***** Changes which are not compatible with previous versions are ***** listed using "*****"in the margin. Please check this at least. (See Changelog file for the full changes log) 6.1.17 February 05, 2013 Features: [8451] src/etc/Makefile.am, src/etc/create_list_templates/confidential, src/etc/create_list_templates/confidential/comment.tt2, src/etc/create_list_templates/confidential/config.tt2, src/etc/scenari/send.confidential: New "confidential" list model. These lists are used for groups who don't want any publicity around their activities; All possible restrictions are applied to prevent unauthorized users to know these lists exist and to learn anything about them. Changes: [8454] web_tt2/footer.tt2, web_tt2/tt2_error.tt2: Removing references to the Sympa version in web pages to avoid pages to be searched by bad guys willing to exploit known vulnerabilities on out of date servers. Bug fixes: [8465] web_tt2/automatic_lists_management_request.tt2: [Submitted by M. Overmeer, overmeer.net] Typo in a string prevented the family from being displayed. [8463] web_tt2/error.tt2, wwsympa/wwsympa.fcgi.in: Modifiying error when visibility bypass is prevented. Switching from "list unknown" to "authorization reject" which is less confuding. [8449] src/lib/Scenario.pm, web_tt2/error.tt2, wwsympa/wwsympa.fcgi.in: For lists which should not be visible to users, some actions still displayed the list side menus, granting informations regarding the list: number of users and identity of list owners and moderators. Fixed by short-cutting some parts of the code to prevent this display when an action is attempted. If privileges for an action are not granted and the list should not be visible to the user who requested them, the user is redirected to the main home page and list is decalred as "not found". In addition, subscribe and sigrequest will not display a form to unauthenticated users if, respectively, subscribe or unsubscribe scenarios are set to "closed", i.e.: any subscription or unsubscription request would be rejected. [7965] wwsympa/archived.pl.in: [#8569][Submitted by T. Merritt, univ. Arizona] archived.pl did not systematically reaped the sendmail processes it created. Fixed by calling mail::reaper at the end of each loop. 6.1.16 November 16, 2012 Bug fixes: [7955] src/lib/PlainDigest.pm: [Reported by O. Germes and M. Thomas, univ. Rennes 1] When compiling a plain digest, attachments are subsituted by character strings indicating that there were attachments in the message. Any text part is converted to plain text and folded into 78 column text. Teh selection of parts to fold or to replace by text is based on the "Content-Type:" header of a part. In some cases (such as messages sent from opengroupware, for example) binary attachments are embedded in text/plain parts with a "content-disposition" header with value "attachment". Such parts should be substitued by replacement text but, as their Content-Type is "text/plain", Sympa tried to fold them to 78 columns. This led to a very long loop because the Text::Linefold module splits strings to be folded with special characters that your everyday PDF file contains thousands times. Fixed by testing, when dealing with a text/plain part, the value of the "content-disposition:" header. It if contains "attachment", the part is treated as a binary-content part. [7917] wwsympa/Auth.pm: [#8852][Submitted by F. Périchon, univ. Lille 2] Ldap authentication failed in wwsympa with recent version of Convert-ASN1. Starting with version 0.25, Convert-ASN1 package has a 'use strict'. Ldap attrs were passed as a string in a ldap search call in wwsympa/Auth.pm thus making LDAP authentication fail. Fixed by passing attrs as an array, even when only one attribute is retrieved. 6.1.15 October 04, 2012 Changes: [7577] wwsympa/wwsympa.fcgi.in: When an error occurs when creating a list through the web interface, the user stays on the list creation page with her previously filled list description still present. [7576] src/lib/admin.pm: Now Sympa prevents users from creating a list whose local part of email address would be the local part used by sympa for mail commands. Bug fixes: [7643] wwsympa/archived.pl.in: When a user achieved to request a message deletion from archives without having the proper rights, archived.pl crashed because a return undef was then used outside a function context. Fixed by replacing it by a "next". [7619] src/lib/List.pm: 'host' list parameter were used to determine robots. (Correction might be incomplete...) ***** [7603] src/lib/Config_XML.pm, src/lib/Family.pm, src/lib/admin.pm: ***** Encoding issues on list creation. ***** - If list template config.tt2 contains non-ASCII strings, they are ***** double-encoded. ***** - If list creation XML contains non-ASCII strings, they are ***** double-encoded. ***** Note: Now Config_XML::getHash() returns encoded values, not ***** utf8-flagged values. So '>:utf8' layer should not be used. [7573] wwsympa/Auth.pm, wwsympa/wwsympa.fcgi.in: [Reported by R. Tassoni, National Library of Australia] Requests for new password with email address containing an apostrophe, SQL queries fail. [7564] wwsympa/wwsympa.fcgi.in: [#6956] Uploading file is refused if any disallowed characters appear in its directory part. Relaxed regexps to allow any characters before / or \. [7563] wwsympa/wwsympa.fcgi.in: [#8462][Reported by S. Thomas] arcsearch_id can not find message if Message-ID contains a hyphen ("-") [7561] src/lib/List.pm: [#8456][Submitted by P Vandry] message headers and footers should not have filenames. [7560] src/lib/List.pm: [#8458][Reported by K. Clair] sympa.pl distribute dies if $msg->bodyhandle is undefined. Corrected typo in List.pm. 6.1.14 July 27, 2012 Features: [7511] src/lib/tt2.pm, wwsympa/wwsympa.fcgi.in: Now WWSympa responds with "404 Not Found" status code, instead of sending notification to listmaster, if any random pages under /sympa/help/ are requested. Added new option 'has_header' for tt2::parse_tt2() to prepend newline to page body so that TT2 parse error can be handled before all HTTP headers have been sent. Changes: [7529] po/LINGUAS, po/Makefile.in.in, po/ar.po, po/bg.po, po/br.po, po/ca.po, po/cs.po, po/de.po, po/el.po, po/en.po, po/en_US.po, po/es.po, po/et.po, po/eu.po, po/fi.po, po/fr.po, po/gl.po, po/hu.po, po/id.po, po/it.po, po/ja.po, po/ko.po, po/la.po, po/ml.po, po/nb_NO.po, po/nl.po, po/oc.po, po/pl.po, po/pt.po, po/pt_BR.po, po/ro.po, po/ru.po, po/sv.po, po/sympa.pot, po/tr.po, po/vi.po, po/zh_CN.po, po/zh_TW.po, po-wwsympa/LINGUAS, po-wwsympa/en.po, po-wwsympa/en_US.po, src/lib/Language.pm, src/lib/confdef.pm, src/lib/mail.pm, wwsympa/wwsympa.fcgi.in: Now the English locale is the - more general - 'en' instead of 'en_US', saving people the need to install the en_Us if they don't use it. Bug fixes: [7526] web_tt2/subscriber_table.tt2, wwsympa/wwsympa.fcgi.in: [#6931][Reported by D. Pritts, Internet2] On the review page for the list without any subscribers, a message "ERROR (review) - List has no subscribers" is shown. It is not an error. [7523] src/etc/script/create_db.Oracle, src/etc/script/create_db.Pg, src/etc/script/create_db.SQLite, src/etc/script/create_db.Sybase, src/etc/script/create_db.mysql: Updating database creation scripts with correct indexes definition. [7509] src/lib/Conf.pm, src/lib/confdef.pm: User friendly automatic lists were not robot-enabled. Fixed. 6.1.13 July 20, 2012 Features: [7489] wwsympa/wwsympa.fcgi.in: By default, arcsearch (simple) searches in current month and in the previous non-empty one. [7488] src/lib/List.pm, src/lib/tools.pm, src/sympa.pl.in: Revived "Re:" munging. cf. Feature Request #1044. - Supports "Re:" and its equivalents: "AW:" (de); "?\208?\157?\208?\144:" (ru etc.); "Re:" (en, la etc.); "Rif:" (it); "SV:" (da, sv); "VS:" (fi). Additionally, command in subject with them can be recognized. - Multiple "Re:" and its equivalents in case of "Subject: AW: Re: quelque chose" will be truncated . - custom_subject will be placed at beginning of subject in case of "Subject: Another was Re: [list] Something". [7448] mail_tt2/user_notification.tt2, src/etc/Makefile.am, src/etc/scenari/automatic_list_creation.family_owner:7447), src/lib/Conf.pm, src/lib/Family.pm, src/lib/List.pm, src/lib/Scenario.pm, src/lib/Upgrade.pm, src/lib/admin.pm, src/lib/confdef.pm, src/sympa.pl.in, web_tt2/Makefile.am, web_tt2/automatic_lists.tt2:7447), web_tt2/automatic_lists_management_request.tt2:7447), web_tt2/automatic_lists_request.tt2:7447), web_tt2/family_signoff.tt2:7447), web_tt2/family_signoff_request.tt2:7447), web_tt2/family_signoff_request2.tt2:7447), web_tt2/menu.tt2, wwsympa/wwsympa.fcgi.in: [Requested and funded by the CNRS] Automatic lists can now be manipulated through the sympa web interface, in a "user friendly" form. This is merely a web layer around the general autmatic lists feature. This feature is fully documented here: https://www.sympa.org/manual/list-families#user-friendly_automatic_lists Additionnally, it is now possible to unsubscribe from all the lists of a given family in two clicks. Changes: [7490] web_tt2/help_admin.tt2, web_tt2/help_introduction.tt2, web_tt2/help_listconfig.tt2, web_tt2/serveradmin.tt2: Some fixes on help --- - web_tt2/help_listconfig.tt2: Removed non-existing visibility scenari (private and semipublic). - web_tt2/serveradmin.tt2: changed link to translation FAQ. - web_tt2/help_introduction.tt2, web_tt2/help_admin.tt2: Removed dead links to example of charters. [7367] src/lib/Upgrade.pm: Removing mandatory NOT NULL references from most of the fields in list_table table Bug fixes: [7480] src/lib/admin.pm: [#8425][Reported by Steve Shipway] List table was not populated upon command line list creation. ***** [7479] soap/sympasoap.pm: [#7733][Submitted by A. Bernstein, Electric ***** Embers] SOAP 'add' function resets subscriber's password [7478] wwsympa/wwsympa.fcgi.in: Fixed list log search date regexp to accept dashes and removed admin notice if no list logs found (which can occur if no match). 6.1.12 July 20, 2012 Cacelled due to errors in the packaging. 6.1.11 May 11, 2012 Bug fixes: [7358] wwsympa/wwsympa.fcgi.in: Fixing a potential security issue related to archives [7357] src/lib/Scenario.pm: When upgrading from 6.1.9 to 6.1.10 the db list cache was not initialized, due to a badly defined upgrade test. fixed by raising the version number tested. [7356] src/lib/Upgrade.pm: A removed question mark in the regexp evaluating scenario rules would break some scenario evaluations. 