From mark at msapiro.net Wed Sep 2 02:04:05 2015 From: mark at msapiro.net (Mark Sapiro) Date: Wed, 02 Sep 2015 00:04:05 -0000 Subject: [Bug 1491187] [NEW] mailmanctl check_privs should check effective uid, not real uid Message-ID: <20150902000405.6489.56134.malonedeb@chaenomeles.canonical.com> Public bug reported: Situations can arise where mailmanctl is running with an effective uid of 'mailman' and a real uid of 'root'. Such a situation is if logrotate does 'su mailman mailman' to rotate mailman's logs and then invokes 'mailmanctl reopen' in a postrotate script. In this case, mailmanctl gets its real uid which is 'root' and then tries to do os.setgroups, but the effective uid is 'mailman' which doesn't have permission to set groups. ** Affects: mailman Importance: Medium Assignee: Mark Sapiro (msapiro) Status: In Progress -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1491187 Title: mailmanctl check_privs should check effective uid, not real uid To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1491187/+subscriptions From 1491187 at bugs.launchpad.net Wed Sep 2 02:11:05 2015 From: 1491187 at bugs.launchpad.net (Launchpad Bug Tracker) Date: Wed, 02 Sep 2015 00:11:05 -0000 Subject: [Bug 1491187] Re: mailmanctl check_privs should check effective uid, not real uid References: <20150902000405.6489.56134.malonedeb@chaenomeles.canonical.com> Message-ID: <20150902001106.29401.32638.launchpad@ackee.canonical.com> ** Branch linked: lp:mailman/2.1 ** Branch linked: lp:~pydotorg/mailman/production21 -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1491187 Title: mailmanctl check_privs should check effective uid, not real uid To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1491187/+subscriptions From mark at msapiro.net Thu Sep 17 01:08:14 2015 From: mark at msapiro.net (Mark Sapiro) Date: Wed, 16 Sep 2015 23:08:14 -0000 Subject: [Bug 1496620] [NEW] Mailman sometimes fails to remove redundant Re: when prefixing subject. Message-ID: <20150916230814.24810.98990.malonedeb@gac.canonical.com> Public bug reported: When processing the subject_prefix for list mail, Mailman attempts to remove all the redundant Re: bits in the Subject. Under some circumstances this can fail resulting in messages being delivered to the list with subjects like, e.g., Subject: [prefix] Re: Re: Re: Re: some message subject Of course, it was a user's MUA that created a subject with multiple Re: to begin with, but it may not have been so blatant before prefixing manipulations. ** Affects: mailman Importance: Low Assignee: Mark Sapiro (msapiro) Status: New -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1496620 Title: Mailman sometimes fails to remove redundant Re: when prefixing subject. To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1496620/+subscriptions From mark at msapiro.net Thu Sep 17 01:42:44 2015 From: mark at msapiro.net (Mark Sapiro) Date: Wed, 16 Sep 2015 23:42:44 -0000 Subject: [Bug 1496632] [NEW] visiting the user options page with crafted post data or query fragments can produce "we hit a bug" Message-ID: <20150916234244.24517.15762.malonedeb@gac.canonical.com> Public bug reported: If one visits the user options page with a hand crafted query fragment or post data containing for example language=en&email=&email=test&password=&login-remind=Remind the fact that the options CGI sees 'email' as a list rather than a string throws an exception in Utils.websafe(). We will defend against this by testing in Utils.websafe() for a sequence argument and if so, returning only websafe of the first element. ** Affects: mailman Importance: Low Assignee: Mark Sapiro (msapiro) Status: New -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1496632 Title: visiting the user options page with crafted post data or query fragments can produce "we hit a bug" To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1496632/+subscriptions From 1496632 at bugs.launchpad.net Thu Sep 17 02:20:50 2015 From: 1496632 at bugs.launchpad.net (Launchpad Bug Tracker) Date: Thu, 17 Sep 2015 00:20:50 -0000 Subject: [Bug 1496632] Re: visiting the user options page with crafted post data or query fragments can produce "we hit a bug" References: <20150916234244.24517.15762.malonedeb@gac.canonical.com> Message-ID: <20150917002051.20889.61665.launchpad@ackee.canonical.com> ** Branch linked: lp:mailman/2.1 -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1496632 Title: visiting the user options page with crafted post data or query fragments can produce "we hit a bug" To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1496632/+subscriptions