[Pkg-mailman-hackers] Bug#343137: mailman: users cannot cancel pending subscriptions

[Paul Wise]

Package: mailman
Version: 2.1.5-8
Severity: normal

On a sarge system, users cannot cancel their subscriptions due to this
traceback:

admin(16322): [----- Traceback ------]
admin(16322): Traceback (most recent call last):
admin(16322):   File "/var/lib/mailman/scripts/driver", line 110, in run_main
admin(16322):     main()
admin(16322):   File "/usr/lib/mailman/Mailman/Cgi/confirm.py", line 114, in main
admin(16322):     subscription_cancel(mlist, doc, cookie)
admin(16322):   File "/usr/lib/mailman/Mailman/Cgi/confirm.py", line 312, in subscription_cancel
admin(16322):     userdesc = mlist.pend_confirm(cookie)[1]
admin(16322):   File "/var/lib/mailman/Mailman/Pending.py", line 141, in pend_confirm
admin(16322):     assert self.Locked()
admin(16322): AssertionError

This is caused by pend_confirm needing the list to be locked, but
subscription_cancel doesn't actually lock the list. Copying the list
locking stuff from subscription_confirm fixed this issue for me.

BTW, is there any way to get these annoying, non-RC bugs fixed in sarge?
It would be nice to be able to have fixes available and still be able to
rely on security support.

-- System Information:
Debian Release: 3.1
Architecture: i386 (i686)
Kernel: Linux 2.6.8-2-k7
Locale: LANG=C, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8)

Versions of packages mailman depends on:
ii  apache [httpd]            1.3.33-6sarge1 versatile, high-performance HTTP s
ii  cron                      3.0pl1-86      management of regular background p
ii  debconf                   1.4.30.13      Debian configuration management sy
ii  exim4                     4.50-8         metapackage to ease exim MTA (v4) 
ii  exim4-daemon-heavy [mail- 4.50-8         exim MTA (v4) daemon with extended
ii  libc6                     2.3.2.ds1-22   GNU C Library: Shared libraries an
ii  logrotate                 3.7-5          Log rotation utility
ii  pwgen                     2.03-1         Automatic Password generation
ii  python                    2.3.5-2        An interactive high-level object-o
ii  ucf                       1.17           Update Configuration File: preserv

-- debconf information:
* mailman/queue_files_present:
  mailman/default_server_language: en
  mailman/gate_news: false
* mailman/site_languages: en
* mailman/used_languages: en
* mailman/create_site_list:

-- 
bye,
pabs

http://wiki.debian.org/PaulWise
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.alioth.debian.org/pipermail/pkg-mailman-hackers/attachments/20051213/13ccbbea/attachment.pgp