Mailman 3 August 2016 - Mailman-coders

[Bug 775294] [NEW] Set lifetime for input forms
by Tokio Kikuchi Sept. 5, 2016

Sept. 5, 2016

*** This bug is a security vulnerability *** Private security bug reported: We may have to set lifetime for input forms because of recent activities on cross-site request forgery (CSRF). The form lifetime is successfully deployed in frameworks like web.py or plone etc. Proposed branch lp:~tkikuchi/mailman/form-lifetime implement lifetime in admin, admindb, options and edithtml interfaces. Other forms like create and rmlist have confirmation by password thus are safe regarding CSRF. The form generation time is set by a hidden parameter whose value is calculated following the mailman cookie algorithm. The default lifetime is set 1 hour in Default.py thus configurable by a site administrator. If a password is set in request, authorization cookie is discarded so the password authentication is forced. Wget tricks to manage list in FAQ can be used as they are now. ** Affects: mailman Importance: Undecided Status: New ** Branch linked: lp:~tkikuchi/mailman/form-lifetime -- You received this bug notification because you are a member of Mailman Coders, which is a direct subscriber. https://bugs.launchpad.net/bugs/775294 Title: Set lifetime for input forms

2 5

[Merge] lp:~futatuki/mailman/2.1-ja-translation into lp:mailman/2.1
by Yasuhito FUTATSUKI＠POEM Aug. 28, 2016

Aug. 28, 2016

Yasuhito FUTATSUKI at POEM has proposed merging lp:~futatuki/mailman/2.1-ja-translation into lp:mailman/2.1. Requested reviews: Mailman Coders (mailman-coders) For more details, see: https://code.launchpad.net/~futatuki/mailman/2.1-ja-translation/+merge/3041… * Translate untranslated Japanese messages * Fix Japanese word for moderator to distinguish from list administrator -- Your team Mailman Coders is requested to review the proposed merge of lp:~futatuki/mailman/2.1-ja-translation into lp:mailman/2.1.

2 1

[Bug 1583387] [NEW] Allow list admin to edit more templates.
by Mark Sapiro Aug. 27, 2016

Aug. 27, 2016

Public bug reported: A number of .html and .txt templates can be edited via the web admin GUI to create/update list specific versions of them. Any templates can be edited to make list specific, domain specific or sitewide edited versions, but this requires a level of access that many list admins don't have. The templates that can currently be edited via the web admin GUI are: ('listinfo.html', _('General list information page')), ('subscribe.html', _('Subscribe results page')), ('options.html', _('User specific options page')), ('subscribeack.txt', _('Welcome email text file')), ('masthead.txt', _('Digest masthead')), The following would be useful additions to that list: ('postheld.txt', _('User notice of held post')), ('approve.txt', _('User notice of held subscription')), ('refuse.txt', _('Notice of post refused by moderator')), ('invite.txt', _('Invitation to join list')), ('verify.txt', _('Request to confirm subscription')), ('unsub.txt', _('Request to confirm unsubscription')), ('nomoretoday.txt', _('User notice of autoresponse limit')), ('postack.txt', _('User post acknowledgement')), ('disabled.txt', _('Subscription disabled by bounce warning')), ('admlogin.html', _('Admin/moderator login page')), ('private.html', _('Private archive login page')), ('userpass.txt', _('On demand password reminder')), ** Affects: mailman Importance: Wishlist Assignee: Mark Sapiro (msapiro) Status: In Progress -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1583387 Title: Allow list admin to edit more templates. To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1583387/+subscriptions

2 3

[Bug 1572330] [NEW] RFE, make nonmember_rejection_notice if any the default admindb reject reason for a nonmember post
by Mark Sapiro Aug. 27, 2016

Aug. 27, 2016

Public bug reported: The list attribute nonmember_rejection_notice is given as the reason for an automatic rejection because the poster is in reject_these_nonmembers or generic_nonmember_action is Reject. It would be nice if this were also the default reject reason for a held nonmember post. ** Affects: mailman Importance: Wishlist Assignee: Mark Sapiro (msapiro) Status: In Progress -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1572330 Title: RFE, make nonmember_rejection_notice if any the default admindb reject reason for a nonmember post To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1572330/+subscriptions

