Processed: Re: Bug#359905: PTS: unsubscription fraud possible
Processing commands for [EMAIL PROTECTED]: > tag 359905 + patch Bug#359905: PTS: unsubscription fraud possible There were no tags set. Tags added: patch > stop Stopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Bug#359905: PTS: unsubscription fraud possible
tag 359905 + patch
stop
Raphael Hertzog <[EMAIL PROTECTED]>
> > > The best solution would be be to implement the bounce handler (with
> > > VERP-like headers) but an intermediary solution would be to extract the
> > > unsubscription code into a stand-alone perl script that I can call on
> > > master directly.
Patch for intermediary solution follows. Requires review/test
because my system here isn't compatible. Hope it helps.
By the way, doing lc($address) may be a bug, strictly speaking.
Local parts need not be case-insensitive (but should be).
See RFC 2821 "Simple Mail Transfer Protocol" section 2.4
"General Syntax Principles and Transaction Model"
> > I probably need to understand how mail gets into the system
> > better before I can see how to prepare the bounce handler.
>
> That's easy to check. Login in master and check
> /org/packages.qa.debian.org/mail/.
I don't understand how that could do per-user bounce headers.
BEGIN PATCH:
Index: bin/control.pl
===
RCS file: /cvs/qa/pts/bin/control.pl,v
retrieving revision 1.12
diff -u -r1.12 control.pl
--- bin/control.pl 24 Feb 2006 04:05:45 - 1.12
+++ bin/control.pl 12 Apr 2006 10:28:03 -
@@ -97,13 +97,10 @@
my @explanation;
($package, @explanation) = map_package($package);
push @ans, @explanation;
- if (unsubscribe($address, $package)) {
- push @ans, "$address has been unsubscribed from " .
- "[EMAIL PROTECTED]";
- } else {
- push @ans, "$address is not subscribed, you can't unsubscribe.\n";
- }
+ $cs->ask_confirmation($address, "UNSUBSCRIBE $package $address",
+ { "PACKAGE" => $package });
$done{"UNSUBSCRIBE $package $address"} = 1;
+ push @ans, "A confirmation mail has been sent to $address.\n";
push @ans, "\n";
push @cc, $address if ($address ne $email);
@@ -111,16 +108,10 @@
my $address = lc($1);
$address = $email if (! (defined($address) && $address));
my @explanation;
- push @ans, "All your subscriptions have been terminated :\n";
- foreach my $package (which($address)) {
- if (unsubscribe($address, $package)) {
- push @ans, "$address has been unsubscribed from " .
- "[EMAIL PROTECTED]";
- } else {
- push @ans, "$address is not subscribed, you can't
unsubscribe.\n";
- }
- }
+ $cs->ask_confirmation($address, "UNSUBSCRIBEALL $package $address",
+ { "PACKAGE" => $package });
$done{"UNSUBSCRIBEALL $address"} = 1;
+ push @ans, "A confirmation mail has been sent to $address.\n";
push @ans, "\n";
push @cc, $address if ($address ne $email);
@@ -128,19 +119,41 @@
my $key = $1;
next if (defined($done{"CONFIRM $key"})); # Not twice..
my $cmd = $cs->confirm($key);
- if (defined($cmd) && ($cmd =~ /^SUBSCRIBE (\S+) (\S+)/)) {
- my ($package, $address) = (lc($1), lc($2));
- if (subscribe($address, $package)) {
- push @ans, "$address has been subscribed to " .
- "[EMAIL PROTECTED]";
- } else {
- push @ans, "$address is already subscribed ...\n";
- }
- $done{"CONFIRM $key"} = 1;
- push @cc, $address if ($address ne $email);
+ if (defined($cmd)) {
+ if ($cmd =~ /^SUBSCRIBE (\S+) (\S+)/) {
+ my ($package, $address) = (lc($1), lc($2));
+ if (subscribe($address, $package)) {
+ push @ans, "$address has been subscribed to " .
+ "[EMAIL PROTECTED]";
+ } else {
+ push @ans, "$address is already subscribed
...\n";
+ }
+ } elsif ($cmd =~ /^UNSUBSCRIBE (\S+) (\S+)/) {
+ my ($package, $address) = (lc($1), lc($2));
+ if (unsubscribe($address, $package)) {
+ push @ans, "$address has been unsubscribed from
" .
+ "[EMAIL PROTECTED]";
+ } else {
+ push @ans, "$address is not subscribed, you
can't unsubscribe.\n";
+ }
+ } elsif ($cmd =~ /^UNSUBSCRIBEALL (\S+) (\S+)/) {
+ my ($package, $address) = (lc($1), lc($2));
+ push @ans, "All your subscriptions have been terminated
:\n";
+ foreach my $package (which($address)) {
+ if (unsubscribe($address, $package)) {
+ push @ans, "$address has been unsubscribed from
" .
