On 4/21/21 11:25 AM, Stephen J. Turnbull wrote:
> Hi,
> 
> There was recently a mail on the (closed) Mailman security list from
> the CERT Coordination Center which had this strange CC field:
> 
> CC: '@mail.python.org, c...@mail.python.org, e...@mail.python.org,
>       r...@mail.python.org, t...@mail.python.org, o...@mail.python.org,
>       r...@mail.python.org, d...@mail.python.org, i...@mail.python.org,
>       n...@mail.python.org, a...@mail.python.org, t...@mail.python.org,
>       e...@mail.python.org, c...@mail.python.org, "", "."@mail.python.org,
>       g...@mail.python.org
> 
> I guess those are "conformant" email addresses, but they seem unlikely
> to be mailboxes at python.org.  I'm not sure if these addresses were
> added by the generating software at CERT, some MTA, or Mailman.
> 
> Has anybody seen anything like this before?


My fault. There was an issue on mpo causing a shunted message
<https://gitlab.com/mailman/mailman/-/issues/881>, and I installed a
quick but incorrect patch to fix it which caused this. The patch has
since been removed. I've got a correct fix, but am working on tests
before committing it.

-- 
Mark Sapiro <m...@msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan
_______________________________________________
Mailman-Developers mailing list -- mailman-developers@python.org
To unsubscribe send an email to mailman-developers-le...@python.org
https://mail.python.org/mailman3/lists/mailman-developers.python.org/
Mailman FAQ: https://wiki.list.org/x/AgA3

Security Policy: https://wiki.list.org/x/QIA9

Reply via email to