Mailman 3 December 2002 - Mailman-Developers

[ mailman-Bugs-656341 ] logging of pending request without email
by noreply＠sourceforge.net Dec. 19, 2002

Dec. 19, 2002

Bugs item #656341, was opened at 2002-12-19 15:45 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=100103&aid=656341&group_i… Category: (un)subscribing Group: 2.1 beta Status: Open Resolution: None Priority: 5 Submitted By: Jost Krieger (jkrieger) Assigned to: Nobody/Anonymous (nobody) Summary: logging of pending request without email Initial Comment: 2.1b6: Pending requests are still not logged with email addresses for me. Patch upcoming. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=100103&aid=656341&group_i…

1 0

[ mailman-Patches-655214 ] Fix archiving
by noreply＠sourceforge.net Dec. 19, 2002

Dec. 19, 2002

Patches item #655214, was opened at 2002-12-17 15:49 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=300103&aid=655214&group_i… Category: Pipermail Group: Mailman 2.1 Status: Open Resolution: None Priority: 5 Submitted By: Martin v. Löwis (loewis) Assigned to: Nobody/Anonymous (nobody) Summary: Fix archiving Initial Comment: This patch restores MIME charset capabilities for article archiving in CVS mailman. It: - removes the .charset attribute from articles; all articles are encoded in the list's charset, - decodes subject and author to Unicode; if this fails, no decoding (not even MIME) is done to subject and author, - MIME-decodes the body in the constructor using get_payload, removes the hand-crafted qp decoding from _get_body, - Unicode-decodes the body in the constructor if the body's charset differs from the list's charset, - fixes processbody_URLquote to always return byte strings (by escaping the URL also); comparing the old and the new string is no longer possible since the old string is Unicode and the new string is a list-encoded byte string. - changes text archiving to have the archives in the list's encoding, with unsupported characters 'replace'd - Fixes a bug in the scrubber, where a content-transfer-encoding might have survived flattening of the message. With these changes, I can process the playground archives correctly, to get mojibake-free pages. ---------------------------------------------------------------------- >Comment By: Martin v. Löwis (loewis) Date: 2002-12-19 07:55 Message: Logged In: YES user_id=21627 Oops, attached. ---------------------------------------------------------------------- Comment By: Tokio Kikuchi (tkikuchi) Date: 2002-12-19 04:13 Message: Logged In: YES user_id=67709 Hi, Martin, Haven't you forget to attach file? I am interested in reviewing your patch. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=300103&aid=655214&group_i…

1 0

[ mailman-Patches-655214 ] Fix archiving
by noreply＠sourceforge.net Dec. 19, 2002

Dec. 19, 2002

Patches item #655214, was opened at 2002-12-17 14:49 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=300103&aid=655214&group_i… Category: Pipermail Group: Mailman 2.1 Status: Open Resolution: None Priority: 5 Submitted By: Martin v. Löwis (loewis) Assigned to: Nobody/Anonymous (nobody) Summary: Fix archiving Initial Comment: This patch restores MIME charset capabilities for article archiving in CVS mailman. It: - removes the .charset attribute from articles; all articles are encoded in the list's charset, - decodes subject and author to Unicode; if this fails, no decoding (not even MIME) is done to subject and author, - MIME-decodes the body in the constructor using get_payload, removes the hand-crafted qp decoding from _get_body, - Unicode-decodes the body in the constructor if the body's charset differs from the list's charset, - fixes processbody_URLquote to always return byte strings (by escaping the URL also); comparing the old and the new string is no longer possible since the old string is Unicode and the new string is a list-encoded byte string. - changes text archiving to have the archives in the list's encoding, with unsupported characters 'replace'd - Fixes a bug in the scrubber, where a content-transfer-encoding might have survived flattening of the message. With these changes, I can process the playground archives correctly, to get mojibake-free pages. ---------------------------------------------------------------------- Comment By: Tokio Kikuchi (tkikuchi) Date: 2002-12-19 03:13 Message: Logged In: YES user_id=67709 Hi, Martin, Haven't you forget to attach file? I am interested in reviewing your patch. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=300103&aid=655214&group_i…

1 0

[ mailman-Patches-656097 ] fix for bug id 655144
by noreply＠sourceforge.net Dec. 19, 2002

Dec. 19, 2002

Patches item #656097, was opened at 2002-12-19 03:07 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=300103&aid=656097&group_i… Category: command line scripts Group: Mailman 2.1 Status: Open Resolution: None Priority: 5 Submitted By: Tokio Kikuchi (tkikuchi) Assigned to: Nobody/Anonymous (nobody) Summary: fix for bug id 655144 Initial Comment: Here is a quick hack for fixing bug id 655144 -- fail to set list preferred language through command line. ---------------------------------------------------------------------- >Comment By: Tokio Kikuchi (tkikuchi) Date: 2002-12-19 03:09 Message: Logged In: YES user_id=67709 forget to check attach? ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=300103&aid=656097&group_i…

