There is a new mailman package in sitting in FC1, it should be moved to testing. It resolves in FC1 the following security errata RHSA-2004:020-02. -- John Dennis <jdennis at redhat.com>