Your message dated Sat, 26 Nov 2005 01:32:08 -0800
with message-id <[EMAIL PROTECTED]>
and subject line Bug#244700: fixed in mailman 2.1.5-10
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 19 Apr 2004 12:58:54 +0000
>From [EMAIL PROTECTED] Mon Apr 19 05:58:54 2004
Return-path: <[EMAIL PROTECTED]>
Received: from aktaia.intevation.org (albunea.hq) [212.95.126.10]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1BFYMP-0003D0-00; Mon, 19 Apr 2004 05:58:54 -0700
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Bernhard Reiter <[EMAIL PROTECTED]>
To: Debian Bug Tracking System <[EMAIL PROTECTED]>
Subject: mailman: apply important fixes
Bcc: Bernhard Reiter <[EMAIL PROTECTED]>
X-Mailer: reportbug 2.48
Date: Mon, 19 Apr 2004 14:59:30 +0200
Message-Id: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_30,HAS_PACKAGE
autolearn=no version=2.60-bugs.debian.org_2004_03_25
X-Spam-Level:
X-CrossAssassin-Score: 1
Package: mailman
Version: 2.1.4-4
Severity: important
Tags: security
Mailman 2.1.4 has several important bugs:
Security relevant: Mailman breaks message signatures
for S/MIME and OpenPGP cases.
This is a security problem, because
users will learn this and are more likely
to attribute real manipulation to Mailman
instead noticing them.
Important, because data loss possible.:
Mailman scrubs some text message parts under certain conditions
when archiving. The data cannot be seen in the HTML archive
and might also not be in the mbox archive, it is lost.
Important: Mailman List-ID might violate the standard RFC.
And the List-ID should not change much, users will be annoyed.
I wrote two patches and put them together with the third one on:
ftp.intevation.de/users/bernhard/mailman
(Each patch has its own description in the top
including the corresponding updstream bug numbers.)
Yes I am running this combination of patches successfully
with on a site with Debian (internal packaging name 2.1.4-4ber1).
Bernhard
---------------------------------------
Received: (at 244700-close) by bugs.debian.org; 26 Nov 2005 09:41:18 +0000
>From [EMAIL PROTECTED] Sat Nov 26 01:41:18 2005
Return-path: <[EMAIL PROTECTED]>
Received: from katie by spohr.debian.org with local (Exim 4.50)
id 1EfwPg-0002i3-OO; Sat, 26 Nov 2005 01:32:08 -0800
From: Lionel Elie Mamane <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.60 $
Subject: Bug#244700: fixed in mailman 2.1.5-10
Message-Id: <[EMAIL PROTECTED]>
Sender: Archive Administrator <[EMAIL PROTECTED]>
Date: Sat, 26 Nov 2005 01:32:08 -0800
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level:
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-CrossAssassin-Score: 6
Source: mailman
Source-Version: 2.1.5-10
We believe that the bug you reported is fixed in the latest version of
mailman, which is due to be installed in the Debian FTP archive:
mailman_2.1.5-10.diff.gz
to pool/main/m/mailman/mailman_2.1.5-10.diff.gz
mailman_2.1.5-10.dsc
to pool/main/m/mailman/mailman_2.1.5-10.dsc
mailman_2.1.5-10_sparc.deb
to pool/main/m/mailman/mailman_2.1.5-10_sparc.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Lionel Elie Mamane <[EMAIL PROTECTED]> (supplier of updated mailman package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160
Format: 1.7
Date: Sat, 26 Nov 2005 10:03:23 +0100
Source: mailman
Binary: mailman
Architecture: source sparc
Version: 2.1.5-10
Distribution: unstable
Urgency: low
Maintainer: Mailman for Debian <[EMAIL PROTECTED]>
Changed-By: Lionel Elie Mamane <[EMAIL PROTECTED]>
Description:
mailman - Powerful, web-based mailing list manager
Closes: 244700 298842 310451 312673 313800 315358 326024 327732 332018 339582
339890 340036
Changes:
mailman (2.1.5-10) unstable; urgency=low
.
* Merge with 2.1.5-8ubuntu2:
Python 2.4 compatibility patch in bounce handling.
* Don't fall apart if the filename of an attachment is an invalid UTF-8
string (closes: #327732)
* Don't die on overflow in date handling (closes: #326024)
* Enable error handling in HyperArch (closes: #310451)
* Ensure list-id is always in brackets in headers (closes: #244700)
* Admin page: don't assume subscribed emails are pure ASCII
(closes: #315358)
* Bump up Standards-Version to 3.6.2
* Add vietnamese translation (closes: #312673)
* Apply corrections to german translation (closes: #313800)
* Adapt to the md5sum in dpkg or coreutils automatically (closes: #340036)
* More robust parsing of /var/lib/ucf/hashfile:
- Don't touch files of other packages that happen to have
our file's full path as subpath.
- Accept any number of spaces between the hash and the filename there.
* Work around ucf bug #238730 for postfix-to-mailman.py, too.
* Fix traceback on Danish version of options page (closes: #339582)
* Fix the private authentication form to point to the right file
(closes: #298842)
* Add Swedish debconf template translation (closes: #339890)
* Depend on any debconf-2.0 implementation instead of debconf
specifically (closes: #332018)
* Copyright file:
- New FSF address
- List the other maintainers
* Depend on adduser, used in preinst
* Move away from deprecated user.group syntax in chown
* Ensure package is built with autoconf 2.5x, not autoconf 2.13
Files:
5b95f8fb72914b06671e9f6456a4c98f 740 mail optional mailman_2.1.5-10.dsc
bd18d18647a42bf574838919762a7324 200228 mail optional mailman_2.1.5-10.diff.gz
8593eb6dd20d33bb913d332d46861d3b 6620074 mail optional
mailman_2.1.5-10_sparc.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
iEYEAREDAAYFAkOIKvQACgkQscRzFz57S3O5qACeM6eQIR43ywNLUdfEfjW6Vigt
qmUAn33W4Yg9cATH7ZSjjHnXObSGdNfk
=oT8O
-----END PGP SIGNATURE-----
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