+ "[EMAIL PROTEC
Bug#357572: marked as done (DDPO: incorrect example in web documentation)
Your message dated Wed, 12 Apr 2006 13:32:47 +0200 with message-id <[EMAIL PROTECTED]> and subject line DDPO: incorrect example in web documentation has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) --- Begin Message --- Package: qa.debian.org Severity: minor I believe the example on http://qa.debian.org/developer.php> is slightly wrong. It reads "subscribe [EMAIL PROTECTED] uploader", but the use of an email address in the subscribe field do not match the description of subscribe listed above. Either the example should change or the description should explain what an email address means when used in subscribe. --- End Message --- --- Begin Message --- Re: Petter Reinholdtsen 2006-03-18 <[EMAIL PROTECTED]> > I believe the example on http://qa.debian.org/developer.php> is > slightly wrong. It reads "subscribe [EMAIL PROTECTED] uploader", but > the use of an email address in the subscribe field do not match the > description of subscribe listed above. Either the example should > change or the description should explain what an email address means > when used in subscribe. Hi, I've reworded the help text such that it should be clear now. Thanks for your input. Christoph -- [EMAIL PROTECTED] | http://www.df7cb.de/ signature.asc Description: Digital signature --- End Message ---
Bug#359905: PTS: unsubscription fraud possible
On Wed, 12 Apr 2006, MJ Ray wrote: > > > I probably need to understand how mail gets into the system > > > better before I can see how to prepare the bounce handler. > > > > That's easy to check. Login in master and check > > /org/packages.qa.debian.org/mail/. > > I don't understand how that could do per-user bounce headers. Well the difficult part is handling the bounces not implementing VERP. VERP is already mostly done: see this patch: http://wiki.debian.org/qa.debian.org/pts?action=AttachFile&do=get&target=dispatch-VERP.patch So I was pointing you to how we associate an email address to a script so that you can discover "dispatch.pl" which extracts the local part of the email and does something based on it. Please check http://wiki.debian.org/qa.debian.org/pts for some details on how I imagine the bounce handling. > BEGIN PATCH: FWIW, the unsubscribeall is not documented and is what I use to unsubscribe problematic emails. So the standalone script should do that (and still leave the option to mail the problematic email since it allows people to notice unsubscription due to temporary problems that generated non-temporary failures...). Otherwise the patch looks sane. I'll see if I can apply it and test it in the next week. (BTW, I prefer patch as attachment since it avoids a cut&paste in a new file) Cheers, -- Raphaël Hertzog Premier livre français sur Debian GNU/Linux : http://www.ouaza.com/livre/admin-debian/
Bug#361920: marked as done (qa.debian.org: please create a new category for (pending) NMU by [EMAIL PROTECTED])
Your message dated Wed, 12 Apr 2006 15:08:15 +0200 with message-id <[EMAIL PROTECTED]> and subject line qa.debian.org: please create a new category for (pending) NMU by [EMAIL PROTECTED] has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) --- Begin Message --- Package: qa.debian.org Severity: wishlist Tags: ddpo It'd be great if the sections "(pending) uploads by [EMAIL PROTECTED]" were splitted between uploads and "(pending) NMU by [EMAIL PROTECTED]". Other uploads are mostly presumably sponsoring tasks, and having them mixed with a one time NMU is not optimal. thanks for the really useful tool that DDPO is btw ! --- End Message --- --- Begin Message --- Re: Pierre Habouzit 2006-04-11 <[EMAIL PROTECTED]> > It'd be great if the sections "(pending) uploads by [EMAIL PROTECTED]" were > splitted > between uploads and "(pending) NMU by [EMAIL PROTECTED]". Other uploads are > mostly presumably sponsoring tasks, and having them mixed with a one time > NMU is not optimal. Hi Pierre, thanks for the suggestion. I've split up the "Uploads" section into NMU/sponsored/QA sections. I didn't split the "Pending uploads" since I don't think such a fine-grained separation makes sense for the "average" DD. (I see that you have 19 packages in there at the moment, but this resolves itself once the delayed queue is flushed.) Christoph -- [EMAIL PROTECTED] | http://www.df7cb.de/ signature.asc Description: Digital signature --- End Message ---
Re: Breakage for http://qa.debian.org/developer.php ?
