[ mailman-Patches-1419490 ] email.Utils.parsedate can return bogus date

SourceForge.net noreply at sourceforge.net
Thu Feb 2 03:32:00 CET 2006


Patches item #1419490, was opened at 2006-01-31 01:21
Message generated for change (Comment added) made by tkikuchi
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=300103&aid=1419490&group_id=103

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: mail delivery
Group: Mailman 2.1
Status: Open
Resolution: None
Priority: 5
Submitted By: Tokio Kikuchi (tkikuchi)
Assigned to: Tokio Kikuchi (tkikuchi)
Summary: email.Utils.parsedate can return bogus date

Initial Comment:
While the CVE entry of CVE-2005-4153 (see
http://www.securityfocus.com/bid/16248/info) is not
vulnerable for mailman-2.1.7 and newer, we should fix
the date parsing bug in email package.  In the meantime
of the package renewal, this patch may be used to
workaround the bug.


----------------------------------------------------------------------

>Comment By: Tokio Kikuchi (tkikuchi)
Date: 2006-02-02 02:31

Message:
Logged In: YES 
user_id=67709

Here is my revised patch.  It looks like time.strftime() has
stricter value check.


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=300103&aid=1419490&group_id=103


More information about the Mailman-coders mailing list