Mailman 3 May 2011 - Mailman-coders

[Bug 266263] Re: NNTP gatewaying trashes Message-IDs
by Joshua Cranmer 30 May '11

30 May '11

** Tags added: mailman3 -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/266263 Title: NNTP gatewaying trashes Message-IDs

1 0

[Bug 558123] Re: fix for [815297] signatures break
by Mark Sapiro 27 May '11

27 May '11

*** This bug is a duplicate of bug 265967 *** https://bugs.launchpad.net/bugs/265967 ** This bug has been marked a duplicate of bug 265967 Breaking signatures in message/rfc822 attachement! -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/558123 Title: fix for [815297] signatures break

1 0

[Bug 266821] Re: privacy hole in password reminder
by Amedee Van Gasse 23 May '11

23 May '11

I am sorry, this appears to be the general Launchpad page for Mailman, not just Ubuntu's version of it. I got confused because a lot of Ubuntu happens on Launchpad, but there are other projects hosted here too. -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/266821 Title: privacy hole in password reminder

1 0

[Bug 266821] Re: privacy hole in password reminder
by Amedee Van Gasse 23 May '11

23 May '11

The problem isn't plain text emailed passwords. The *real* problem is storing plain text passwords on the server that runs mailman. If that server gets compromised, the attacker has a list of email addresses and passwords. I guess you all heard about the recent problems with Sony's Playstation Network (PSN). One of the biggest problems there was that Sony stored plain text passwords. If you Google for "plain text passwords", you will see thousands of articles that advise against it, and none that recommend it. Storing plain text passwords in a database is a security antipattern. Passwords should always be one-way encrypted (hashed), and preferably well salted. This is a website that shames Plain Text Offenders: http://plaintextoffenders.com/ Mailman should be added to that website, and Ubuntu should add a very clear security warning to Mailman. Other (more secure) mailing list software should be advised, or a more secure (patched) version (MM 2.1, 3.0, whatever) should be used. Canonical/Ubuntu itself currently uses Mailman for it's community mailing lists (ubuntu-users etc...). This should be seriously evaluated. -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/266821 Title: privacy hole in password reminder

1 0

[Bug 786932] [NEW] Feature request: Option to trust list owners' HTML
by Cedders 23 May '11

23 May '11

Public bug reported: List owners may want to edit the list information or subscribe pages to link to CSS or JS on a main site, to use a standard style or do form validation, for example. The checks against cross-site scripting prevent this, and the text suggesting shell access may be inappropriate. The site admin may trust the list owners, but it may not be desirable for privacy or firewall reasons to give them SSH access to the Mailman server. (previously suggested on bug 266273) It would therefore be very useful to have a global option to turn off the XSS checking as needed. A simple patch is attached to provide this option. I didn't find existing translations for the relevant error messages (in French or Spanish at least). ** Affects: mailman Importance: Undecided Status: New -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/786932 Title: Feature request: Option to trust list owners' HTML

1 1

[Bug 266841] Re: export member list in web interface
by Mark Sapiro 16 May '11

16 May '11

*** This bug is a duplicate of bug 266867 *** https://bugs.launchpad.net/bugs/266867 ** This bug has been marked a duplicate of bug 266867 Membership List for Web Interface * You can subscribe to bug 266867 by following this link: https://bugs.launchpad.net/mailman/+bug/266867/+subscribe -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/266841 Title: export member list in web interface

1 0

[Bug 266727] Re: Export list members
by David Sterratt 16 May '11

16 May '11

*** This bug is a duplicate of bug 266867 *** https://bugs.launchpad.net/bugs/266867 ** This bug has been marked a duplicate of bug 266867 Membership List for Web Interface * You can subscribe to bug 266867 by following this link: https://bugs.launchpad.net/mailman/+bug/266867/+subscribe -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/266727 Title: Export list members

1 0

[Bug 781487] [NEW] Fails to process Vietnamese Characters in email links
by arky 12 May '11

12 May '11

Public bug reported: Mailman (2.1.9) fails to process emails with Vietnamese charasets. Testcase: 1) http://ngocentre.org.vn/mailman/listinfo/wildtrade 2) Copy Tú(a)gmail.com in Unsubscribe and edit Options and press submit. 3) You will get the following error Error: Illegal Email Address: Tú(a)gmail.com If the email address have words such then mailman spews out 'We've hit a bug' page. Sample Vietname names for testing purpose: Trần Đỗ Huyền Vũ Phương Tú ** Affects: mailman Importance: Undecided Status: New -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/781487 Title: Fails to process Vietnamese Characters in email links

2 1

Re: [Question #157154]: How to disable a list temporarily ?
by Mark Sapiro 12 May '11

12 May '11

Question #157154 on mailman in Ubuntu changed: https://answers.launchpad.net/ubuntu/+source/mailman/+question/157154 Status: Open => Answered Mark Sapiro proposed the following answer: Just 'chmod 000 lists/LISTNAME', and when you want to re-enable the list, 'chmod 2775 lists/LISTNAME'. If the list has public archives and you want to disable access to them, 'rm archives/public/LISTNAME*'. When you re-enable the list, these symlinks will be automatically recreated when you access the list. Depending on your MTA, you may want to remove the list's aliases. -- You received this question notification because you are a member of Mailman Coders, which is an answer contact for mailman in Ubuntu.

1 0

[Question #157154]: How to disable a list temporarily ?
by arky 12 May '11

12 May '11

New question #157154 on mailman in Ubuntu: https://answers.launchpad.net/ubuntu/+source/mailman/+question/157154 How do I disable a list temporarily. I don't want to delete it but disallow access to it (via email or HTTP) -- You received this question notification because you are a member of Mailman Coders, which is an answer contact for mailman in Ubuntu.

1 0