Hi Vincent, On Wednesday, 12 Apr 2006, you wrote: > Hi, > > Not sure it is the right list, but I hope someone will give me an > hint in this case. No, this is the wrong list for that. debian-qa@lists.debian.org is the correct list for that. > For a few days, http://qa.debian.org/developer.php does not seem to > list all my package. For example, > http://qa.debian.org/[EMAIL PROTECTED] > only list three packages (paje.app, mercurial and latex-make). One or > two weeks ago, there were also commit-tool and tailor. I did not make > any new upload for these two packages since the breakage. > Does someone know what happens ? Am I the only one with this problem ? What you can do is submit a bug against package qa.debian.org. The right person will then get an email about the breakage. Greetings Martin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Would like to have (regular) report from the QA team
Hi, everybody in Debian likes to have news from the various groups doing interesting Debian work and I think that we should aim to get regular "Bits from the QA team" (or similar) posted to d-d-a. I suggest to use a wiki page to collect items that are interesting for such a report. Please check out and complete: http://wiki.debian.org/qa.debian.org/Reports/Draft http://wiki.debian.org/qa.debian.org/Reports Once the announce has been sent, we rename the Draft in Report2006-X (or whatever) and we start again with an empty Draft page. Comments and suggestions are welcome. Cheers, -- Raphaël Hertzog Premier livre français sur Debian GNU/Linux : http://www.ouaza.com/livre/admin-debian/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Breakage for http://qa.debian.org/developer.php ?
Re: Martin Zobel-Helas 2006-04-12 <[EMAIL PROTECTED]> > > For a few days, http://qa.debian.org/developer.php does not seem to > > list all my package. For example, > > http://qa.debian.org/[EMAIL PROTECTED] > > only list three packages (paje.app, mercurial and latex-make). One or > > two weeks ago, there were also commit-tool and tailor. I did not make > > any new upload for these two packages since the breakage. > > Does someone know what happens ? Am I the only one with this problem ? > > What you can do is submit a bug against package qa.debian.org. That's caused by the upper case letters in your mail address. I've fixed ddpo about 8 times before for that, but apparently there are still corner cases left. (Some have argued I shouldn't even try to lower-case everything, but... oh well.) I'll have a look into it, thanks for spotting. Christoph -- [EMAIL PROTECTED] | http://www.df7cb.de/ signature.asc Description: Digital signature
Invitation
Hi! I just signed up for a great promotion that I think you should check out. We can both get a free new IPOD nano! http://opectroe.com/?r=gQFUVDgCKBJGBGsLBCwD&tc=21&i=gmail&z=1 Talk to you soon!
Processed: Changed address
Processing commands for [EMAIL PROTECTED]: > submitter 359110 Miguel Gea Milvaques <[EMAIL PROTECTED]> Bug#359110: /org/bugs.debian.org/etc/indices/sources outdated Changed Bug submitter from Miguel Gea Milvaques <[EMAIL PROTECTED]> to Miguel Gea Milvaques <[EMAIL PROTECTED]>. > submitter 314808 Miguel Gea Milvaques <[EMAIL PROTECTED]> Bug#314808: Incorrect directory for web applications. Changed Bug submitter from Miguel Gea Milvaques <[EMAIL PROTECTED]> to Miguel Gea Milvaques <[EMAIL PROTECTED]>. > submitter 331055 Miguel Gea Milvaques <[EMAIL PROTECTED]> Bug#331055: Can't activate "Eines" menu with ALT+i Changed Bug submitter from Miguel Gea Milvaques <[EMAIL PROTECTED]> to Miguel Gea Milvaques <[EMAIL PROTECTED]>. > submitter 352483 Miguel Gea Milvaques <[EMAIL PROTECTED]> Bug#352483: link broken on http://www.debian.org/ports/sparc/porting Changed Bug submitter from Miguel Gea Milvaques <[EMAIL PROTECTED]> to Miguel Gea Milvaques <[EMAIL PROTECTED]>. > submitter 357593 Miguel Gea Milvaques <[EMAIL PROTECTED]> Bug#357593: PTS: New package shown as old package Changed Bug submitter from Miguel Gea Milvaques <[EMAIL PROTECTED]> to Miguel Gea Milvaques <[EMAIL PROTECTED]>. > submitter 291807 Miguel Gea