[ mailman-Patches-1419490 ] email.Utils.parsedate can return bogus date

[SourceForge.net]

Patches item #1419490, was opened at 2006-01-30 20:21
Message generated for change (Comment added) made by bwarsaw
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=300103&aid=1419490&group_id=103

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: mail delivery
Group: Mailman 2.1
>Status: Closed
>Resolution: Out of Date
Priority: 5
Submitted By: Tokio Kikuchi (tkikuchi)
Assigned to: Tokio Kikuchi (tkikuchi)
Summary: email.Utils.parsedate can return bogus date

Initial Comment:
While the CVE entry of CVE-2005-4153 (see
http://www.securityfocus.com/bid/16248/info) is not
vulnerable for mailman-2.1.7 and newer, we should fix
the date parsing bug in email package.  In the meantime
of the package renewal, this patch may be used to
workaround the bug.


----------------------------------------------------------------------

>Comment By: Barry A. Warsaw (bwarsaw)
Date: 2006-02-09 00:12

Message:
Logged In: YES 
user_id=12800

With email 2.5.7 this will no longer be necessary.

----------------------------------------------------------------------

Comment By: Tokio Kikuchi (tkikuchi)
Date: 2006-02-01 21:31

Message:
Logged In: YES 
user_id=67709

Here is my revised patch.  It looks like time.strftime() has
stricter value check.


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=300103&aid=1419490&group_id=103