6.1.10 May 10, 2012 Features: [7341] configure.ac: [Submitted by X. Bachelot] New configure option available: --with-staticdir. this option allows admins to specify the location of the static data directory. this directory is used for data that don't need to be parsed by Sympa at each web request, e.g. CSS, icons, etc. [7326] wwsympa/wwsympa.fcgi.in: Search on list review page allows case-insensitive match for non-ASCII letters. [7323] src/lib/admin.pm: If the following files are defined in the family directory, they are parsed and installed for each list in the family: - message.footer.tt2 (parsed as message.footer) - message.header.tt2 (parsed as message.header) - message.footer.mime.tt2 (parsed as message.footer.mime) - message.header.mime.tt2 (parsed as message.header.mime) - info.tt2 (parsed as info) For now, these files are parsed at list creation only. Later improvments will allow these files to be recreated when a list is reinstantiated. ***** [7321] src/lib/Conf.pm, src/lib/List.pm, src/lib/Upgrade.pm, ***** src/lib/admin.pm, src/lib/confdef.pm, src/sympa.pl.in, ***** wwsympa/wwsympa.fcgi.in: [Patch from Riseup] Adding a database cache of ***** several list config values. This cache allows to speed up list ***** searches, pending lists page and such. The upgrade automatically ***** initiates the db cache. Changes: [7342] web_tt2/editfile.tt2, wwsympa/wwsympa.fcgi.in: [Reported by E. Duval, CGT] In edit_list.conf, the "info" key controlled both the info list parameter and the info file. Now, when one needs to control the edition of the info parameter, one will use the key "info" in edit_list.conf. If one needs to control the edition of the info file, one will use the key "info.file" in the edit_list.conf. [7328] web_tt2/suspend_request.tt2:7326), web_tt2/help_user.tt2, web_tt2/suspend_request.tt2: [Submitted by S. Ikeda]Move subscription management documentation to the help. ***** [7327] doc/sample/config.include, src/etc/edit_list.conf, ***** src/lib/Commands.pm, src/lib/Family.pm, src/lib/List.pm, ***** src/lib/admin.pm, src/task_manager.pl.in, web_tt2/help_editlist.tt2, ***** web_tt2/subscriber_table.tt2, wwsympa/wwsympa.fcgi.in: [Submitted by ***** S. Ikeda] 'user_data_source' list parameter is obsoleted; only ***** 'include2' was its available value. [7312] src/etc/edit_list.conf: Removing default config hiding default_user_options config options to list owners. Bug fixes: [7347] src/lib/Scenario.pm: In some cases, scenario evaluation would fail due to a question mark having been insterted in the scenario rule evaluation regexp. Fixed by removing this question mark. [7340] soap/sympa_soap_server-wrapper.fcgi.c, soap/sympa_soap_server.fcgi.in, wwsympa/wwsympa-wrapper.fcgi.c, wwsympa/wwsympa.fcgi.in: [Submitted by E. Bouthenot] In version 5.14.2 of Perl, wwsympa.fcgi execution would trigger a segfault, for exemple when creating a one time ticket. this was due to the perl '-U' option being used in the wwsympa shebang. fixed by removing it from the shebang and using C functions in the C wrapper to change the real user and group ids. [7339] src/lib/Message.pm: [#8331] StripScripts breaks HTML parts with 7-bit charset in messages. [7331] src/lib/Bulk.pm, src/lib/tools.pm: Bulk daemon was sometimes dying unexpectedly when local database went away then was available again. This was caused by 2 things. The first one was a wrong way to managed the pid file, ending in multiple whitespaces beeing inserted randomly between pids. The second one was an error in the database connexion managment ending in loosing the reference to the right SQLSource object. [7322] src/lib/admin.pm: When renaming a list, the directories containing the HTML version of messages to be moderated where not renamed. The editors sould therefore not see the message content in the moderation page. fixed by parsing files starting with a dot and by adding a the regexps to test these directories name. ***** [7319] src/lib/List.pm: [Submitted by M. Woloszyn, univ. Silesia] When ***** the "reply_to' parameter had the values "sender" for field "value" and ***** "forced" for field "apply", some MUA (Outlook and Thunderbird) did not ***** reply to the message sender but to the list. this was due to the ***** reply-to header being left undef in that case. fixed by forcing the ***** field value to the email original sender. [7309] src/lib/List.pm: [Submitted by O. Lacroix, CIRIL] When using a MySQL backend, sorting addresse by domain wouls not work due to double quotes in the SQL query around the keyword "dom". This lead to a bad usage of the nrcpt parameter. Fixed by removing the double quotes. 6.1.9 March 21, 2012 Bug fixes: [7294] src/lib/List.pm, src/lib/Upgrade.pm, wwsympa/wwsympa.fcgi.in: the exclusion table was not robot-aware, thus potentially leading to mutliple unsubscriptions if several lists having the same local part were present in several robots. Fixed by adding a "robot_exclusion" column to the exclusion table. this column will be automatically filled when upgrading Sympa. [7261] src/lib/List.pm: [Reported by J.H. Belpois, univ. Brest] When a lot of lists used inclusions for their members, displaying the list of lists could lead an error 500. This was due to attempts to include list ADMINS even though they were not included from external sources. These attempts led to the creation of write locks (include_admins.lock) that, beyond a certain number of lists, led to automatic collisions with read locks used when gathering the admins mail addresses. After a certain number of collisions, the web request timed out. Fixed by quitting the skipping the admin sync when no admin source is defined. [7254] src/bulk.pl.in: [Submitted by P. Vandry, TZoNE.ORG] The VERP return path was never correctly set due to a bad variable initialization. [7248] src/lib/List.pm: [#7424] Excluding then restoring (eg manually subscribing) an included member resulted in member being included and subscribed at the same time. [7215] src/lib/List.pm, src/lib/Lock.pm: [Reported and boldly tested by O. Menkens] In perl, when the real and effective uids of a sccript are different, the tainted mode is activated. This caused mod_fcgid to issue a lot of "Insecure dependency" errors in the Apache logs. Fixed by untainting the variables causing these errors. [7211] mail_tt2/summary.tt2: [Submitted by A. Bernstein, electricembers.net] The summary.tt2 template contained a wrap TT2 command that caused the URL to be broken. Fixed by moving this command around parts of the message that don't contain URLs. [7208] configure.ac: [Submitted by R. di Cosmo] When installing Sympa, if configure was used with the --enable-fsh option, then the lists directory was incorrectly set. [7205] src/sympa_wizard.pl.in: When using the SOAP server, if the lists subjects or gecos fields included UTF-8 characters. The response content-length header was smaller than the real character count in the response document, thus, clients created too small buffers to process the XML document and validation of said document failed. This issue was due to the fact that libwww is counting characters instead of bytes. Fixed by upgrading to the latest version of SOAP::Lite. 6.1.8 January 09, 2012 Cancelled du to errors in the version. 6.1.7 August 25, 2011 Bug fixes: Upgrading the required version for Unicode::LineBreak to fix the problem of borken URL in service messages such as moderation request. 6.1.6 July 20, 2011 Bug fixes: [7135] web_tt2/notice.tt2, wwsympa/wwsympa.fcgi.in: [Reported by J.C. granger, INRA] In the "Manage your subscriptions" page, list members could unsubscribe from list where unsubscription was closed. Fixed by checking authorization scenarios. [7132] wwsympa/wwsympa.fcgi.in: [Reported by F. Gadin, univ. La Rochelle] The code in wwsympa used the - deprecated - way of testing hash emptiness. Fixed by removing the "defined" pragma when testing whether the has contains a defined value. [7131] src/lib/tools.pm: In some cases, sympa.pl would reach 100% CPU while processing a message. Fixed by updating the way the text is wrapped when a message is constituted. [7124] src/etc/mhonarc-ressources.tt2: [#7055][Submitted by Andras Bendzsak] email with RFC5322-incompliant mailbox quoted by MTA such as Postfix messes archive browsing. Backported from trunk. [7119] wwsympa/bounced.pl.in: filehandle was not closed. Backport from trunk. 6.1.5 June 06, 2011 Changes: [7014] src/lib/Conf.pm: [#7071]CGI.pm changes environment variable names ('-' => '_') While using generic_sso, declared environment variable names needs to be transformed accordingly Bug fixes: [7059] wwsympa/SympaSession.pm: [Reported by V. Carpier, AC Réunion (but seriously, he was in the CRU before!)] SympaSession.pm caused "fetch without execute" errors to be issued into the Apache error logs. This was due to a second call to "fetchrow_hashref" after all the lines had already been fetched, and the statement handler subsequently finished. Fixed by including result fetching into a loop. [7055] src/lib/Upgrade.pm: reported by gauthier Catteau Message-ID may be longer than 100 chars and so they may result in a SQL error. [7019] src/lib/Scenario.pm: [#7521][Submitted by E. del Rio] Explicit incldes in scenarios did not longer work because the rules using them did not have an authentification method. Fixed by adding them to the scenario list as soon as they are found in the main scenario body. [7012] src/lib/SQLSource.pm: [Reported by J.C. Vergerolles, univ. Bordeaux 2] Some DBD, such as DBD-Oracle, issue croak statements when the connexion can't be established. This lead to sympa crashing just beacuse the database is unreachable. Fixed putting each database connection attempt in an eval block. If the connection fails, Sympa retries to connect if asked or simply returns undef after logging. [7011] src/lib/Conf.pm: [#7071][reported by I.Krzysztof]While using generic_sso, allow other characters for the 'netid_http_header'parameter (including hyphen). [7004] mail_tt2/sendssopasswd.tt2, web_tt2/sso_login.tt2, wwsympa/wwsympa.fcgi.in: [#7070]Login with generic_sso failed when 'force_email_verify' was enabled The problem was due to the user password no more stored in the user DB. Usage of password to validate the user email address has been replaced with one-time tickets. [7003] src/lib/List.pm, wwsympa/wwsympa.fcgi.in: [#5989][submited by A.Bendzsak] change_email