2 3

[Bug 1582532] [NEW] bin/list_lists and both the listinfo and admin CGI overviews can throw MMUnknownListError
by Mark Sapiro Aug. 27, 2016

Aug. 27, 2016

Public bug reported: bin/list_lists and the listinfo and the admin CGIs call Utils.list_names() to get the names of all lists. They then instantiate each list to determine if it meets the conditions for listing. It is possible, particularly in installations with a large number of lists, that a list can be deleted after its name is retrieved and before it is instantiated. Instantiation then throws MMUnknownListError. This should be caught in a try: and the list ignored. ** Affects: mailman Importance: Low Assignee: Mark Sapiro (msapiro) Status: In Progress -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1582532 Title: bin/list_lists and both the listinfo and admin CGI overviews can throw MMUnknownListError To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1582532/+subscriptions

2 3

[Bug 1578450] [NEW] Mailman should allow setting DMARC_ORGANIZATIONAL_DOMAIN_DATA_URL to None or a null string.
by Mark Sapiro Aug. 27, 2016

Aug. 27, 2016

Public bug reported: If for some reason a site doesn't want to or can't access a DMARC_ORGANIZATIONAL_DOMAIN_DATA_URL, maybe the site is IPv6 only and there is no IPv6 source of the data, the site should be able to set DMARC_ORGANIZATIONAL_DOMAIN_DATA_URL to None or a null string and avoid the attempted retrieval, the failure of which causes other issues. ** Affects: mailman Importance: Low Assignee: Mark Sapiro (msapiro) Status: In Progress -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1578450 Title: Mailman should allow setting DMARC_ORGANIZATIONAL_DOMAIN_DATA_URL to None or a null string. To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1578450/+subscriptions

2 3

[Bug 1573074] [NEW] Provide a better way to enable smtplib debugging.
by Mark Sapiro Aug. 27, 2016

Aug. 27, 2016

Public bug reported: To debug low level smtplib failures, one can modify SMTPDirect.py to enable debugging. There should be an mm_cfg.py setting for this. ** Affects: mailman Importance: Low Assignee: Mark Sapiro (msapiro) Status: In Progress -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1573074 Title: Provide a better way to enable smtplib debugging. To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1573074/+subscriptions

2 3

[Bug 558281] Re: SMTP authentication and TLS support
by Mark Sapiro Aug. 27, 2016

Aug. 27, 2016

** Changed in: mailman Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/558281 Title: SMTP authentication and TLS support To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/558281/+subscriptions

1 0

[Bug 558155] Re: i18n: Header Filter Rules (& fix) - rules don't match if header characters aren't representable in cset of list's preferred language.
by Mark Sapiro Aug. 27, 2016

Aug. 27, 2016

** Changed in: mailman Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/558155 Title: i18n: Header Filter Rules (& fix) - rules don't match if header characters aren't representable in cset of list's preferred language. To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/558155/+subscriptions

1 0

[Bug 1586505] [NEW] Scrubber links in archives are in the poster's language rather than the list's preferred_language.
by Mark Sapiro Aug. 27, 2016

Aug. 27, 2016

Public bug reported: The Runner _onefile method inherited by ArchRunner sets the i18n language to that of the message's sender. This is the language context in effect when Scrubber is called to scrub the message to plain text. It should be set to the list's preferred language. ** Affects: mailman Importance: Medium Assignee: Mark Sapiro (msapiro) Status: In Progress ** Description changed: The Runner _onefile method inherited by ArchRunner sets the i18n - language to that of the messages sender. This is the language context in - effect when Scrubber is called to scrub the message to plain text. It + language to that of the message's sender. This is the language context + in effect when Scrubber is called to scrub the message to plain text. It should be set to the list's preferred language. -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1586505 Title: Scrubber links in archives are in the poster's language rather than the list's preferred_language. To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1586505/+subscriptions

2 3