package mailman
severity 258494 important
thanks

I have bumped the severity of this to Important is it presents a major
usability problem.  If you have a server running on a port other than
the standard and want the list administrator to be able to create lists
but without having shell access, this bug effectively prevents that.
There is really no reason to assume that it is OK to strip an existing
non-standard port number from the URL.  Additionally, this probably
applies the same to non-SSL traffic over anything other than port 80.
Please fix this.

Regards,

-Roberto

-- 
Roberto C. Sanchez
http://familiasanchez.net/~roberto

Attachment: signature.asc
Description: Digital signature

Reply via email to