[Pkg-mailman-hackers] Bug#343137: marked as done (mailman: users cannot cancel pending subscriptions)

Sun Dec 25 13:18:14 UTC 2005

Your message dated Sun, 25 Dec 2005 14:04:55 +0100
with message-id <20051225130455.GA26465 at capsaicin.mamane.lu>
and subject line Bug#343137: mailman: users cannot cancel pending subscriptions
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 13 Dec 2005 03:04:15 +0000
>From pabs3 at bonedaddy.net Mon Dec 12 19:04:15 2005
Return-path: <pabs3 at bonedaddy.net>
Received: from vscan03.westnet.com.au ([203.10.1.142])
	by spohr.debian.org with esmtp (Exim 4.50)
	id 1Em0Sd-0007DJ-2I
	for submit at bugs.debian.org; Mon, 12 Dec 2005 19:04:15 -0800
Received: from localhost (localhost.localdomain [127.0.0.1])
	by localhost (Postfix) with ESMTP id D5723B60132
	for <submit at bugs.debian.org>; Tue, 13 Dec 2005 11:03:41 +0800 (WST)
Received: from vscan03.westnet.com.au ([127.0.0.1])
 by localhost (vscan03.westnet.com.au [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 10165-05-2 for <submit at bugs.debian.org>;
 Tue, 13 Dec 2005 11:03:41 +0800 (WST)
Received: from dsl-202-72-168-241.wa.westnet.com.au (dsl-202-72-168-241.wa.westnet.com.au [202.72.168.241])
	by vscan03.westnet.com.au (Postfix) with ESMTP id ED249B60B22
	for <submit at bugs.debian.org>; Tue, 13 Dec 2005 11:03:40 +0800 (WST)
Subject: mailman: users cannot cancel pending subscriptions
From: Paul Wise <pabs3 at bonedaddy.net>
To: Debian Bug Tracking System <submit at bugs.debian.org>
Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="=-oTX5DzIQ4bCtZFXLlUag"
Date: Tue, 13 Dec 2005 11:03:40 +0800
Message-Id: <1134443021.6340.36.camel at localhost.localdomain>
Mime-Version: 1.0
X-Mailer: Evolution 2.2.3 
Delivered-To: submit at bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
	autolearn=no version=2.60-bugs.debian.org_2005_01_02

--=-oTX5DzIQ4bCtZFXLlUag
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

Package: mailman
Version: 2.1.5-8
Severity: normal

On a sarge system, users cannot cancel their subscriptions due to this
traceback:

admin(16322): [----- Traceback ------]
admin(16322): Traceback (most recent call last):
admin(16322):   File "/var/lib/mailman/scripts/driver", line 110, in run_ma=
in
admin(16322):     main()
admin(16322):   File "/usr/lib/mailman/Mailman/Cgi/confirm.py", line 114, i=
n main
admin(16322):     subscription_cancel(mlist, doc, cookie)
admin(16322):   File "/usr/lib/mailman/Mailman/Cgi/confirm.py", line 312, i=
n subscription_cancel
admin(16322):     userdesc =3D mlist.pend_confirm(cookie)[1]
admin(16322):   File "/var/lib/mailman/Mailman/Pending.py", line 141, in pe=
nd_confirm
admin(16322):     assert self.Locked()
admin(16322): AssertionError

This is caused by pend_confirm needing the list to be locked, but
subscription_cancel doesn't actually lock the list. Copying the list
locking stuff from subscription_confirm fixed this issue for me.

BTW, is there any way to get these annoying, non-RC bugs fixed in sarge?
It would be nice to be able to have fixes available and still be able to
rely on security support.