web feature did not updae the netidmap_table. Now it does. [7002] wwsympa/wwslib.pm: [#3049][reported by L. Foucher, IUT P. Sabatier] CAS authentication failed when Sympa web server was behind an HTTP reverse proxy. The URL of the service passed to the CAS server was incorrect. Now using get_header_field() that can use 'HTTP_X_FORWARDED_HOST' env variable if set. 6.1.4 January 21, 2011 Changes: A lot of translations have been updated: - Swedish (P. Freyhult) - Russian (S. Dukachev) - Polish (M. Woloszyn) - Japanese (S. Ikeda) - Estonian (U. Buhvestov) - Hungarian (A. Bendszak) - German (J. Krehbiel-Graether) - Catalan (J. Giralt Baldellou) Many thanks to all of you, Sympa translators! [6986] src/lib/List.pm, web_tt2/get_inactive_lists.tt2, wwsympa/wwsympa.fcgi.in: [Submitted by M. Lievre, Orange] Adding detailed informations to the get_inactive_lists page of the web interface. [6980] src/lib/List.pm: [#7392][Submitteb by A. Bernstein, electricembers.net] Some MUA and the web page sending option in Sympa use Multipart/related content-type. In this case, the footer was not appended to messages. [6972] mail_tt2/message_report.tt2, src/sympa.pl.in: [#7420][Submitted by A. Bernstein, electricembers.net] When a message is rejected because it exceeds the maximum allowed size for a list, the report now provides informations regarding the size of the mesage, the maximum allowed size for this list and a technical notice regarding attachments. [6968] wwsympa/wwsympa.fcgi.in: On list created through the web interface, if the list name contains higher case letters, they are lower cased to prevent any later inconsistencies in data describing the list. The user is warned about it. [6753] src/etc/script/sympa.in: [#6847][Submitted by S. Ikeda] The sympa init script now actually waits for the dameon to be stopped (up to 20 seconds) prior to issuing a status message (failed or success). Bug fixes: [6988] wwsympa/SympaSession.pm, wwsympa/cookielib.pm: [#7423][Reported by M. Larchet, univ. Nancy 2] The CGI::Cookie.pm module issues a warning when trying to parse an empty cookie. This led to overwhelming warning logs in Apache error_log. Fixed by not trying to parse an empty cookie and directly return undef, which would have happenned anyway because the needed cookie is obviously not here in such a situation. [6987] wwsympa/wwsympa.fcgi.in: [Reported by M. Larchet, univ. Nancy 2, M.Lièvre, Orange and L. Grégoire, ENSEEIHT] Owners trying to access the list config edition form, section "Sending/receiving setup" when: 1- No digest parameter was defined in the config file and 2- they had only read access to the digest parameter were being displayed an empty page. this was due to a faulty population of this parameter. Fixed by affecting a "type = enum" value to the parameter hash. [6984] src/lib/Upgrade.pm: [#7372][Reported by L. Breuil] Upgrading to 6.1.3 broke Sympa startup when using SQLite, because Sympa tried to use the CHANGE query, which is unavailable in SQLite. Short term fixed by not trying to change database fields with SQLite. The automatic upgrade of database will be completely rewritten with version 6.2. [6982] web_tt2/editsubscriber.tt2: [#7376][Submitted by A. Bernstein, electricembers.net] If you narrowed your browser window or zoomed the text size enough that the row of admin tabs had to wrap to a new line, the entire contents of the editsubscriber.tt2 page would shift off to the right side of the browser. What was left behind under the admin tabs was just a blank box. Fixed by enclosing the whole editsubscriber.tt2 file content with
. [6981] src/lib/admin.pm: [#7391][Reported by A. Bernstein, electricemebers.net] The homepage file was not copied when renaming a list. [6978] wwsympa/wwsympa.fcgi.in: [#7409]The template in user_notification.tt2 for the sigrequest action was missing the $list parameter, so the $list.name variable came out blank in the resulting message to user. Fixed by adding the parameter to the $tt2_param list. [6977] src/lib/List.pm: [#7410][Submitted by A. Bernstein, electricembers.net] In List::send_file(), there were certain times when the sender value was getting set to the recipient when it shouldn't be. Fixed by checking that the sender field has not been previously set before affecting the $who var to ist value. [6976] wwsympa/wwsympa.fcgi.in: [#7411][Submitted by A. Bernstein, electricembers.net] After editing a subscriber's options (do_set()), a list owner was returned to the suboptions page by default (if previous_action wasn't populated), which porduced an error message if the owner happenned to not be subscribed to the list. Fixed by redirecting to the list's info page instead. [6974] wwsympa/wwsympa.fcgi.in: [#7412][Submitted by A. Bernstein, electricembers] At the end of do_reviewbouncing(), the $param->{'size'} setting was taken from $in{'size'}. ItI should actually be set to $size, which is equal to $in{'size'} if it's provided or else defaults to the wwsconf setting if not. This created an error under some conditions. [6973] src/lib/PlainDigest.pm: [#7417][Submitted by A. Bernstein, electricembers.net] Some outdated MUA, like Eudora, use an uncommon MIME type called text/enriched, which provides formatting without HTML. Such a proprietary formatting is not worth a special develmopment - ragarding what is possible with HTML, so we treat it now as text/plain. [6971] wwsympa/wwsympa.fcgi.in: [#7421][Submitted by A. Bernstein, electricembers.net] The message displayed on the web when attempting to create a list which already exists was incorrect, due to a call to a call to reject_report_web() using the wrong error condition. [6970] src/etc/script/create_db.SQLite: [Reported by L. Breuil] Fixing two typos in the create_db.SQLite script. [6942] src/lib/Scenario.pm: [#7356][Submitted by A. Bernstein, electricembers.net] a space between two auth methods in scenario (e.g. smtp, md5 instead of smtp,md5) caused the second authentication method to be ignored. Fixed by changing the regexp responsible of scenraio rules extraction. [6765] src/sympa.pl.in: [Reported by J. Arnoux, infomaniak.ch] When a message was rejected because its size exceeded the allowed quotas, it was forwarded with the rejection report message. It made no sense because rejection based on the size is there to prevent the circulation of too large files. In addiotion, very large messages caused Sympa to hang on the reprot generation, doing nothing without crashing. [6763] mail_tt2/listmaster_notification.tt2, wwsympa/bounced.pl.in: [#6747][Reported by D. Pritts, Internet2] A call to send_notify_to_listmaster was done using a non existing error_code. Fixed by creating a dedicated error code to be issued when bounce related errors occur. [6757] src/etc/scenari/spam_status.x-spam-status: [#7076][Reported by D. Pritts, Internet2] The default antispam scenario included the following regexp test on the X-Spam-Status header: /yes/. this was true for any antispam engine using the expression "bayes". fixed by changing the regexp to /^\s*yes/. [6755] src/lib/List.pm: [#6883][Submitted by S. Ikeda]* Topics tagging did not work properly on encoded subject and on message body using charset other than US-ASCII or UTF-8. * case-ignore match was available only on Latin letters without accents. [6754] src/lib/Lock.pm: [#7015][Submitted by S. Ikeda] In some distributions (RHEL 5 for example) File::temp package conflicts with OS-bundled perl. Users need then to install the package manually. Errors are then triggers when using NFS. Fixed by calling explcitely the "new" sub when creating a File::NFS object. [6752] src/lib/mail.pm: [#7003][Submitted by S. Ikeda] Bodies of service messages were encoded by list character set, diregarding the actual receipient lanquage preferences. Fixed by testing user preferences prior to set the message charset. [6751] src/lib/List.pm, src/lib/Message.pm: [#6385][#6396][#7029][Submitted by S. Ikeda] Messages containing a subject with illegal charset crashed sympa.pl. Fixed by verifying that decoding is possible before doing it and leaving otherwise the subject unchanged. [6749] wwsympa/wwsympa.fcgi.in: [#6530][Submitted by S. Ikeda]If you chose in WWSympa to have the digest for a list go out only on, say, Saturday, it would instead go out on Sunday. There was a mismatch somewhere between the days of the week referenced by WWSympa and by sympa.pl. Fixed by replacing the call to "localtime" by a call to "gmtime". See explanations by A. Berstein in the follwing URL for details: https://sourcesup.cru.fr/tracker/?group_id=23&atid=167&func=detail&aid=6530 [6745] src/lib/tools.pm, src/sympa_wizard.pl.in: [#7301][Submitted by S. Ikeda] sympa.conf and cookies.history contain confidential information. Access to them should be restricted. Fixed by making Sympa set their access permissions to 740. 6.1.3 November 15, 2010 Bug fixes: ***** src/lib/confdef.pm, wwsympa/Auth.pm: [Reported by N. Matthies] Since ***** revision 6168, when a user logged in using LDAP with an email address, ***** if this address was returned by the LDAP server, the user was ***** authentified with this address. Some administrators prefer to force the ***** usage of canonical addresses. If you want to let userssubscribers use ***** the address they used logged in with, set the value of the new ***** wwsympa.fcgi parameter "ldap_force_canonical_email" to '0'. src/lib/List.pm, src/lib/PlainDigest.pm, src/lib/tools.pm, src/sympa_wizard.pl.in, wwsympa/Challenge.pm, wwsympa/SympaSession.pm: [#4452][C.Hastie, S.Ikeda] Issue: handling of different character sets in PlainDigest.pm was poor. Messages were assumed to be in ascii, iso-8859-1 or a closely related character set, and if they were not all characters above \x80 were dumped to provide crude, lossy iso-8859-1 output.updated PlainDigest.pm which normalises all parts to UTF-8. Cleanup from Soji : - don't bother trying to find path to lynx unless use_lynx is true - anchor content-type test strings to end of string to avoid picking up malformed headers as per bug 3702 - local Text::Wrap variables - moved repeated code to get charset into sub _getCharset - added use of MIME::Charset to check charset aliases src/lib/tools.pm: Fixing a rule problme with Stripscript. src/lib/Message.pm: Plain text message lost linebreaks in the web archives. This was due to the text/plain parts in mesasges were handled by Stripscript. Fixed by only handling test/html parts with Stripscripts. src/etc/script/create_db.mysql: [Reported by Sungmo Ahn] Fix createdb.mysql. 