I just noticed this one myself. Seems that the fix for CAN-2005-0202 included in the debian package forgot to define the variable called SLASH that is used in the rewritten true_path() function.
As a quick fix, edit /usr/lib/mailman/Mailman/Cgi/private.py and around line 42, just before the definition of the true_path() function, add: SLASH = '/' (this was part of the original 'fix' suggested by Barry Warsaw) Cheers, -- Matt
signature.asc
Description: Digital signature