-- System Information:
Debian Release: 3.1
Architecture: i386 (i686)
Kernel: Linux 2.6.8-2-k7
Locale: LANG=3DC, LC_CTYPE=3Den_AU.UTF-8 (charmap=3DUTF-8)

Versions of packages mailman depends on:
ii  apache [httpd]            1.3.33-6sarge1 versatile, high-performance HT=
TP s
ii  cron                      3.0pl1-86      management of regular backgrou=
nd p
ii  debconf                   1.4.30.13      Debian configuration managemen=
t sy
ii  exim4                     4.50-8         metapackage to ease exim MTA (=
v4)=20
ii  exim4-daemon-heavy [mail- 4.50-8         exim MTA (v4) daemon with exte=
nded
ii  libc6                     2.3.2.ds1-22   GNU C Library: Shared librarie=
s an
ii  logrotate                 3.7-5          Log rotation utility
ii  pwgen                     2.03-1         Automatic Password generation
ii  python                    2.3.5-2        An interactive high-level obje=
ct-o
ii  ucf                       1.17           Update Configuration File: pre=
serv

-- debconf information:
* mailman/queue_files_present:
  mailman/default_server_language: en
  mailman/gate_news: false
* mailman/site_languages: en
* mailman/used_languages: en
* mailman/create_site_list:

--=20
bye,
pabs

http://wiki.debian.org/PaulWise

--=-oTX5DzIQ4bCtZFXLlUag
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)

iD8DBQBDnjoM5Sc9mGvjxCMRAnxnAKDCnCAXo8bRaUKP/Cu/lSVHgbttxQCgvvLg
9CKGqHYDIkMR7oz+wNCSqAw=
=hU6w
-----END PGP SIGNATURE-----

--=-oTX5DzIQ4bCtZFXLlUag--

---------------------------------------
Received: (at 343137-done) by bugs.debian.org; 25 Dec 2005 13:04:57 +0000
>From master at capsaicin.mamane.lu Sun Dec 25 05:04:57 2005
Return-path: <master at capsaicin.mamane.lu>
Received: from 213-84-114-29.adsl.xs4all.nl ([213.84.114.29] helo=capsaicin.mamane.lu)
	by spohr.debian.org with esmtp (Exim 4.50)
	id 1EqVYX-0006DB-9w
	for 343137-done at bugs.debian.org; Sun, 25 Dec 2005 05:04:57 -0800
Received: from master by capsaicin.mamane.lu with local (Exim 4.60)
	(envelope-from <master at capsaicin.mamane.lu>)
	id 1EqVYV-00073l-8G; Sun, 25 Dec 2005 14:04:55 +0100
Date: Sun, 25 Dec 2005 14:04:55 +0100
From: Lionel Elie Mamane <lionel at mamane.lu>
To: Paul Wise <pabs3 at bonedaddy.net>, 343137-done at bugs.debian.org
Subject: Bug#343137: mailman: users cannot cancel pending subscriptions
Message-ID: <20051225130455.GA26465 at capsaicin.mamane.lu>
References: <1134443021.6340.36.camel at localhost.localdomain>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <1134443021.6340.36.camel at localhost.localdomain>
X-Operating-System: GNU/Linux
X-Request-PGP: http://www.mamane.lu/openpgp/rsa_v4_4096.asc
User-Agent: Mutt/1.5.11
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
	autolearn=no version=2.60-bugs.debian.org_2005_01_02

Version: 2.1.6

On Tue, Dec 13, 2005 at 11:03:40AM +0800, Paul Wise wrote:

> This is caused by pend_confirm needing the list to be locked, but
> subscription_cancel doesn't actually lock the list. Copying the list
> locking stuff from subscription_confirm fixed this issue for me.

Reading the code and testing suggests and shows the problem has been
solved in Mailman 2.1.6, albeit in a way that suggests that users can
corrupt the database by clicking the stop button on their
browser. Caveat listmaster.

> BTW, is there any way to get these annoying, non-RC bugs fixed in
> sarge?

No, there is no way, short of duress on Joey (Martin Schulze), whose
job is to stop me if I tried. I have no desire to resort to such
measures.

> It would be nice to be able to have fixes available and still be able to
> rely on security support.

Maybe you can get backports.org to host backported packages. Or do
your own security support by tracking the unstable Mailman package
often, where we will hopefully solve security issues fast.

<heavy irony>
 Or maybe we'll release etch soon enough that this request will become
 obsolete.
</heavy irony>

-- 
Lionel