CVEs related to bugs in GNU Mailman