Mailman 3 March 2017 - Mailman-coders

[Bug 757062] [NEW] Content filtering can remove the headers from a message/rfc822 part.
by Mark Sapiro June 9, 2017

June 9, 2017

Public bug reported: If Content filtering accepts both message/rfc822 and multipart/alternative MIME parts, and a message/rfc822 part contains a message whose content type is multipart/alternative and collapse_alternatives is Yes, the headers of the message in the message/rfc822 part will be lost. ** Affects: mailman Importance: Low Assignee: Mark Sapiro (msapiro) Status: In Progress ** Tags: mailman3 -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/757062 Title: Content filtering can remove the headers from a message/rfc822 part.

3 12

[Bug 1673307] [NEW] msg_header and/or msg_footer can be added as a separate MIME part even if only whitespace.
by Mark Sapiro June 2, 2017

June 2, 2017

Public bug reported: If a content filtered message is other than single part text/plain, msg_header and msg_footer are added as separate MIME parts if they are non-empty even if they consist only of white space. msg_header and msg_footer consisting of only white space should be treated as empty and not added. ** Affects: mailman Importance: Low Assignee: Mark Sapiro (msapiro) Status: New -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1673307 Title: msg_header and/or msg_footer can be added as a separate MIME part even if only whitespace. To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1673307/+subscriptions

2 4

[Bug 1670033] [NEW] Text blocks, e.g. msg_footer, might not end with linefeed
by Ralph Corderoy June 2, 2017

June 2, 2017

Public bug reported: Mailman 2.1.18-2+deb8u1. msg_footer was edited in the web GUI so the text area limited the cursor to the last line of text; it couldn't move down to a blank line below. The emails comes from Mailman that have this text base64 encoded, and the last line doesn't end with a linefeed, e.g. LS0gCnNpZzAKc2lnMQ==. Mailman should ensure a linefeed is added if one isn't already present, but on using the text block, not editing it so the blank line appears in the GUI as then the user will wonder why they can't remove it. ** Affects: mailman Importance: Undecided Status: New -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1670033 Title: Text blocks, e.g. msg_footer, might not end with linefeed To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1670033/+subscriptions

3 5

[Bug 1667215] [NEW] Uncaught TypeError in subscribe CGI with multiple digest flags in post/query data
by Mark Sapiro June 2, 2017

June 2, 2017

Public bug reported: If a malicious user, bot or whatever POSTs or GETs with query data to the subscribe CGI and the data contains multiple 'digest=' fragments, the resultant digest data seen by the subscribe CGI is a list rather than a string. The CGI calls int() on this which throws TypeError. The int() call is already in a try: that catches ValueError. It needs to catch TypeError too. ** Affects: mailman Importance: Low Assignee: Mark Sapiro (msapiro) Status: In Progress -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1667215 Title: Uncaught TypeError in subscribe CGI with multiple digest flags in post/query data To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1667215/+subscriptions

2 3

[Bug 1664729] [NEW] Processing a probe bounce from a deleted member throws NotAMemberError
by Mark Sapiro June 2, 2017

June 2, 2017

Public bug reported: In processing a probe bounce, BounceRunner attempts to get the bounce_info for the user. The situation where the probe is delayed and the bounce_info is gone was covered in https://bugs.launchpad.net/mailman/+bug/1482940 but if the user has been removed, getBounceInfo throws NotAMemberError which should be caught and handled appropriately. ** Affects: mailman Importance: Low Assignee: Mark Sapiro (msapiro) Status: In Progress -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1664729 Title: Processing a probe bounce from a deleted member throws NotAMemberError To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1664729/+subscriptions

2 3

[Bug 1661810] [NEW] Certain Malformed list names throw TypeError: in roster CGI
by Mark Sapiro June 2, 2017

June 2, 2017

Public bug reported: We've seen attacks visiting URLs such as <http://example.com/mailman/roster/python- dev%2522%252dswffelqj%252d%2522>. The list name after unescaping is python-dev%22%2dswffelqj%2d%22 which websafes to the same thing. Ultimately, this calls error_page(_('No such list <em>%(safelistname)s</em>')) which in turn calls error_page_doc(doc, errmsg) with the translated error message. The problem is error_page_doc is defined as def error_page_doc(doc, errmsg, *args): even though it is never called with any additional args. It then tries to interpolate the (empty) args into the errmsg string which in this case contains a '%' an results in TypeError: not enough arguments for format string The solution, since error_page_doc is never called with extra arguments is to just drop the *args and the attempted interpolation. ** Affects: mailman Importance: Low Assignee: Mark Sapiro (msapiro) Status: In Progress -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1661810 Title: Certain Malformed list names throw TypeError: in roster CGI To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1661810/+subscriptions

2 3

[Bug 1647450] [NEW] bin/add_members causes NameError when DISABLE_COMMAND_LOCALE_CSET = yes
by Yasuhito FUTATSUKI＠POEM June 2, 2017

June 2, 2017

Public bug reported: On non ascii locale and DISABLE_COMMAND_LOCALE_CSET = yes, bin/add_members get NameError because of uninitialized variable Mailman.i18n._ctype_charset, which is used by Mailman.i18n.tolocale(). When DISABLE_COMMAND_LOCALE_CSET = yes, the function tolocale() is used by bin/add_members only, so this affect only bin/add_members script. ** Affects: mailman Importance: Undecided Status: New ** Patch added: "least fix patch" https://bugs.launchpad.net/bugs/1647450/+attachment/4787690/+files/i18n.py.… ** Branch linked: lp:mailman/2.1 -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1647450 Title: bin/add_members causes NameError when DISABLE_COMMAND_LOCALE_CSET = yes To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1647450/+subscriptions

2 2

[Bug 1644356] [NEW] UnicodeError when attempting to send digests
by Mark Sapiro June 2, 2017

June 2, 2017

Public bug reported: This may not occur in a normal installation, but on a test list I had an accumulated digest.mbox with non-ascii characters in some message subjects. I then changed the list's preferred_language from English to Japanese and during some subsequent testing, a digest was triggered. The creation of the digest would throw UnicodeError in attempting to create the MIME toc part and in attempting to set the plain (RFC 1133) digest payload. This may be due only to the change to a language with a different character set or it may be due to the fact that Mailman's character set for Japanese is euc-jp, but the email modules output characterset for euc-jp is iso-2022-jp. The exception thrown was due to unicodes not representable in iso-2022-jp. ** Affects: mailman Importance: Low Assignee: Mark Sapiro (msapiro) Status: Fix Committed -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1644356 Title: UnicodeError when attempting to send digests To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1644356/+subscriptions

2 4

[Bug 1637745] [NEW] DMARC moderation could throw NameError in logging.
by Mark Sapiro June 2, 2017

June 2, 2017

Public bug reported: There is a typo in the logging of an error condition that would result in a NameError and a shunted message if a domain being checked for DMARC moderation published multiple 'v=DMARC1;' txt records. ** Affects: mailman Importance: Low Assignee: Mark Sapiro (msapiro) Status: In Progress -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1637745 Title: DMARC moderation could throw NameError in logging. To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1637745/+subscriptions

2 3

[Bug 1620121] [NEW] The provided SYSV init script for mailman in missing LSB INIT INFO
by Mark Sapiro June 2, 2017

June 2, 2017

Public bug reported: This info is useful for systems (Debian/Ubuntu and maybe others) that use insserv or a similar process to determin boot sequence. ** Affects: mailman Importance: Low Assignee: Mark Sapiro (msapiro) Status: Fix Committed -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1620121 Title: The provided SYSV init script for mailman in missing LSB INIT INFO To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1620121/+subscriptions

2 4