Mailman-coders June 2022

mailman-coders@python.org

1 discussions

[Bug 1968443] [NEW] Membership information leak through options page
by Evangelos Foutras 09 Jul '22

09 Jul '22

Public bug reported: Using mailman 2.1.39 with the recent fixes for bug 1961762 applied on top. [1] [2] A user has noticed the following behavior on our list with private_roster = 1 (List members): [3] ========================== When using the Remind button: "If you are a list member, your password has been emailed to you." is only displayed when the entered email is on the list. The same thing happens with the Unsubscribe button, "If you are a list member, a confirmation email has been sent." is only displayed when the entered email is on the list. ========================== [1] https://bazaar.launchpad.net/~mailman-coders/mailman/2.1/revision/1887 [2] https://bazaar.launchpad.net/~mailman-coders/mailman/2.1/revision/1888 [3] https://bugs.archlinux.org/task/74424 ** Affects: mailman Importance: Undecided Status: New -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1968443 Title: Membership information leak through options page To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1968443/+subscriptions

3 3

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

Mailman-coders June 2022