attackers to cause a denial of service (mailing list delivery failure) via a multipart MIME message with a single part that has two blank lines between the first boundary and the end boundary.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.1 | mailman | 2.1.5-8sarge2 | DSA-1027-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | mailman | 3:2.1.5.1-34.rhel4.3 | RHSA-2006:0486 |
| RHEL 3 | mailman | 3:2.1.5.1-25.rhel3.5 | RHSA-2006:0486 |
Advisories 2
- RHSA-2006:0486 Red Hat Security Advisory: mailman security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1027-1 mailman - programming error Debian Security (DSA / DLA) · Mar 9, 2026
References
- 19522 third-party-advisory
- 20782 third-party-advisory
- oval:org.mitre.oval:def:9475 vdb-entry signature
- 17311 vdb-entry
- 20624 third-party-advisory
- DSA-1027 vendor-advisory
- RHSA-2006:0486 vendor-advisory
- SUSE-SR:2006:008 vendor-advisory
- MDKSA-2006:061 vendor-advisory
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=358892
- 1015851 vdb-entry
- 19545 third-party-advisory
- 19571 third-party-advisory
- USN-267-1 vendor-advisory
- 24367 vdb-entry