Public bug reported: Using mailman 2.1.39 with the recent fixes for bug 1961762 applied on top. [1] [2] A user has noticed the following behavior on our list with private_roster = 1 (List members): [3] ========================== When using the Remind button: "If you are a list member, your password has been emailed to you." is only displayed when the entered email is on the list. The same thing happens with the Unsubscribe button, "If you are a list member, a confirmation email has been sent." is only displayed when the entered email is on the list. ========================== [1] https://bazaar.launchpad.net/~mailman-coders/mailman/2.1/revision/1887 [2] https://bazaar.launchpad.net/~mailman-coders/mailman/2.1/revision/1888 [3] https://bugs.archlinux.org/task/74424 ** Affects: mailman Importance: Undecided Status: New -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1968443 Title: Membership information leak through options page To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1968443/+subscriptions