Mailman 3 December 2014 - Mailman-coders

[Bug 1388614] [NEW] archive problem when an email got not subject
by Bersam Karbasion Jan. 30, 2015

Jan. 30, 2015

Public bug reported: Hey everybody, In one mailing list that use Mailman software, somebody send an empty email subject to mailing list. and this conversation completed without any problem, but seems links in archive pages got problem because that dude didn't use a subject for his email. you can see it here: http://lists.isfahanlug.org/pipermail/supervisors/2014-November/thread.html As i can see they use Mailman2 "version 2.1.15" on debian server. ** Affects: mailman Importance: Undecided Status: New ** Tags: archive mailman2 subject -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1388614 Title: archive problem when an email got not subject To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1388614/+subscriptions

3 7

[Bug 1372199] [NEW] in emails, unsubscribe links should not react to HTTP HEAD requests
by Stephane Martin Jan. 30, 2015

Jan. 30, 2015

Public bug reported: Welcome emails from mailman include a URL to perform unsubscribing. ex: https://lists.schneier.com/cgi-bin/mailman/options/crypto- gram/XXX%40XXX?login-unsub=Unsubscribe If you perform a HTTP HEAD request on that URL, it triggers the unsubscribe process, and an unsubscribe confirmation email is sent to the user. This shouldnt happen: HTTP HEAD method is not HTTP GET. Its supposed to only return headers, not to trigger an action on web server. I have anti-malware software that checks every HTTP link in received emails. When such a link is found by antimalware, it does a HTTP HEAD request on the URL to check the mimetype (if mimetype show a windows executable, an alert is sent). But this HEAD request in understood by mailman as a *real* unsubscribe request, so mailman sends a confirmation to the actual user (who is lost). (Strictly speaking, the behaviour is wrong even with a HTTP GET request: GET should not trigger a webserver action too...) ** Affects: mailman Importance: Undecided Status: New -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1372199 Title: in emails, unsubscribe links should not react to HTTP HEAD requests To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1372199/+subscriptions

3 5

[Bug 1363278] [NEW] REMOVE_DKIM_HEADERS value 2 not reacted to
by Ian Johannesen Jan. 30, 2015

Jan. 30, 2015

Public bug reported: When using the value 2 for REMOVE_DKIM_HEADERS in mm_cfg - it does not respond to it at all. After doing through the code, I've noticed that quite simply someone forgot to add this to the code itself. I've attached a patch for this, as I needed to remove ALL DKIM headers for all my lists. ** Affects: mailman Importance: Undecided Status: New ** Patch added: "mailman-2.1.18-1.allowdkimalwaysremove.patch" https://bugs.launchpad.net/bugs/1363278/+attachment/4190499/+files/mailman-… -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1363278 Title: REMOVE_DKIM_HEADERS value 2 not reacted to To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1363278/+subscriptions

3 4

[Bug 1327404] [NEW] Mailman's log files are world readable
by Mark Sapiro Jan. 30, 2015

Jan. 30, 2015

Public bug reported: Mailman creates log files with permissions -rw-rw-r--. This allows possibly untrusted local users to read those logs and possibly find sensitive information therein. The same is true of lists/LISTNAME/request.pck files. ** Affects: mailman Importance: Medium Assignee: Mark Sapiro (msapiro) Status: In Progress -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1327404 Title: Mailman's log files are world readable To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1327404/+subscriptions

2 4

[Bug 1334450] [NEW] If a message is held for header_filter_rules and subsequently approved, dmarc_moderation_action is bypassed.
by Mark Sapiro Jan. 30, 2015

Jan. 30, 2015

Public bug reported: Messages which are pre-approved with an Approved: header or held by a pipeline handler earlier than Moderate and accepted by a moderator will bypass the dmarc_moderation_action test and applicable action. Clearly Munge From or Wrap Message actions should be done in this case. What to do in a case of a dmarc_moderation_action of Reject or Discard is not so clear, but either they should be honored or at least the Wrap Message action should be applied. Given that a moderator likely approved the message based on content without considering DMARC, probably Reject and Discard actions should be honored. ** Affects: mailman Importance: High Assignee: Mark Sapiro (msapiro) Status: In Progress -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1334450 Title: If a message is held for header_filter_rules and subsequently approved, dmarc_moderation_action is bypassed. To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1334450/+subscriptions

3 5

[Bug 1324541] [NEW] If the dnspython package is not available and dmarc_moderation_action is not accept, nothing is logged.
by Mark Sapiro Jan. 30, 2015

Jan. 30, 2015

Public bug reported: dmarc_moderation_action other than accept relies on DNS lookups via the dnspython package to check DMARC policy of the From: domain, but if the package is not available, the check silently returns no DMARC policy. It should at least log the fact that the package isn't there. ** Affects: mailman Importance: High Assignee: Mark Sapiro (msapiro) Status: In Progress -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1324541 Title: If the dnspython package is not available and dmarc_moderation_action is not accept, nothing is logged. To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1324541/+subscriptions

2 3

[Merge] lp:~abompard/postorius/bug-1175967 into lp:postorius
by Aurélien Bompard Jan. 17, 2015

Jan. 17, 2015

Aurélien Bompard has proposed merging lp:~abompard/postorius/bug-1175967 into lp:postorius. Requested reviews: Mailman Coders (mailman-coders) For more details, see: https://code.launchpad.net/~abompard/postorius/bug-1175967/+merge/242710 Fix bug #1175967: owners is not part of a list's settings. -- Your team Mailman Coders is requested to review the proposed merge of lp:~abompard/postorius/bug-1175967 into lp:postorius.

2 1

[Merge] lp:~abompard/postorius/bug-1094829 into lp:postorius
by Aurélien Bompard Jan. 17, 2015

Jan. 17, 2015

Aurélien Bompard has proposed merging lp:~abompard/postorius/bug-1094829 into lp:postorius. Requested reviews: Mailman Coders (mailman-coders) For more details, see: https://code.launchpad.net/~abompard/postorius/bug-1094829/+merge/242705 Fix for bug #1094829. Postorius re-uses Django's login view, which also shows error messages when the credentials are invalid. The previous login template is passed to this view, so we can keep the Mozilla Persona button. -- Your team Mailman Coders is requested to review the proposed merge of lp:~abompard/postorius/bug-1094829 into lp:postorius.

3 2

[Merge] lp:~rajeevs1992/postorius/postorius into lp:postorius
by Rajeev S Jan. 10, 2015

Jan. 10, 2015

Rajeev S has proposed merging lp:~rajeevs1992/postorius/postorius into lp:postorius. Requested reviews: Mailman Coders (mailman-coders) For more details, see: https://code.launchpad.net/~rajeevs1992/postorius/postorius/+merge/207826 Added a file upload feature to add Mass subscriptions.Also changed email validator to django builtin validator.(DRY) -- https://code.launchpad.net/~rajeevs1992/postorius/postorius/+merge/207826 Your team Mailman Coders is requested to review the proposed merge of lp:~rajeevs1992/postorius/postorius into lp:postorius.

2 2

[Merge] lp:~barry/mailman/py3 into lp:mailman
by Barry Warsaw Jan. 6, 2015

Jan. 6, 2015

Barry Warsaw has proposed merging lp:~barry/mailman/py3 into lp:mailman. Requested reviews: Mailman Coders (mailman-coders) For more details, see: https://code.launchpad.net/~barry/mailman/py3/+merge/245313 Ports Mailman 3 core to Python 3.4 -- Your team Mailman Coders is requested to review the proposed merge of lp:~barry/mailman/py3 into lp:mailman.

2 1