1 0

[ mailman-Patches-656097 ] fix for bug id 655144
by noreply＠sourceforge.net Dec. 19, 2002

Dec. 19, 2002

Patches item #656097, was opened at 2002-12-19 03:07 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=300103&aid=656097&group_i… Category: command line scripts Group: Mailman 2.1 Status: Open Resolution: None Priority: 5 Submitted By: Tokio Kikuchi (tkikuchi) Assigned to: Nobody/Anonymous (nobody) Summary: fix for bug id 655144 Initial Comment: Here is a quick hack for fixing bug id 655144 -- fail to set list preferred language through command line. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=300103&aid=656097&group_i…

1 0

File attachments cause scrambled URL information [Mailman v2.1b6]
by christopher.m.perez＠exgate.tek.com Dec. 19, 2002

Dec. 19, 2002

Mailman Developers, When we send the included file (see attachment to this email) through Mailman 2.1b6 we get a URL region that starts with "z'µìmjÛZrzzÜ²Ç+¹¶ÞtÖ¦x:" The following usual information such as the following is completely replaced with the aforementioned string: A non-text attachment was scrubbed... Name: filname.fileextension Type: application/octet-stream Size: filesize bytes Desc: not available... We've noticed this in testing with a few jpg files and one PowerPoint file. We've sent the mail through 'Outlook', but a download of the full raw archive coming out of Sendmail appears to be OK in all cases. In fact, the section of the Mailman garbled URL in our Sendmail archive is as follows: ------_=_NextPart_000_01C2A6F2.C38699F0 Content-Type: image/jpeg; name="creigsmith2.jpg" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="creigsmith2.jpg" /9j/4AAQSkZJRgABAQEBLAEsAAD/2wBDAAMCAgMCAgMDAwMEAwMEBQgFBQQEBQoHBwYIDAoMDAsK CwsNDhIQDQ4RDgsLEBYQERMUFRUVDA8XGBYUGBIUFRT/2wBDAQMEBAUEBQkFBQkUDQsNFBQUFBQU FBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBT/wAARCAGXAUcDASIA AhEBAxEB/8QAHwAAAQUBAQEBAQEAAAAAAAAAAAECAwQFBgcICQoL/8QAtRAAAgEDAwIEAwUFBAQA ... Thoughts? Ideas? Comments? Feedback? <<creigsmith2.jpg>> Christopher M. Perez Program Manager - Central Engineering, Software Engineering Services Tektronix, Inc. PO Box 500, M/S 39-549 Beaverton, Oregon 97077-0001 > * EMail: christopher.m.perez(a)tek.com AOL AIM: CMarkPerez > * Phone: (503) 627-5524 > * Fax: (503) 627-1388 >

1 0

[ mailman-Bugs-656042 ] Digest message count incorrect in 2.0.6
by noreply＠sourceforge.net Dec. 18, 2002

Dec. 18, 2002

Bugs item #656042, was opened at 2002-12-18 23:58 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=100103&aid=656042&group_i… Category: mail delivery Group: 2.0.x Status: Open Resolution: None Priority: 5 Submitted By: Bryce Harrington (bryce) Assigned to: Nobody/Anonymous (nobody) Summary: Digest message count incorrect in 2.0.6 Initial Comment: In digests, the # of messages reported does not match the actual number of messages contained in the digest. Take, for example, this digest : Cgl_proof_subgroup digest, Vol 1 #130 - 14 msgs which has : Today's Topics: 1. RE: Re: CGL-WG PoC-sg : Feature Sets & Ho t Device Identity ([Cgl_proof_subgroup] Proposed FS list) (Randy.Dunlap) 2. RE: Re: CGL-WG PoC-sg : Feature Sets & Ho t Device Identity ([Cgl_proof_subgroup] Proposed FS list) (Perez-Gonzalez, Inaky) 3. RE: Re: CGL-WG PoC-sg : Feature Sets & Ho t Device Identity ([Cgl_proof_subgroup] Proposed FS list) (Mika Kukkonen) 4. Re: 2.4 v. 2.5 (was RE: [Cgl_proof_subgroup] Re: CGL-WG PoC-sg : Feature Sets & Ho t Device Identity ([Cgl_proof_subgroup] Proposed FS list)) (Mika Kukkonen) 5. Re: 2.4 v. 2.5 (was RE: [Cgl_proof_subgroup] Re: CGL-WG PoC-sg : Feature Sets & Ho t Device Identity ([Cgl_proof_subgroup] Proposed FS list)) (Randy.Dunlap) 6. RE: Re: CGL-WG PoC-sg : Feature Sets & Ho t Device Identity ([Cgl_proof_subgroup] Proposed FS list) (Randy.Dunlap) 6 messages, not the 14 claimed by the subject. In general, all the lists seem to double-count some messages. If the digest only contains one or two messages, the subject seems to be correct, but it is less and less accurate as the message count increases. Perhaps it is counting messages with wrapped subject lines as 2+ messages? This has also been reported elsewhere: http://mail.python.org/pipermail/mailman-users/2001-February/009697.html ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=100103&aid=656042&group_i…

