Patches item #1419490, was opened at 2006-01-31 01:21 Message generated for change (Comment added) made by tkikuchi You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=300103&aid=1419490&group_id=103 Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: mail delivery Group: Mailman 2.1 Status: Open Resolution: None Priority: 5 Submitted By: Tokio Kikuchi (tkikuchi) Assigned to: Tokio Kikuchi (tkikuchi) Summary: email.Utils.parsedate can return bogus date Initial Comment: While the CVE entry of CVE-2005-4153 (see http://www.securityfocus.com/bid/16248/info) is not vulnerable for mailman-2.1.7 and newer, we should fix the date parsing bug in email package. In the meantime of the package renewal, this patch may be used to workaround the bug. ----------------------------------------------------------------------
Comment By: Tokio Kikuchi (tkikuchi) Date: 2006-02-02 02:31
Message: Logged In: YES user_id=67709 Here is my revised patch. It looks like time.strftime() has stricter value check. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=300103&aid=1419490&group_id=103