Patches item #1419490, was opened at 2006-01-30 20:21 Message generated for change (Comment added) made by bwarsaw You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=300103&aid=1419490&group_id=103 Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: mail delivery Group: Mailman 2.1

Status: Closed Resolution: Out of Date Priority: 5 Submitted By: Tokio Kikuchi (tkikuchi) Assigned to: Tokio Kikuchi (tkikuchi) Summary: email.Utils.parsedate can return bogus date

Initial Comment: While the CVE entry of CVE-2005-4153 (see http://www.securityfocus.com/bid/16248/info) is not vulnerable for mailman-2.1.7 and newer, we should fix the date parsing bug in email package. In the meantime of the package renewal, this patch may be used to workaround the bug. ----------------------------------------------------------------------

Comment By: Barry A. Warsaw (bwarsaw) Date: 2006-02-09 00:12

Message: Logged In: YES user_id=12800 With email 2.5.7 this will no longer be necessary. ---------------------------------------------------------------------- Comment By: Tokio Kikuchi (tkikuchi) Date: 2006-02-01 21:31 Message: Logged In: YES user_id=67709 Here is my revised patch. It looks like time.strftime() has stricter value check. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=300103&aid=1419490&group_id=103