6.1.2 November 05, 2010 Bug fixes: src/etc/script/create_db.mysql: Fixe from Bob Wood in create_db script for mysql src/lib/Bulk.pm: While using "merge_feature on", bulk.pl would die if the processed mail's encoding was either not defined or unknown to the Encode perl module. The error message in STDERR was: "Unknown encoding '' at /home/sympa/bin/Bulk.pm line 283". wwsympa/wwsympa.fcgi.in: fix In-reply-to:<> header that make thread display in mutt or mozilla eroneous (reported by Peter Schober univie.ac.at 6.1.1 October 22, 2010 This version includes a lots news such as DKIM support, autosignoff footer link included in lists messages, ... Various vulnerability have been solved in 6.1.1 : cross side scripting, cross-Site request forgeries, brute force attack, DOS. These vulnerabilities were identified with the help of P. Gardenat (Rectorat de Rennes) during a security audit on Sympa. WE STRONGLY SUGGEST YOU TO UPGRADE ANY PREVIOUS VERSION TO 6.1.1 The changes and features below are the compilation of the announces made for the previous beta releases of Sympa 6.1b.x. Don't bother read them if you followed the beta. The bugs specifically fixed in each beta are still referred in these beta version sections below. NOTE THAT DKIM FEATURE REQUIRES THAT YOU UPDATE YOUR CUSTOM AUTHORIZATION SCENARIOS (see DKIM bellow) Bug fixes: src/lib/List.pm: Double quotes around field names in "order by" SQL clauses caused said order to have no effect. fixed by removing the double quotes for all supported RDBMS. It looks like none of them uses such a syntax. src/lib/mail.pm: HTML pages sent through the web interface arrived with an empty body. this was due to a bad variable intialization in the reformat_message sub in mail.pm. This var is now initialized and the problem vanished. wwsympa/wwsympa.fcgi.in: In some - difficult to precisely describe - configurations, sessions could be messed due to an inner cache of cookie environement variable, either in Apache of perl. Fixed by force-blanking this variable as soon as we affect it to a session. CAS authentication bug when multiple httpd parameter are submitted (fix by Vincent Bonamy) src/lib/LDAPSource.pm: [#6802] [T.Berry, NASA] Remove duplicate code + variable declared twice wwsympa/wwsympa.fcgi.in: [#6842] [S.Ikeda] /help/editlist does not show title of parameters src/lib/tools.pm: [#6901][reported by D.Black] tools::smime_decrypt() could make sympa.pl process crash. src/lib/tools.pm, wwsympa/wwsympa.fcgi.in: [S.Ikeda][#3779] Comma in gecos caused invalid From: in Web posting. New tools::addrencode() for proper encoding of From: SMTP header field according to RFC5322. src/lib/Upgrade.pm, wwsympa/wwsympa.fcgi.in: [#4106][reported by M.Larchet] Shared documents could not get manipulated. This was due to changes in the algorithm of MIME::EncWords::encode_mimewords() function (chars -_+! no more Q-encoded). The problem started with version 1.010 of MIME::EncWords. The fix consists in a massive renaming of shared files (according to new algorithm) during sympa.pl --upgrade. src/lib/mail.pm, wwsympa/wwsympa.fcgi.in: [#3984] [submitted by S.Kristoffersen] Restored code to add Auto-Submitted SMTP header field. mail::mail_file() does not set this header when 'not_auto_submitted' is set, ie when wwsympa sends commands to sympa.pl through the msg/ spool. src/lib/Lock.pm: [#6513] [Landry Breuil] Fix errors in apache error log (Use of uninitialized value in sprintf) when debug is enabled configure.ac, doc/Makefile.am: [#6855][S.Ikeda] Samples were installed under / and sympa.pdf was not installed. Added missing docdir def in configure.ac + AC_PREREQ(2.60) configure.ac: [O.Lacroix, CIRIL] ./configure --help was not consistant with the directory defaults. Changed the help message for the following options : --with-expldir, --with-spooldir, --with-scriptdir, --with-modulesdir ***** piddir default changed from PREFIX/var to /var wwsympa/wwsympa.fcgi.in: [#6879][reported by A.Koshokin, Intel] Fixed the BASE HTML tag. The base previously was the archive directory, now setting it to the archive message. Bug description: NAME anchors within HTML archived messages were broken. src/lib/Bulk.pm: [#7038][reported by D.Pritts, Internet2] Prevent duplicate entry error in Bulk::store(). This error occured while sending duplicate service messages (same content to the same user). The listmaster is no more notified, but the second instance of the message is still not sent; this should be fixed. wwsympa/wwsympa.fcgi.in: To field was not set while sending the sendpasswd service message. This bug was introduced in revision 5150. src/lib/Lock.pm: The debug4 log facility does not exist. Replacing its occurences with debug3. mail_tt2/listmaster_notification.tt2, src/lib/admin.pm: [#7053][D.Pritts, Internet2] Listmaster notification for renaming was wrong - got "list copied" notification instead. src/lib/Conf.pm: Previously only default distributed css.tt2 was used to generate CSS files in static_content/. Now also checking customized css.tt2. src/lib/List.pm: fix verp rate 0 ase where Sympa do not send messages to subscriber with bounces src/sympa_wizard.pl.in: Encoding in body of web composed messages was broken. Now require version 1.03 of HTML::StripScripts::Parser wwsympa/wwsympa.fcgi.in: Functions rename_list and change_email could not be run by a robot listmater. Added missing $robot parameter to List::is_listmaster() calls src/lib/Lock.pm: Invalid log facility for some logs in Lock.pm. It looks like we can't go below debug3. src/lib/Bulk.pm: [#6937][#6907][#6915][Reported by S. Dukachev, A. Gouaux and A. Michon (in order of apparition)] The query used to store packets in the bulk_mailer table did enclose interger values between quotes, which is not correct. In addition, it obfuscated the problem that the '$merge' parameter was sometimes undefined. This led to trying to submit an insert query containg a value '' for an integer field. Fixed by suppressing quotes for integer values and ensuring that the $merge variable has a value set. web_tt2/Makefile.am: [Reported by P. Evans] The edit_config.tt2 file was not installed during the "make install" because it was not declared in the Makefile.am. src/etc/script/create_db.Oracle, src/etc/script/create_db.Pg, src/etc/script/create_db.SQLite, src/etc/script/create_db.Sybase, src/etc/script/create_db.mysql: [Reported by A. Michon, IBCP and A.Gouaux] In the create_db.* scripts, some of the name of the fields related to DKIM were uncorrect, leading bulk.pl to fail starting. These names are now correct. src/etc/script/create_db.Pg: [reported by A. Michon, IBCP] A typo in create_db.Pg caused the db creation query to fail. wwsympa/wwsympa.fcgi.in: Dan Pritts fix https://sourcesup.cru.fr/tracker/index.php?func=detail&aid=6839&group_id=23&atid=167 src/lib/List.pm: Reverting a part of revision #6227. This lead to datasources loosing all their subscribers when using a single datasource and the synchronizing failed. src/lib/List.pm: When calling send_notify_to_owner, the '$param' parameter was used as a hash, wihout checking first that it was actually a hash. in some cases though, such as in set_status_family_closed(), it was a ref to an array. This caused Sympa to crach with a "Can't coerce array into a hash" error. Fixed by moving the bad line in the hash-specific part of the sub. wwsympa/wwsympa.fcgi.in: security fix : block login submitted with any http method but POST. (security audit vuln #5) web_tt2/edit_config.tt2: missing template for config editor src/etc/script/arc2webarc.pl.in: fix incorrect check of date format that block 2010 messages (reported by Omen Wild (ucdavis.edu) src/etc/script/create_db.Sybase: fix missing conf_table in Sybase creation script. web_tt2/error.tt2, wwsympa/wwsympa.fcgi.in: Now shared document can't be read or edited unless list is open. This is a security fix soap/sympa_soap_client.pl.in: Fixed a bug that prevented authentication while using authenticateAndRun() src/lib/SQLSource.pm: [Submùitted by F. Lachapelle, Inverse] If the db_type is set to Oracle and db_port is specified in the main configuration file, than the port would appear two times in the connection string. src/lib/tools.pm: [reported by F.Fareneau, univ Valenciennes] shared documents/folders names were badly encoded while using Encode >= 2.19. The issue was related to a low level subroutine (Encode::MIME::Header::_encode_q()) that slightly changed its API (expecting unicode instead of bytes parameter). Now using MIME::EncWords::encode_mimewords() instead. src/lib/tools.pm: [#6552] [Soji IKEDA] Wwsympa would stall while loading session data including metacharacters. Existing code (tools::string_2_hash()) would loop on a regular expression match. Patch also escapes ``"'' characters. src/sympa.pl.in: [Submitted by H. Moa] Some message could cause a sympa.pl crash. Fixed by embedding the dangerous part of the code in an eval statement. src/lib/List.pm: Users received the same message multiple times. This was due to a problem in the VERP provisionning. When filling the array containing the users for which VERP will be used, Sympa add to sources of users : a certain rate of all the users and all the users that have a high bounce rate already. for each reception mode, Sympa provisions VERP users this way. the problem was the following: for each reception mode, Sympa used the list of users using the default distribution mode instead of the list of users using the specific distribution mode currently treated. this lead to the addition, to the list of bouncing users of each reception mode, the list of users selected to receive the message in VERP for normal reception mode instead of the high bouncers for this reception mode. fixed by using an aray variable regarding the kind of reception mode currently treated. src/bulk.pl.in, src/lib/tools.pm: When parsing a message to merge or verifying DKIM signature, a MIME::Parser object was created and the message parsed into a MIME::Entity. The output of the parser was not set to core, so it used its default: the filesystem. It led to the creation of a lots of files in the expl directory, that were never removed. Fixed by adding the line : src/bulk.pl.in: bulk.pl exited when it could not remove the packet it had juste sent. It now only issue an error messge in the logs. mail_tt2/urlized_part.tt2, src/lib/List.pm: Urlize messages charset was nor properly