There is a new version of the confirm package available, an add-on to SmartList which enables (un)subscriptions after confirmations.
The new version was necessary due to a bug in multigram which leads to a security weakness in confirm.
You are encouraged to upgrade. The new version (1.3.5) is available at
ftp://ftp.pure.ch/pub/smartlist/
Werner
smartlist@lists.rwth-aachen.de