[Bug 1614841] Re: CSRF protection needs to be extended to the user options page

2016-09-05 Thread Matthias Andree
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7123 -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1614841 Title: CSRF protection needs to be extended to the user options page To

[Bug 1614841] Re: CSRF protection needs to be extended to the user options page

2016-09-05 Thread Matthias Andree
Re Comment #3 it appears this has triggered a new CVE-2016-7123 to be issued just based on this one line that Mark Sapiro wrote with no other confirmation than this launchpad bug #1614841, but I wonder if the latter CVE (CVE-2016-7123) is a duplicate of the old CVE-2011-0707, or a new separate issu

[Bug 1241770] Re: PATCH: Installation with DESTDIR leaves DESTDIR/ prefixes in .pyc files

2013-10-18 Thread Matthias Andree
Excellent, thank you. -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/1241770 Title: PATCH: Installation with DESTDIR leaves DESTDIR/ prefixes in .pyc files To manage notifications about th

Re: [Bug 1241770] Re: PATCH: Installation with DESTDIR leaves DESTDIR/ prefixes in .pyc files

2013-10-18 Thread Matthias Andree
Mark, Thanks for the prompt response. No, there is no special reason, I simply have not explored alternative solutions once I had one that worked. Your proposed solution works for me, too (tested with Python 2.7.5 on FreeBSD 9.2-amd64). Best regards Matthias Andree -- You received this bug

[Bug 1241770] [NEW] PATCH: Installation with DESTDIR leaves DESTDIR/ prefixes in .pyc files

2013-10-18 Thread Matthias Andree
Public bug reported: Packaging mailman 2.1.16 for FreeBSD's new STAGEDIR (think DESTDIR) support, the FreeBSD Q/A scripts complained that the .pyc files contain the DESTDIR prefix, and thus might misrepresent their own path in tracebacks. I debugged this and figured that Makefile.in is the culpri