From mark at msapiro.net Thu Sep 17 02:24:42 2015 From: mark at msapiro.net (Mark Sapiro) Date: Thu, 17 Sep 2015 00:24:42 -0000 Subject: [Bug 1496632] Re: visiting the user options page with crafted post data or query fragments can produce "we hit a bug" References: <20150916234244.24517.15762.malonedeb@gac.canonical.com> Message-ID: <20150917002443.19113.17383.launchpad@soybean.canonical.com> ** Changed in: mailman Status: New => Fix Committed -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1496632 Title: visiting the user options page with crafted post data or query fragments can produce "we hit a bug" To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1496632/+subscriptions From 1496620 at bugs.launchpad.net Thu Sep 17 04:52:49 2015 From: 1496620 at bugs.launchpad.net (Launchpad Bug Tracker) Date: Thu, 17 Sep 2015 02:52:49 -0000 Subject: [Bug 1496620] Re: Mailman sometimes fails to remove redundant Re: when prefixing subject. References: <20150916230814.24810.98990.malonedeb@gac.canonical.com> Message-ID: <20150917025249.20889.93540.launchpad@ackee.canonical.com> ** Branch linked: lp:mailman/2.1 -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1496620 Title: Mailman sometimes fails to remove redundant Re: when prefixing subject. To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1496620/+subscriptions From mark at msapiro.net Thu Sep 17 04:53:41 2015 From: mark at msapiro.net (Mark Sapiro) Date: Thu, 17 Sep 2015 02:53:41 -0000 Subject: [Bug 1496620] Re: Mailman sometimes fails to remove redundant Re: when prefixing subject. References: <20150916230814.24810.98990.malonedeb@gac.canonical.com> Message-ID: <20150917025342.30059.86394.launchpad@wampee.canonical.com> ** Changed in: mailman Status: New => Fix Committed -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1496620 Title: Mailman sometimes fails to remove redundant Re: when prefixing subject. To manage notifications about this bug go to: https://bugs.launchpad.net/mailman/+bug/1496620/+subscriptions From 1453454 at bugs.launchpad.net Fri Sep 25 14:59:47 2015 From: 1453454 at bugs.launchpad.net (Maurits van Rees) Date: Fri, 25 Sep 2015 12:59:47 -0000 Subject: [Bug 1453454] Re: buildout error : 'tuple' object has no attribute 'is_prerelease' References: <20150509205940.15041.62522.malonedeb@chaenomeles.canonical.com> Message-ID: <20150925125947.28848.35493.malone@chaenomeles.canonical.com> I think this is because you are using distribute instead of setuptools. At least I now see it on a server too that still has distribute in its bin/buildout, where locally with setuptools all is fine. -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman suite bundler. https://bugs.launchpad.net/bugs/1453454 Title: buildout error : 'tuple' object has no attribute 'is_prerelease' To manage notifications about this bug go to: https://bugs.launchpad.net/mailman-bundler/+bug/1453454/+subscriptions From 1453454 at bugs.launchpad.net Sun Sep 27 09:56:16 2015 From: 1453454 at bugs.launchpad.net (daamien) Date: Sun, 27 Sep 2015 07:56:16 -0000 Subject: [Bug 1453454] Re: buildout error : 'tuple' object has no attribute 'is_prerelease' References: <20150509205940.15041.62522.malonedeb@chaenomeles.canonical.com> Message-ID: <20150927075616.28745.46105.malone@chaenomeles.canonical.com> Thanks for the answer We solved the problem by switching to Debian Jessie. This issue can be closed -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman suite bundler. https://bugs.launchpad.net/bugs/1453454 Title: buildout error : 'tuple' object has no attribute 'is_prerelease' To manage notifications about this bug go to: https://bugs.launchpad.net/mailman-bundler/+bug/1453454/+subscriptions From mark at msapiro.net Sun Sep 27 16:21:17 2015 From: mark at msapiro.net (Mark Sapiro) Date: Sun, 27 Sep 2015 14:21:17 -0000 Subject: [Bug 1453454] Re: buildout error : 'tuple' object has no attribute 'is_prerelease' References: <20150509205940.15041.62522.malonedeb@chaenomeles.canonical.com> Message-ID: <20150927142117.28599.17875.malone@chaenomeles.canonical.com> This issue is duplicated at . Future mailman-bundler issues should be reported at Marking invalid per comment #2. ** Changed in: mailman-bundler Status: New => Invalid -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman suite bundler. https://bugs.launchpad.net/bugs/1453454 Title: buildout error : 'tuple' object has no attribute 'is_prerelease' To manage notifications about this bug go to: https://bugs.launchpad.net/mailman-bundler/+bug/1453454/+subscriptions