set. Consequently, bulk crashed when trying to merge the message. In addition, a faulty var name caused Sympa to try to send the originla message instead of the urlized message. src/lib/Bulk.pm: Messages were tagged multiple times as last. mail_tt2/command_report.tt2: fixed bug introduced in revision 6187. Sympa.pl would send empty command reports with a "Failed to parse command_report.tt2 : Template::Exception" error in its log file wwsympa/wwsympa.fcgi.in: Fixed bug introduced in revision 5998. web signoff did not recognize authenticated users. src/bulk.pl.in: When merge was not activated, Messages were not initialized, leading to empty messages. src/lib/Bulk.pm: remove usage of fingerprint authentication token web_tt2/compose_mail.tt2: remove some coin coin style text src/lib/List.pm: [#3047][reported by N.Chipaux, Mandriva] Some service messages sent by Sympa would use an unappropriate language (did not match the user language). This issue happened whenever a message was sent to more than one reciepient; the first user's language was used for the following ones. Fixed List::send_file() and List::send_global_file(): now duplicating the 'context' parameter to prevent changes of the original data structure. src/lib/confdef.pm: http_host was not set by default in syma.conf, making the sympa wizard to fail starting. doc/sample/test/web_tt2/welcome.tt2, sympa.spec.in, wwsympa/Auth.pm: [Submitted by M. Warkus, univ. Marburg] When a user logged in, using LDAP, by providing an email address, if this email was not the first one in the LDAP email attribute, then the uiser was not logged with the address she provided but with the default address found in the LDAP directory. Now, if an email is provided and the login is successful ,the user is logged in with the email she provided. doc/sample/test/web_tt2/welcome.tt2, soap/sympa_soap_client.pl.in, sympa.spec.in: Fixed a typo in the sympa_soap_client.pl command line tool that prevented the service parameters to be used. doc/sample/test/web_tt2/welcome.tt2, src/sympa_wizard.pl.in, sympa.spec.in: Installed MHonArc version was not properly detected doc/sample/test/web_tt2/welcome.tt2, src/sympa_wizard.pl.in, sympa.spec.in: Can't do $module->require() since we no more require the UNIVERSAl::require module. Replaced with eval "require $module". Makefile.am: [Submitted by M.Deranek] On a multi core system, installdir & installconfig targets can run in parallel. Added a dependency between these targets. doc/sample/test/web_tt2/welcome.tt2, src/lib/Bulk.pm, src/lib/List.pm, sympa.spec.in: Missing "use WebAgent" directive since recent reorganization of code (revision 5939). Makefile.am, doc/sample/test/web_tt2/welcome.tt2, src/lib/tools.pm, sympa.spec.in: [#6380][Reported by M.Warkus, Philipps-Univ. Marburg] Added a line break to written PID files. configure.ac, doc/sample/test/web_tt2/welcome.tt2, sympa.spec.in: Fix typo introduced in recent commit. src/lib/Conf.pm: [Submitted by M. Warkus, univ.Marburg] Inverted test caused the config not to be loaded. Makefile.am: The last install message didn't tell to launch sympa_wizzard.pl but sympa.pl. src/lib/Conf.pm, src/lib/confdef.pm: Now Sympa don't complain about optional robot parameters without definition in sympa;conf and wwsympa.conf. Sympa now stop because of required robot parameters without value (minimum a default). wwsympa/wwsympa.fcgi.in: [reported by N.Matthies] Added notice when user preferences have been updated doc/sample/test/web_tt2/welcome.tt2, po/de.po, po-wwsympa/de.po, sympa.spec.in, web_tt2/help_listconfig.tt2, web_tt2/help_shared.tt2, web_tt2/help_user.tt2: [Submitted by M. Warkus, univ. Marburg] Reporting commits 6012 and 6013 from the 6.0 branch: german translation and fixed typos in webhelp. src/bulk.pl.in: bulk.pl now uses the "use strict" pragma. Some variables were not properly defined. Changes: wwsympa/wwsympa.fcgi.in: Restoring use of HTML::Stripscript module for XSS protection. wwsympa/wwsympa.fcgi.in: Now custom actions can accept an infinite number of parameters. These are stored in an array accessible in TT2 through the name "cap". configure.ac: [Submitted by G. Rousse, INRIA] Several improvments in configure.ac: - changed the minimal version of autoconf to 2.60 - factorization of the section regarding the FSH/non FSH alternative. soap/sampleClient.php, src/lib/Message.pm, src/lib/Scenario.pm, src/lib/confdef.pm, src/sympa.pl.in: spam_status message property is now evaluated from a scial scenario spam_status. This scenario accept ham, spam and unsure as result. This replace the antisspam_header_name antispam_tag_header_spam_regexp mail_tt2/digest.tt2, mail_tt2/digest_plain.tt2, mail_tt2/get_archive.tt2, mail_tt2/global_remind.tt2, mail_tt2/helpfile.tt2, mail_tt2/info_report.tt2, mail_tt2/review.tt2, mail_tt2/summary.tt2, src/lib/mail.pm, src/lib/tools.pm, src/lib/tt2.pm, src/sympa_wizard.pl.in, wwsympa/wwsympa.fcgi.in: [Submitted by S. Ikeda] Line wrapping is now enabled for both European and non European languages. src/etc/script/create_db.Oracle, src/etc/script/create_db.Pg, src/etc/script/create_db.SQLite, src/etc/script/create_db.Sybase, src/etc/script/create_db.mysql, src/lib/Upgrade.pm: change database structure in order to store nimber of wrong login attempts src/bulk.pl.in, src/lib/Bulk.pm, src/lib/List.pm, src/lib/mail.pm, web_tt2/suboptions.tt2, wwsympa/wwsympa.fcgi.in: Is is now possible to enable topics chen the reception mode is 'mail', 'notice', 'not_me', 'txt', 'html' or 'urlize'. web_tt2/get_inactive_lists.tt2: [Submitted by M. Warkus] Lists for which no message was ever sent will display a user friendly message instead "January 1 1970". doc/sample/test/web_tt2/welcome.tt2, src/lib/Archive.pm, src/lib/Message.pm, src/lib/PlainDigest.pm, src/lib/mail.pm, src/lib/tools.pm, src/sympa_wizard.pl.in, sympa.spec.in, wwsympa/wwsympa.fcgi.in: Changes to the cpan installation process : - Mail::Internet and MIME::Lite modules not directly required - fix calls to install_module() - added informations about prerequisites - generalized the 'usage' entry for each module - added an introduction to warn the user about the length/nature of the process [Submitted by M.Warkus, Univ. Marburg, Germany] fixing many German translations as well as typography errors. doc/sample/test/web_tt2/welcome.tt2, src/lib/Makefile.am, sympa.spec.in: AuthCAS module used to be distributed with Sympa. Since Sympa 6, it is a standalone CPAN module. The module still has the same name, therefore old installed versions of the module need to be removed src/sympa_wizard.pl.in, wwsympa/wwsympa.fcgi.in: [#6022][Submited by Soji Ikeda] Text::Wrap module worked only with languages with word separator (space). New module Text::LineFold supports most languages. src/etc/script/sympa.in: [proposed by Jpse-Marcio Martins] no more check the OSYTE, check if functions file exists instead Features: ***** DKIM : Sympa now supports DKIM for message diffusion and control. ***** Incoming messages: Authorization scenarios can now use DKIM. Turning *****on the dkim_feature configuration parameter will provide a new authentication level *****to the scenario engine. Scenario evaluation for incoming messages with a valid DKIM *****signature (but no S/MIME signature) will be evaluated with authentication method dkim. *****So rules that use authentication method smtp will not match. You will nedd to update *****your scenarios if you want to use DKIM. ***** ***** Outgoing messages: You may want to make Sympa sign outgoing messages. *****Almost every aspects of DKIM signature behavior can be customized via Sympa *****configuration parameters. Please check the DKIM parameters section for *****further details. Note that each parameter can also be set for a given *****virtual robot; and most of them are available as list parameter. ***** *****Which messages should be signed? *****In order to configure Sympa for signing outgoing messages, you have to decide which messages Sympa should sign . This should be decided for four kind of messages: ***** Services messages : these are all messages sent by Sympa itself : welcome messages, answers to mail commands, various notification such as remind message and digest messages; ***** List messages : messages distributed to list members (where the initial From: header is preserved). These messages will fall is one one the following subcategory: ***** - authenticated messages (using S/MIME signature, challenge or password); ***** - received with a valid DKIM signature; ***** - validated by one of the list editors; ***** - other messages. ***** *****Server parameters used with DKIM: ***** o dkim_feature ***** o dkim_add_signature_to ***** o dkim_signature_apply_on ***** o dkim_private_key_path ***** o dkim_selector ***** o dkim_signer_domain ***** o dkim_signer_identity ***** o dkim_header_list ***** *****List parameters used with DKIM: ***** ***** o dkim_feature ***** o dkim_signature_apply_on ***** o dkim_parameters ***** + private_key_path ***** + selector ***** + header_list ***** + signer_domain ***** + signer_identity ***** ***** YOU WILL NEED TO ADAPT YOUR SCENARIOS TO USE DKIM. ***** PLEASE READ THE DOCUMENTATION: ***** http://www.sympa.org/manual_6.1/dkim web_tt2/Makefile.am, web_tt2/ca.tt2, web_tt2/lca.tt2, wwsympa/wwsympa.fcgi.in: It is now possible to create Custom actions at the list or robot level. These custom actions allow you to create new pages in the Sympa web interface. for now, you can only display informations using this method. any post treatment (such as form submission) must be handled outside of Sympa. See https://www.sympa.org/manual_6.1/customizing#custom_actions for more details. mail_tt2/user_notification.tt2, src/lib/Bulk.pm,src/lib/mail.pm, src/sympa_wizard.pl.in, web_tt2/Makefile.am, wwsympa/wwsympa.fcgi.in web_tt2/auto_signoff.tt2: Autosignoff footer link. It is nw possible to add a link in list messages which are customized for each user. When clicking this link, the user will trigger the sending of a confirmation email. This confirmation email contain an authenticating link. Clicking this link will unsubscribe the user. [Submitted by J. jourdan] Exclude users. Beware, that this feature is different from the blacklist. Exclusion makes sense when a list is based on external data sources, thanks to exclusion, a user can unsubscribe (or being removed by list owner) even though he should be included via an external data source. Users get into the exclusion table, through the standard unsubscribe / delete functions. They get off the exclusion table with the standard subscribe / add functions. Adding of the table 'exclusion_table'. [Submitted by J. jourdan] "suspension of membership." The user can suspend his subscription to the lists that he subscribes. For a finite length or not. Added a calendar in javascript to select a date. [Submitted by J. jourdan] Messages parsing; custom attributes can be now used as parameters for TT2 tags in messages distributed by Sympa. This adds notably the possibility to add authenticated unsubscribe URL to message footers. merge is controled by a list|robot paremeter : merge_feature on|off soap/sampleClient.php, soap/sympa.wsdl, soap/sympasoap.pm: Now soap complexWhich service include subscribers information about bounce mail_tt2/listowner_notification.tt2, src/lib/Commands.pm, src/lib/Conf.pm, src/lib/List.pm, src/sympa.pl.in, web_tt2/javascript.tt2, web_tt2/menu.tt2, web_tt2/nav.tt2, web_tt2/review.tt2, web_tt2/serveradmin.tt2, web_tt2/subscriber_table.tt2, wwsympa/wwsympa.fcgi.in: sympa.pl --conf2db load in database sympa.conf, wwsympa.conf and robot.conf src/lib/List.pm, src/lib/confdef.pm, web_tt2/renewpasswd.tt2, wwsympa/Auth.pm, wwsympa/wwsympa.fcgi.in: max_wrong_password robot parameter (default 19) now Sympa block account after this number of wrong account submition is reached. Needed to block brut force attack. configure.ac, src/bulk.pl.in, src/etc/script/create_db.Oracle, src/etc/script/create_db.Pg, src/etc/script/create_db.SQLite, src/etc/script/create_db.Sybase, src/etc/script/create_db.mysql, src/lib/Bulk.pm, src/lib/Upgrade.pm, src/lib/mail.pm: two new fields in the database : - messageid_bulkspool in bulkspool_table - messageid_bulkmailer in bulkmailer_table These fields both contain the value of the "Message-ID" SMTP header for each message -or packet - to be sent. This allows more reliable logs about the treatment of messages all along the distribution chain. doc/sample/test/web_tt2/welcome.tt2, soap/sympa_soap_client.pl.in, sympa.spec.in: add new features to soap client : add,del,subscribe,signoff doc/sample/test/web_tt2/welcome.tt2, src/lib/Conf.pm, sympa.spec.in, wwsympa/wwsympa.fcgi.in: Extended the format of the generic_sso paragraph in auth.conf. Added two new parameters : - http_header_list : allows to explicitely list HTTP header fields that should be cached in sympa user_table. - http_header_value_separator : user attributes may be multi-valued (including the user email address. This parameter defines the values separator ; defualt is ';' (adapted for Shibboleth) src/lib/Conf.pm, src/lib/confdef.pm, wwsympa/wwsympa.fcgi.in: You can now define a single custom parameter at the robot level, using the new parameter custom_robot_parameter. The format for it is: "parame_name ; param_value". See https://www.sympa.org/manual_6.1/conf-parameters/part1#custom_robot_parameter for details. 6.0.6 September 20, 2010 Bug fixes: src/lib/Bulk.pm: [#7038][reported by D.Pritts, Internet2] Prevent duplicate entry error in Bulk::store(). This error occured while sending duplicate service messages (same content to the same user). The listmaster is no more notified, but the second instance of the message is still not sent; this should be fixed. wwsympa/wwsympa.fcgi.in: To field was not set while sending the sendpasswd service message. This bug was introduced in revision 5150. wwsympa/wwsympa.fcgi.in: In some - difficult to precisely describe - configurations, sessions could be messed due to an inner cache of cookie environement variable, either in Apache of perl. Fixed by force-blanking this variable as soon as we affect it to a session. configure.ac, doc/Makefile.am: [#6855][S.Ikeda] Samples were installed under / and sympa.pdf was not installed. Added missing docdir def in configure.ac + AC_PREREQ(2.60) configure.ac: [O.Lacroix, CIRIL] ./configure --help was not consistant with the directory defaults. Changed the help message for the following options : --with-expldir, --with-spooldir, --with-scriptdir, --with-modulesdir ***** piddir default changed from PREFIX/var to /var wwsympa/wwsympa.fcgi.in: [#6879][reported by A.Koshokin, Intel] Fixed the BASE HTML tag. The base previously was the archive directory, now setting it to the archive message. Bug description: NAME anchors within HTML archived messages were broken. src/lib/Bulk.pm: [#7038][reported by D.Pritts, Internet2] Prevent duplicate entry error in Bulk::store(). This error occured while sending duplicate service messages (same content to the same user). The listmaster is no more notified, but the second instance of the message is still not sent; this should be fixed. Changes: configure.ac: [Submitted by G. Rousse, INRIA] Several improvments in configure.ac: - changed the minimal version of autoconf to 2.60 - factorization of the section regarding the FSH/non FSH alternative. 6.1b.6 August 23, 2010 Bug fixes: src/lib/LDAPSource.pm: [#6802] [T.Berry, NASA] Remove duplicate code + variable declared twice wwsympa/wwsympa.fcgi.in: [#6842] [S.Ikeda] /help/editlist does not show title of parameters src/lib/tools.pm: [#6901][reported by D.Black] tools::smime_decrypt() could make sympa.pl process crash. src/lib/tools.pm, wwsympa/wwsympa.fcgi.in: [S.Ikeda][#3779] Comma in gecos caused invalid From: in Web posting. New tools::addrencode() for proper encoding of From: SMTP header field according to RFC5322. src/lib/Upgrade.pm, wwsympa/wwsympa.fcgi.in: [#4106][reported by M.Larchet] Shared documents could not get manipulated. This was due to changes in the algorithm of MIME::EncWords::encode_mimewords() function (chars -_+! no more Q-encoded). The problem started with version 1.010 of MIME::EncWords. The fix consists in a massive renaming of shared files (according to new algorithm) during sympa.pl --upgrade. src/lib/mail.pm, wwsympa/wwsympa.fcgi.in: [#3984] [submitted by S.Kristoffersen] Restored code to add Auto-Submitted SMTP header field. mail::mail_file() does not set this header when 'not_auto_submitted' is set, ie when wwsympa sends commands to sympa.pl through the msg/ spool. src/lib/Lock.pm: [#6513] [Landry Breuil] Fix errors in apache error log (Use of uninitialized value in sprintf) when debug is enabled configure.ac, doc/Makefile.am: [#6855][S.Ikeda] Samples were installed under / and sympa.pdf was not installed. Added missing docdir def in configure.ac + AC_PREREQ(2.60) configure.ac: [O.Lacroix, CIRIL] ./configure --help was not consistant with the directory defaults. Changed the help message for the following options : --with-expldir, --with-spooldir, --with-scriptdir, --with-modulesdir ***** piddir default changed from PREFIX/var to /var wwsympa/wwsympa.fcgi.in: [#6879][reported by A.Koshokin, Intel] Fixed the BASE HTML tag. The base previously was the archive directory, now setting it to the archive message. Bug description: NAME anchors within HTML archived messages were broken. src/lib/Bulk.pm: [#7038][reported by D.Pritts, Internet2] Prevent duplicate entry error in Bulk::store(). This error occured while sending duplicate service messages (same content to the same user). The listmaster is no more notified, but the second instance of the message is still not sent; this should be fixed. wwsympa/wwsympa.fcgi.in: To field was not set while sending the sendpasswd service message. This bug was introduced in revision 5150. src/lib/Lock.pm: The debug4 log facility does not exist. Replacing its occurences with debug3. mail_tt2/listmaster_notification.tt2, src/lib/admin.pm: [#7053][D.Pritts, Internet2] Listmaster notification for renaming was wrong - got "list copied" notification instead. src/lib/Conf.pm: Previously only default distributed css.tt2 was used to generate CSS files in static_content/. Now also checking customized css.tt2. src/lib/List.pm: fix verp rate 0 ase where Sympa do not send messages to subscriber with bounces src/sympa_wizard.pl.in: Encoding in body of web composed messages was broken. Now require version 1.03 of HTML::StripScripts::Parser wwsympa/wwsympa.fcgi.in: Functions rename_list and change_email could not be run by a robot listmater. Added missing $robot parameter to List::is_listmaster() calls Changes: configure.ac: [Submitted by G. Rousse, INRIA] Several improvments in configure.ac: - changed the minimal version of autoconf to 2.60 - factorization of the section regarding the FSH/non FSH alternative. Features: web_tt2/Makefile.am, web_tt2/ca.tt2, web_tt2/lca.tt2, wwsympa/wwsympa.fcgi.in: It is now possible to create Custom actions at the list or robot level. These custom actions allow you to create new pages in the Sympa web interface. for now, you can only display informations using this method. any post treatment (such as form submission) must be handled outside of Sympa. See https://www.sympa.org/manual_6.1/customizing#custom_actions for more details. 6.0.5 July 06, 2010 Bug fixes: src/lib/Lock.pm: The debug4 log facility does not exist. Replacing its occurences with debug3. 6.0.4 July 05, 2010 Bug fixes: src/lib/Lock.pm: [#6513] [Landry Breuil] Fix errors in apache error log (Use of uninitialized value in sprintf) when debug is enabled wwsympa/Bounce.pm: [#3881] [Michael Quintero] code to handle Groupwise 7 bounces wwsympa/wwsympa.fcgi.in: An extra "\n" appended to the "From:" field caused HTML message to be trimmed from their headers and consequently treated as plain text. This caused HTML messages to arrive as a plain text messages starting by SMTP headers. src/lib/LDAPSource.pm: [#6802] [T.Berry, NASA] Remove duplicate code + variable declared twice wwsympa/wwsympa.fcgi.in: [#6842] [S.Ikeda] /help/editlist does not show title of parameters src/lib/tools.pm: [#6901][reported by D.Black] tools::smime_decrypt() could make sympa.pl process crash. src/lib/tools.pm, wwsympa/wwsympa.fcgi.in: [S.Ikeda][#3779] Comma in gecos caused invalid From: in Web posting. New tools::addrencode() for proper encoding of From: SMTP header field according to RFC5322. src/lib/Upgrade.pm, wwsympa/wwsympa.fcgi.in: [#4106][reported by M.Larchet] Shared documents could not get manipulated. This was due to changes in the algorithm of MIME::EncWords::encode_mimewords() function (chars -_+! no more Q-encoded). The problem started with version 1.010 of MIME::EncWords. The fix consists in a massive renaming of shared files (according to new algorithm) during sympa.pl --upgrade. src/lib/mail.pm, wwsympa/wwsympa.fcgi.in: [#3984] [submitted by S.Kristoffersen] Restored code to add Auto-Submitted SMTP header field. mail::mail_file() does not set this header when 'not_auto_submitted' is set, ie when wwsympa sends commands to sympa.pl through the msg/ spool. Features: src/etc/create_list_templates/hotline/config.tt2, src/etc/create_list_templates/private_working_group/config.tt2, src/lib/List.pm, src/lib/confdef.pm, src/sympa.pl.in: [#6693] [requested by R.Sharshenov] New "reject_mail_from_automates_feature" list parameter allows to disable the detection (and rejection) of mails from automates. This detection is based on the From header field as well as the Auto-S ubmitted header field. A default behavior can be defined in sympa.conf. 6.1b.4 June 14, 2010 Bug fixes: src/lib/Lock.pm: Invalid log facility for some logs in Lock.pm. It looks like we can't go below debug3. src/lib/Bulk.pm: [#6937][#6907][#6915][Reported by S. Dukachev, A. Gouaux and A. Michon (in order of apparition)] The query used to store packets in the bulk_mailer table did enclose interger values between quotes, which is not correct. In addition, it obfuscated the problem that the '$merge' parameter was sometimes undefined. This led to trying to submit an insert query containg a value '' for an integer field. Fixed by suppressing quotes for integer values and ensuring that the $merge variable has a value set. web_tt2/Makefile.am: [Reported by P. Evans] The edit_config.tt2 file was not installed during the "make install" because it was not declared in the Makefile.am. 6.1b.3 June 07, 2010 Bug fixes: src/etc/script/create_db.Oracle, src/etc/script/create_db.Pg, src/etc/script/create_db.SQLite, src/etc/script/create_db.Sybase, src/etc/script/create_db.mysql: [Reported by A. Michon, IBCP and A.Gouaux] In the create_db.* scripts, some of the name of the fields related to DKIM were uncorrect, leading bulk.pl to fail starting. These names are now correct. src/etc/script/create_db.Pg: [reported by A. Michon, IBCP] A typo in create_db.Pg caused the db creation query to fail. 6.1b.2 June 03, 2010 Features: mail_tt2/user_notification.tt2, src/lib/Bulk.pm,src/lib/mail.pm, src/sympa_wizard.pl.in, web_tt2/Makefile.am, wwsympa/wwsympa.fcgi.in web_tt2/auto_signoff.tt2: Autosignoff footer link. It is nw possible to add a link in list messages which are customized for each user. When clicking this link, the user will trigger the sending of a confirmation email. This confirmation email contain an authenticating link. Clicking this link will unsubscribe the user. 6.1b.1 May 26, 2010 Features: ***** DKIM : Sympa now supports DKIM for message diffusion and control. ***** Incoming messages: Authorization scenarios can now use DKIM. Turning *****on the dkim_feature configuration parameter will provide a new authentication level *****to the scenario engine. Scenario evaluation for incoming messages with a valid DKIM *****signature (but no S/MIME signature) will be evaluated with authentication method dkim. *****So rules that use authentication method smtp will not match. You will nedd to update *****your scenarios if you want to use DKIM. ***** ***** Outgoing messages: You may want to make Sympa sign outgoing messages. *****Almost every aspects of DKIM signature behavior can be customized via Sympa *****configuration parameters. Please check the DKIM parameters section for *****further details. Note that each parameter can also be set for a given *****virtual robot; and most of them are available as list parameter. ***** *****Which messages should be signed? *****In order to configure Sympa for signing outgoing messages, you have to decide which messages Sympa should sign . This should be decided for four kind of messages: ***** Services messages : these are all messages sent by Sympa itself : welcome messages, answers to mail commands, various notification such as remind message and digest messages; ***** List messages : messages distributed to list members (where the initial From: header is preserved). These messages will fall is one one the following subcategory: ***** - authenticated messages (using S/MIME signature, challenge or password); ***** - received with a valid DKIM signature; ***** - validated by one of the list editors; ***** - other messages. ***** *****Server parameters used with DKIM: ***** o dkim_feature ***** o dkim_add_signature_to ***** o dkim_signature_apply_on ***** o dkim_private_key_path ***** o dkim_selector ***** o dkim_signer_domain ***** o dkim_signer_identity ***** o dkim_header_list ***** *****List parameters used with DKIM: ***** ***** o dkim_feature ***** o dkim_signature_apply_on ***** o dkim_parameters ***** + private_key_path ***** + selector ***** + header_list ***** + signer_domain ***** + signer_identity ***** ***** YOU WILL NEED TO ADAPT YOUR SCENARIOS TO USE DKIM. ***** PLEASE READ THE DOCUMENTATION: ***** http://www.sympa.org/manual_6.1/dkim [Submitted by J. jourdan] Exclude users. Beware, that this feature is different from the blacklist. Exclusion makes sense when a list is based on external data sources, thanks to exclusion, a user can unsubscribe (or being removed by list owner) even though he should be included via an external data source. Users get into the exclusion table, through the standard unsubscribe / delete functions. They get off the exclusion table with the standard subscribe / add functions. Adding of the table 'exclusion_table'. [Submitted by J. jourdan] "suspension of membership." The user can suspend his subscription to the lists that he subscribes. For a finite length or not. Added a calendar in javascript to select a date. [Submitted by J. jourdan] Messages parsing; custom attributes can be now used as parameters for TT2 tags in messages distributed by Sympa. This adds notably the possibility to add authenticated unsubscribe URL to message footers. merge is controled by a list|robot paremeter : merge_feature on|off soap/sampleClient.php, soap/sympa.wsdl, soap/sympasoap.pm: Now soap complexWhich service include subscribers information about bounce mail_tt2/listowner_notification.tt2, src/lib/Commands.pm, src/lib/Conf.pm, src/lib/List.pm, src/sympa.pl.in, web_tt2/javascript.tt2, web_tt2/menu.tt2, web_tt2/nav.tt2, web_tt2/review.tt2, web_tt2/serveradmin.tt2, web_tt2/subscriber_table.tt2, wwsympa/wwsympa.fcgi.in: sympa.pl --conf2db load in database sympa.conf, wwsympa.conf and robot.conf src/lib/List.pm, src/lib/confdef.pm, web_tt2/renewpasswd.tt2, wwsympa/Auth.pm, wwsympa/wwsympa.fcgi.in: max_wrong_password robot parameter (default 19) now Sympa block account after this number of wrong account submition is reached. Needed to block brut force attack. configure.ac, src/bulk.pl.in, src/etc/script/create_db.Oracle, src/etc/script/create_db.Pg, src/etc/script/create_db.SQLite, src/etc/script/create_db.Sybase, src/etc/script/create_db.mysql, src/lib/Bulk.pm, src/lib/Upgrade.pm, src/lib/mail.pm: two new fields in the database : - messageid_bulkspool in bulkspool_table - messageid_bulkmailer in bulkmailer_table These fields both contain the value of the "Message-ID" SMTP header for each message -or packet - to be sent. This allows more reliable logs about the treatment of messages all along the distribution chain. doc/sample/test/web_tt2/welcome.tt2, soap/sympa_soap_client.pl.in, sympa.spec.in: add new features to soap client : add,del,subscribe,signoff doc/sample/test/web_tt2/welcome.tt2, src/lib/Conf.pm, sympa.spec.in, wwsympa/wwsympa.fcgi.in: Extended the format of the generic_sso paragraph in auth.conf. Added two new parameters : - http_header_list : allows to explicitely list HTTP header fields that should be cached in sympa user_table. - http_header_value_separator : user attributes may be multi-valued (including the user email address. This parameter defines the values separator ; defualt is ';' (adapted for Shibboleth) Changes: soap/sampleClient.php, src/lib/Message.pm, src/lib/Scenario.pm, src/lib/confdef.pm, src/sympa.pl.in: spam_status message property is now evaluated from a scial scenario spam_status. This scenario accept ham, spam and unsure as result. This replace the antisspam_header_name antispam_tag_header_spam_regexp mail_tt2/digest.tt2, mail_tt2/digest_plain.tt2, mail_tt2/get_archive.tt2, mail_tt2/global_remind.tt2, mail_tt2/helpfile.tt2, mail_tt2/info_report.tt2, mail_tt2/review.tt2, mail_tt2/summary.tt2, src/lib/mail.pm, src/lib/tools.pm, src/lib/tt2.pm, src/sympa_wizard.pl.in, wwsympa/wwsympa.fcgi.in: [Submitted by S. Ikeda] Line wrapping is now enabled for both European and non European languages. src/etc/script/create_db.Oracle, src/etc/script/create_db.Pg, src/etc/script/create_db.SQLite, src/etc/script/create_db.Sybase, src/etc/script/create_db.mysql, src/lib/Upgrade.pm: change database structure in order to store nimber of wrong login attempts src/bulk.pl.in, src/lib/Bulk.pm, src/lib/List.pm, src/lib/mail.pm, web_tt2/suboptions.tt2, wwsympa/wwsympa.fcgi.in: Is is now possible to enable topics chen the reception mode is 'mail', 'notice', 'not_me', 'txt', 'html' or 'urlize'. web_tt2/get_inactive_lists.tt2: [Submitted by M. Warkus] Lists for which no message was ever sent will display a user friendly message instead "January 1 1970". doc/sample/test/web_tt2/welcome.tt2, src/lib/Archive.pm, src/lib/Message.pm, src/lib/PlainDigest.pm, src/lib/mail.pm, src/lib/tools.pm, src/sympa_wizard.pl.in, sympa.spec.in, wwsympa/wwsympa.fcgi.in: Changes to the cpan installation process : - Mail::Internet and MIME::Lite modules not directly required - fix calls to install_module() - added informations about prerequisites - generalized the 'usage' entry for each module - added an introduction to warn the user about the length/nature of the process [Submitted by M.Warkus, Univ. Marburg, Germany] fixing many German translations as well as typography errors. doc/sample/test/web_tt2/welcome.tt2, src/lib/Makefile.am, sympa.spec.in: AuthCAS module used to be distributed with Sympa. Since Sympa 6, it is a standalone CPAN module. The module still has the same name, therefore old installed versions of the module need to be removed src/sympa_wizard.pl.in, wwsympa/wwsympa.fcgi.in: [#6022][Submited by Soji Ikeda] Text::Wrap module worked only with languages with word separator (space). New module Text::LineFold supports most languages. src/etc/script/sympa.in: [proposed by Jpse-Marcio Martins] no more check the OSYTE, check if functions file exists instead Bug fixes: wwsympa/wwsympa.fcgi.in: Dan Pritts fix