Your message dated Mon, 23 Aug 2010 14:23:59 +0200 (CEST)
with message-id <[email protected]>
has caused the   report #580703,
regarding smartlist: Smartlist doesn't recognize Domains with trailing numbers.
to be marked as having been forwarded to the upstream software
author(s) [email protected]

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
580703: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=580703
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Hello.

[ Does somebody read this address, [email protected]? ]

Anyway, I received this report from the Debian bug system.

Note: The Debian smartlist package has the confirm patches by Werner
Reisberger. To reproduce, send a message like this:

From: [email protected]
To: test-request
Subject: subscribe [email protected]

This creates a cookie and sends it for [email protected], not for
[email protected].

I have not tested what would happen without the confirmation patches,
as I consider them to be an essential part of Debian smartlist now.

I'm going to apply the attached patch to the Debian smartlist package
(note: the patch is just a cleaned-up version of the one sent by Cord).

---------- Forwarded message ----------
From: Cord Beermann <[email protected]>
To: Debian Bug Tracking System <[email protected]>
Date: Fri, 7 May 2010 23:06:50 +0200
Subject: smartlist: Smartlist doesn't recognize Domains with trailing numbers.

Package: smartlist
Version: 3.15-21
Severity: important
Tags: upstream patch

This bug has been reported as #579376 to lists.debian.org

This bug makes it possible to subscribe third party mailaddresses to
mailinglists under some circumstances, so i'm flagging it as
important.

This is caused that the sed-regexp don't work with domains having a
trailing number which leaves the $address variable empty and subscribe
later parses another address from the confirmation mail and simply
subscribes it.

IMHO a real fix shouldn't do that, instead it should stop if it can't
figure out the mailaddress from the Cookie-Directory.

[...]
diff -ru smartlist-3.15.orig//SmartList/bin/subscribe 
smartlist-3.15/SmartList/bin/subscribe
--- smartlist-3.15.orig//SmartList/bin/subscribe        2010-08-23 
14:06:47.000000000 +0200
+++ smartlist-3.15/SmartList/bin/subscribe      2010-08-23 14:08:32.244984320 
+0200
@@ -41,13 +41,13 @@
  $sed -n -e 'y/ABCDEFGHIJKLMNOPQRSTUVWXYZ/abcdefghijklmnopqrstuvwxyz/' \
   -e '/^[       ]*[^    a-z]/ q' \
   -e 's/^...@]*add[     ]*'\
-'[^     ]*[     ]\([^   ]*[-a-z0-9...@!][a-z][^         ]*\).*/\1/p' \
+'[^     ]*[     ]\([^   ]*[-a-z0-9...@!][a-z0-9][^      ]*\).*/\1/p' \
   -e 's/^...@]*address[         ]*'\
-'[^     ]*[     ]\([^   ]*[-a-z0-9...@!][a-z][^         ]*\).*/\1/p' \
+'[^     ]*[     ]\([^   ]*[-a-z0-9...@!][a-z0-9][^      ]*\).*/\1/p' \
   -e 's/^...@]*sub[     ]*'\
-'[^     ]*[     ]\([^   ]*[-a-z0-9...@!][a-z][^         ]*\).*/\1/p' \
+'[^     ]*[     ]\([^   ]*[-a-z0-9...@!][a-z0-9][^      ]*\).*/\1/p' \
   -e 's/^...@]*subscribe[       ]*'\
-'[^     ]*[     ]\([^   ]*[-a-z0-9...@!][a-z][^         ]*\).*/\1/p' `
+'[^     ]*[     ]\([^   ]*[-a-z0-9...@!][a-z0-9][^      ]*\).*/\1/p' `
 
 fromaddr=`$cat $tmpfrom`
 

--- End Message ---

Reply via email to