1 0

RELEASED Mailman 2.1 beta 6
by barry＠python.org Dec. 18, 2002

Dec. 18, 2002

I've released Mailman 2.1 beta 6. This is the last planned beta release before MM2.1 final, which I still expect to release before the end of the year. See below for a list of changes since 2.1b5. There have been lots of bug fxes and lots of translations updates. The new tarball has been uploaded to SourceForge, and the various web sites will be updated shortly. Enjoy, -Barry -------------------- snip snip -------------------- 2.1 beta 6 (09-Dec-2002) Lots and lots of bug fixes, and translation updates. Also, - ARCHIVER_OBSCURES_EMAILADDRS is now set to true by default. - QRUNNER_SAVE_BAD_MESSAGES is now set to true by default. - Bounce messages which were recognized, but in which no member addresses were found are no longer forwarded to the list administrator. - bin/arch grew a --wipe option which first removes the entire old archive before regenerating the new one. - bin/mailmanctl -u now prints a warning that permission problems could appear, such as when trying to delete a list through the web that has some archives in it. - bin/remove_members grew --nouserack/-n and -noadminack/-N options. - A new script bin/list_owners has been added for printing out list owners and moderators. - Dates in the web version of archived messages are now relative to the local timezone, and include the timezone names, when available.

3 2

[ mailman-Bugs-655827 ] names w/ .'s + accents held for approval
by noreply＠sourceforge.net Dec. 18, 2002

Dec. 18, 2002

Bugs item #655827, was opened at 2002-12-18 10:55 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=100103&aid=655827&group_i… Category: mail delivery Group: 2.0.x Status: Open Resolution: None Priority: 5 Submitted By: Rob Ellis (robellis) Assigned to: Nobody/Anonymous (nobody) Summary: names w/ .'s + accents held for approval Initial Comment: people who use microsoft outlook (at least) and have accented characters and .'s in their names (e.g. "F. André") have their names encoded in the From: line as per RFC 2049, like =?Windows-1252?Q?F._Andr=E9?= <fandre(a)example.ca> the unescaped dots break Mailman's RFC822 parsing, so the user's messages are held for approval when member_posting_only=1, even if they're subscribed. one fix is to escape the unescaped dots -- patch for rfc822.py attached... - rob -- Rob Ellis <rob(a)web.ca> System administrator, Web Networks ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=100103&aid=655827&group_i…

1 0

[ mailman-Bugs-655079 ] Major security hole.....
by noreply＠sourceforge.net Dec. 18, 2002

Dec. 18, 2002

Bugs item #655079, was opened at 2002-12-17 03:13 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=100103&aid=655079&group_i… Category: security/privacy Group: 2.0.x Status: Closed Resolution: Invalid Priority: 5 Submitted By: Nicolas Weeger (ryo_saeba) Assigned to: Nobody/Anonymous (nobody) Summary: Major security hole..... Initial Comment: Just found a nice security bug: on the main list page, you have 2 fields to enter admin mail & password to view list subscriptions. Well, you can just enter a valid admin password, and it'll work !!! Even if the mail address is blank / invalid !! ---------------------------------------------------------------------- >Comment By: Barry A. Warsaw (bwarsaw) Date: 2002-12-18 08:28 Message: Logged In: YES user_id=12800 The admin may not be a member of the list. The specific rule is that if the admin password is used, the email address is ignored. Yes, this means security is dependent on the secrecy of your admin password, but if that leaks out you're going to have bigger problems than someone viewing your private archives. ---------------------------------------------------------------------- Comment By: Nicolas Weeger (ryo_saeba) Date: 2002-12-18 02:39 Message: Logged In: YES user_id=303511 Well, granted, but only if the mail is left blank ! I mean, if you put an email address, aren't you supposed to enter YOUR password, not an admin's ? Currently, put an admin password & ANY MAIL and it works... ---------------------------------------------------------------------- Comment By: Barry A. Warsaw (bwarsaw) Date: 2002-12-17 17:52 Message: Logged In: YES user_id=12800 Dan's right, the admin can always read the archives and by design doesn't need to enter an email address. ---------------------------------------------------------------------- Comment By: Dan Mick (dmick) Date: 2002-12-17 17:35 Message: Logged In: YES user_id=10725 It's assumed that if you have the admin password, you're allowed to view the archives. Why is this a security hole? Seems perfectly appropriate to me. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=100103&aid=655079&group_i…

1 0