[Bug 1414696] Re: mailx commandline broken after recent bsd-mailx security update

2015-02-27 Thread Launchpad Bug Tracker
Status changed to 'Confirmed' because the bug affects multiple users.

** Changed in: bootmail (Ubuntu)
   Status: New = Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1414696

Title:
  mailx commandline broken after recent bsd-mailx security update

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/bootmail/+bug/1414696/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1414696] Re: mailx commandline broken after recent bsd-mailx security update

2015-01-30 Thread Andreas Ntaflos
I have implemented the proposed fix in our infrastructure by having
Puppet modify the /usr/sbin/bootmail script and change the last line as
specified above to use the -a option for setting the From: header:

print_mail_text | sed -e s/[^[:print:]]//g | rootsign | mail -s
$subject -a From: Bootmail ${FROM_MAIL} $recipients

Works well, FWIW.

** Description changed:

  bsd-mailx recently had a security update that completely removes support
  for specifying classic sendmail options after -- on the command line.
  See http://changelogs.ubuntu.com/changelogs/pool/main/b/bsd-mailx/bsd-
  mailx_8.1.2-0.2006cvs-1ubuntu0.1/changelog for 8.1.2-0.2006cvs-
  1ubuntu0.1. This is on Ubuntu 12.04.
  
  The update breaks the way Bootmail (and probably quite a few other
  scripts) constructs its mail messages. Currently it looks like this:
  
  print_mail_text | sed -e s/[^[:print:]]//g | rootsign | mail -s
  $subject $recipients -- -F Bootmail -f $FROM_MAIL
  
  The part after --, i.e. the switches -F and -f, is now no longer
  supported by bsd-mailx and results in bad address syntax error
  messages in /var/log/mail.log:
  
  Jan 26 16:20:09 example01 postfix/error[31885]: 4351640CB7:
  to=-f...@web01.example.com, orig_to=-F, relay=none, delay=0.16,
  delays=0.12/0/0/0.05, dsn=5.1.3, status=bounced (bad address syntax)
  
  I reported a bug against bsd-mailx in
  https://bugs.launchpad.net/ubuntu/+source/bsd-mailx/+bug/1414684 because
  this change is obviously quite troublesome for any script that relies on
  mailx understanding sendmail options.
  
  To fix this in Bootmail I propose using the -a commandline switch to
  set additional mail headers. Something like this:
  
  print_mail_text | sed -e s/[^[:print:]]//g | rootsign | mail -s
- $subject -a Bootmail ${FROM_MAIL} $recipients
+ $subject -a From: Bootmail ${FROM_MAIL} $recipients
  
  This has the advantage that it works with (probably) all bsd-mailx
  versions and most other mailx variants as well, including those that
  never supported specifying sendmail options.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1414696

Title:
  mailx commandline broken after recent bsd-mailx security update

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/bootmail/+bug/1414696/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs