Mailman 3 May 2024 - Mailman-coders

[Bug 2047306] [NEW] Modify the calling domain of Google reCAPTCHA
by Gentry Deng 14 Nov '24

14 Nov '24

Public bug reported: Hello, I noticed that GNU Mailman uses Google reCAPTCHA for filtering bot traffic, unfortunately the default calling domain for Google reCAPTCHA is www.google.com. And www.google.com is inaccessible in some areas, such as the Chinese mainland. Google provides an alternative, they also provide reCAPTCHA access service at www.recaptcha.net. So can you modify the calling domain of Google reCAPTCHA to www.recaptcha.net? Google Developer Documentation: https://developers.google.com/recaptcha/docs/faq#can-i-use-recaptcha- globally Best regards, Gentry ** Affects: mailman Importance: Undecided Status: New -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/2047306 Title: Modify the calling domain of Google reCAPTCHA To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/2047306/+subscriptions

3 2

[Bug 2015416] [NEW] Membership information leak through options page.
by Mark Sapiro 11 Jul '24

11 Jul '24

*** This bug is a security vulnerability *** Private security bug reported: This is similar to but different from #1968443. The issue is on a list with private rosters an attempt to log in to the options page with an email address which is not a list member just returns the options login page with no error, but attempt to login with an email address which is a list member returns the page with a 401 status and an `Authentication failed.` error message. This could be used to fish for membership on a list with private rosters. ** Affects: mailman Importance: Undecided Status: New -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/2015416 Title: Membership information leak through options page. To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/2015416/+subscriptions

3 4

[Bug 2065620] [NEW] failed to access the "mass operation" tab
by Laporch 13 May '24

13 May '24

Public bug reported: There has been an update that translate the postorious list management in french. Since this update i can't have access to the tabs that follow: "mass operation", "subscription request" and "users". Do you have any solution or proposition that can help me resolve this problem. Thank you Rony ** Affects: mailman Importance: Undecided Status: New -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/2065620 Title: failed to access the "mass operation" tab To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/2065620/+subscriptions

2 1