[Bug 1968443] [NEW] Membership information leak through options page

Public bug reported: Using mailman 2.1.39 with the recent fixes for bug 1961762 applied on top. [1] [2] A user has noticed the following behavior on our list with private_roster = 1 (List members): [3] ========================== When using the Remind button: "If you are a list member, your password has been emailed to you." is only displayed when the entered email is on the list. The same thing happens with the Unsubscribe button, "If you are a list member, a confirmation email has been sent." is only displayed when the entered email is on the list. ========================== [1] https://bazaar.launchpad.net/~mailman-coders/mailman/2.1/revision/1887 [2] https://bazaar.launchpad.net/~mailman-coders/mailman/2.1/revision/1888 [3] https://bugs.archlinux.org/task/74424 ** Affects: mailman Importance: Undecided Status: New -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1968443 Title: Membership information leak through options page To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1968443/+subscriptions

** Changed in: mailman Importance: Undecided => Medium ** Changed in: mailman Status: New => Confirmed ** Changed in: mailman Milestone: None => 2.1.40 -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1968443 Title: Membership information leak through options page To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1968443/+subscriptions

** Branch linked: lp:mailman/2.1 -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1968443 Title: Membership information leak through options page To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1968443/+subscriptions

** Changed in: mailman Status: Confirmed => Fix Committed ** Changed in: mailman Assignee: (unassigned) => Mark Sapiro (msapiro) -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1968443 Title: Membership information leak through options page To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1968443/+subscriptions

** Changed in: mailman Importance: Undecided => Medium ** Changed in: mailman Status: New => Confirmed ** Changed in: mailman Milestone: None => 2.1.40 -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1968443 Title: Membership information leak through options page To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1968443/+subscriptions

** Branch linked: lp:mailman/2.1 -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1968443 Title: Membership information leak through options page To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1968443/+subscriptions

** Changed in: mailman Status: Confirmed => Fix Committed ** Changed in: mailman Assignee: (unassigned) => Mark Sapiro (msapiro) -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1968443 Title: Membership information leak through options page To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1968443/+subscriptions
participants (3)
-
Evangelos Foutras
-
Launchpad Bug Tracker
-
Mark Sapiro