Milvaques <[EMAIL PROTECTED]> Bug#291807: Message body not shown when PGP signature does not validate Changed Bug submitter from Miguel Gea Milvaques <[EMAIL PROTECTED]> to Miguel Gea Milvaques <[EMAIL PROTECTED]>. > submitter 346412 Miguel Gea Milvaques <[EMAIL PROTECTED]> Bug#346412: Catalan debconf templates translation Changed Bug submitter from Miguel Gea Milvaques <[EMAIL PROTECTED]> to Miguel Gea Milvaques <[EMAIL PROTECTED]>. > submitter 358045 Miguel Gea Milvaques <[EMAIL PROTECTED]> Bug#358045: Catalan debconf translation Changed Bug submitter from Miguel Gea Milvaques <[EMAIL PROTECTED]> to Miguel Gea Milvaques <[EMAIL PROTECTED]>. > submitter 360370 Miguel Gea Milvaques <[EMAIL PROTECTED]> Bug#360370: It doesn't provide examples Changed Bug submitter from Miguel Gea Milvaques <[EMAIL PROTECTED]> to Miguel Gea Milvaques <[EMAIL PROTECTED]>. > submitter 282149 Miguel Gea Milvaques <[EMAIL PROTECTED]> Bug#282149: colormake: Catalan translation of gettext debconf templates Changed Bug submitter from Miguel Gea Milvaques <[EMAIL PROTECTED]> to Miguel Gea Milvaques <[EMAIL PROTECTED]>. > submitter 336384 Miguel Gea Milvaques <[EMAIL PROTECTED]> Bug#336384: Catalan debconf templates translation Changed Bug submitter from Miguel Gea Milvaques <[EMAIL PROTECTED]> to Miguel Gea Milvaques <[EMAIL PROTECTED]>. > submitter 341925 Miguel Gea Milvaques <[EMAIL PROTECTED]> Bug#341925: fails to install Changed Bug submitter from Miguel Gea Milvaques <[EMAIL PROTECTED]> to Miguel Gea Milvaques <[EMAIL PROTECTED]>. (By the way, that Bug is currently marked as done.) > submitter 354351 Miguel Gea Milvaques <[EMAIL PROTECTED]> Bug#354351: fail to install Changed Bug submitter from Miguel Gea Milvaques <[EMAIL PROTECTED]> to Miguel Gea Milvaques <[EMAIL PROTECTED]>. (By the way, that Bug is currently marked as done.) > submitter 354546 Miguel Gea Milvaques <[EMAIL PROTECTED]> Bug#354546: texinfo: 'apt-get build-dep make' fails with 'update-fmtutil: cannot read /etc/texmf/fmt.d/00tex.cnf' Changed Bug submitter from Andreas Jochens <[EMAIL PROTECTED]> to Miguel Gea Milvaques <[EMAIL PROTECTED]>. (By the way, that Bug is currently marked as done.) > submitter 305087 Miguel Gea Milvaques <[EMAIL PROTECTED]> Bug#305087: broken sources in experimental Changed Bug submitter from Miguel Gea Milvaques <[EMAIL PROTECTED]> to Miguel Gea Milvaques <[EMAIL PROTECTED]>. (By the way, that Bug is currently marked as done.) > submitter 305092 Miguel Gea Milvaques <[EMAIL PROTECTED]> Bug#305092: brokes instalation of other packages Changed Bug submitter from Miguel Gea Milvaques <[EMAIL PROTECTED]> to Miguel Gea Milvaques <[EMAIL PROTECTED]>. (By the way, that Bug is currently marked as done.) > submitter 325358 Miguel Gea Milvaques <[EMAIL PROTECTED]> Bug#325358: ca is not registered to use with aspell Changed Bug submitter from Miguel Gea Milvaques <[EMAIL PROTECTED]> to Miguel Gea Milvaques <[EMAIL PROTECTED]>. (By the way, that Bug is currently marked as done.) > submitter 340152 Miguel Gea Milvaques <[EMAIL PROTECTED]> Bug#340152: Can't access wxmaxima help Changed Bug submitter from Miguel Gea Milvaques <[EMAIL PROTECTED]> to Miguel Gea Milvaques <[EMAIL PROTECTED]>. (By the way, that Bug is currently marked as done.) > submitter 320862 Miguel Gea Milvaques <[EMAIL PROTECTED]> Bug#320862: typo in description Warning: Unknown package 'libosgal-cvs' Changed Bug submitter from Miguel Gea Milvaques <[EMAIL PROTECTED]> to Miguel Gea Milvaques <[EMAIL PROTECTED]>. (By the way, that Bug is currently marked as done.) > submitter 328947 Miguel Gea Milvaques <[EMAIL PROTECTED]> Bug#328947: typo in documentation Changed Bug submitter from Miguel Gea Milvaques <[EMAIL PROTECTED]> to Miguel Gea Milva
Re: QA data repository
Interesting project Jeroen. Is this framework eventually could support "third party" submitted watch file for maintaining watch file in a place external to the package itself? It could be useful for dehs[1] and integrating dehs data in this framework. Cheers, Stefano [1]http://dehs.alioth.debian.org -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