https://sourcesup.cru.fr/tracker/index.php?func=detail&aid=6839&group_id=23&atid=167 src/lib/List.pm: Reverting a part of revision #6227. This lead to datasources loosing all their subscribers when using a single datasource and the synchronizing failed. src/lib/List.pm: When calling send_notify_to_owner, the '$param' parameter was used as a hash, wihout checking first that it was actually a hash. in some cases though, such as in set_status_family_closed(), it was a ref to an array. This caused Sympa to crach with a "Can't coerce array into a hash" error. Fixed by moving the bad line in the hash-specific part of the sub. wwsympa/wwsympa.fcgi.in: security fix : block login submitted with any http method but POST. (security audit vuln #5) web_tt2/edit_config.tt2: missing template for config editor src/etc/script/arc2webarc.pl.in: fix incorrect check of date format that block 2010 messages (reported by Omen Wild (ucdavis.edu) src/etc/script/create_db.Sybase: fix missing conf_table in Sybase creation script. web_tt2/error.tt2, wwsympa/wwsympa.fcgi.in: Now shared document can't be read or edited unless list is open. This is a security fix soap/sympa_soap_client.pl.in: Fixed a bug that prevented authentication while using authenticateAndRun() src/lib/SQLSource.pm: [Submùitted by F. Lachapelle, Inverse] If the db_type is set to Oracle and db_port is specified in the main configuration file, than the port would appear two times in the connection string. src/lib/tools.pm: [reported by F.Fareneau, univ Valenciennes] shared documents/folders names were badly encoded while using Encode >= 2.19. The issue was related to a low level subroutine (Encode::MIME::Header::_encode_q()) that slightly changed its API (expecting unicode instead of bytes parameter). Now using MIME::EncWords::encode_mimewords() instead. src/lib/tools.pm: [#6552] [Soji IKEDA] Wwsympa would stall while loading session data including metacharacters. Existing code (tools::string_2_hash()) would loop on a regular expression match. Patch also escapes ``"'' characters. src/sympa.pl.in: [Submitted by H. Moa] Some message could cause a sympa.pl crash. Fixed by embedding the dangerous part of the code in an eval statement. src/lib/List.pm: Users received the same message multiple times. This was due to a problem in the VERP provisionning. When filling the array containing the users for which VERP will be used, Sympa add to sources of users : a certain rate of all the users and all the users that have a high bounce rate already. for each reception mode, Sympa provisions VERP users this way. the problem was the following: for each reception mode, Sympa used the list of users using the default distribution mode instead of the list of users using the specific distribution mode currently treated. this lead to the addition, to the list of bouncing users of each reception mode, the list of users selected to receive the message in VERP for normal reception mode instead of the high bouncers for this reception mode. fixed by using an aray variable regarding the kind of reception mode currently treated. src/bulk.pl.in, src/lib/tools.pm: When parsing a message to merge or verifying DKIM signature, a MIME::Parser object was created and the message parsed into a MIME::Entity. The output of the parser was not set to core, so it used its default: the filesystem. It led to the creation of a lots of files in the expl directory, that were never removed. Fixed by adding the line : src/bulk.pl.in: bulk.pl exited when it could not remove the packet it had juste sent. It now only issue an error messge in the logs. mail_tt2/urlized_part.tt2, src/lib/List.pm: Urlize messages charset was nor properly set. Consequently, bulk crashed when trying to merge the message. In addition, a faulty var name caused Sympa to try to send the originla message instead of the urlized message. src/lib/Bulk.pm: Messages were tagged multiple times as last. mail_tt2/command_report.tt2: fixed bug introduced in revision 6187. Sympa.pl would send empty command reports with a "Failed to parse command_report.tt2 : Template::Exception" error in its log file wwsympa/wwsympa.fcgi.in: Fixed bug introduced in revision 5998. web signoff did not recognize authenticated users. src/bulk.pl.in: When merge was not activated, Messages were not initialized, leading to empty messages. src/lib/Bulk.pm: remove usage of fingerprint authentication token web_tt2/compose_mail.tt2: remove some coin coin style text src/lib/List.pm: [#3047][reported by N.Chipaux, Mandriva] Some service messages sent by Sympa would use an unappropriate language (did not match the user language). This issue happened whenever a message was sent to more than one reciepient; the first user's language was used for the following ones. Fixed List::send_file() and List::send_global_file(): now duplicating the 'context' parameter to prevent changes of the original data structure. src/lib/confdef.pm: http_host was not set by default in syma.conf, making the sympa wizard to fail starting. doc/sample/test/web_tt2/welcome.tt2, sympa.spec.in, wwsympa/Auth.pm: [Submitted by M. Warkus, univ. Marburg] When a user logged in, using LDAP, by providing an email address, if this email was not the first one in the LDAP email attribute, then the uiser was not logged with the address she provided but with the default address found in the LDAP directory. Now, if an email is provided and the login is successful ,the user is logged in with the email she provided. doc/sample/test/web_tt2/welcome.tt2, soap/sympa_soap_client.pl.in, sympa.spec.in: Fixed a typo in the sympa_soap_client.pl command line tool that prevented the service parameters to be used. doc/sample/test/web_tt2/welcome.tt2, src/sympa_wizard.pl.in, sympa.spec.in: Installed MHonArc version was not properly detected doc/sample/test/web_tt2/welcome.tt2, src/sympa_wizard.pl.in, sympa.spec.in: Can't do $module->require() since we no more require the UNIVERSAl::require module. Replaced with eval "require $module". Makefile.am: [Submitted by M.Deranek] On a multi core system, installdir & installconfig targets can run in parallel. Added a dependency between these targets. doc/sample/test/web_tt2/welcome.tt2, src/lib/Bulk.pm, src/lib/List.pm, sympa.spec.in: Missing "use WebAgent" directive since recent reorganization of code (revision 5939). Makefile.am, doc/sample/test/web_tt2/welcome.tt2, src/lib/tools.pm, sympa.spec.in: [#6380][Reported by M.Warkus, Philipps-Univ. Marburg] Added a line break to written PID files. configure.ac, doc/sample/test/web_tt2/welcome.tt2, sympa.spec.in: Fix typo introduced in recent commit. src/lib/Conf.pm: [Submitted by M. Warkus, univ.Marburg] Inverted test caused the config not to be loaded. Makefile.am: The last install message didn't tell to launch sympa_wizzard.pl but sympa.pl. src/lib/Conf.pm, src/lib/confdef.pm: Now Sympa don't complain about optional robot parameters without definition in sympa;conf and wwsympa.conf. Sympa now stop because of required robot parameters without value (minimum a default). wwsympa/wwsympa.fcgi.in: [reported by N.Matthies] Added notice when user preferences have been updated doc/sample/test/web_tt2/welcome.tt2, po/de.po, po-wwsympa/de.po, sympa.spec.in, web_tt2/help_listconfig.tt2, web_tt2/help_shared.tt2, web_tt2/help_user.tt2: [Submitted by M. Warkus, univ. Marburg] Reporting commits 6012 and 6013 from the 6.0 branch: german translation and fixed typos in webhelp. src/bulk.pl.in: bulk.pl now uses the "use strict" pragma. Some variables were not properly defined. 6.0.3 June 03, 2010 Bug fixes: src/lib/SQLSource.pm: [Reported by O. Germes, univ. Rennes1] The upper case "O" in "Oracle" caused the task_manager.pl to be unable to synchronize datasources. This is a quick fix that reverts the patch for bug [#6603]. src/lib/Conf.pm: [submitted by G. rousse, INRIA] Spool directories created in Conf.pm didn't have ownership set, meaning they belonged to root.root, preventing sympa to create new content therein, preventing sympa.pl to start. src/bulk.pl.in: [Reported by S. Bosquin, Ejinov] A bad variable name seemed to have appeared just before the version tag, making bulk.pl to fail starting. Fixed by giving the right name to this variable. 6.0.2 May 28, 2010 Bug fixes: src/lib/Bulk.pm: [Submitted by S. Ikeda] When bulk_max_count was increased, some message packets were processed more than once. Fixed to check that a packet is really not locked before trying to send it and using a prepared statement to quicken lock process. wwsympa/wwsympa.fcgi.in: Dan Pritts fix https://sourcesup.cru.fr/tracker/index.php?func=detail&aid=6839&group_id=23&atid=167 src/bulk.pl.in: When a packet was found which corresponded to no message in the spool table, then an empty message was sent anyway. Should such a case arise again, the packet would be deleted. src/lib/List.pm: Reverting a part of revision #6227. This lead to datasources loosing all their subscribers when using a single datasource and the synchronizing failed. src/lib/List.pm: When calling send_notify_to_owner, the '$param' parameter was used as a hash, wihout checking first that it was actually a hash. in some cases though, such as in set_status_family_closed(), it was a ref to an array. This caused Sympa to crach with a "Can't coerce array into a hash" error. Fixed by moving the bad line in the hash-specific part of the sub. src/lib/List.pm: [Submitted by M. Brethous, Orange FT Group] When a file was used as datasource for subscribers inclusion, no test was done on the data found in the file. This led to 100% CPU usage when, for example, a very large excel file was used instead of a normal text file - a likely error when sources are handled by list owners. Fixed by cancelling inclusion when no valid email is found in the 50 first non empty lines of the source file. src/lib/Bulk.pm: Fix a bug reported by K Clair (riseup) and Thomas Berry (nasa) : no purge where done in bulk_spool_table. src/sympa_wizard.pl.in: [Submitted by R. ANDERSSON] With older version of DBD::Mysql, bulk.pl happened to die with an "Out of memory!" cry. Fixed by increasing the version to the oldest fixing this problem. See http://bugs.mysql.com/bug.php?id=19453 for more details. src/lib/SQLSource.pm: [Submitted by T. Berry, NASA] Some SQL statements with Sybase failed when the actual backend was Microsoft SQL Server 2005 sp3. This was due to a double quote in the definition of a constant breaking the query. Fixed by replacing double quotes by slash-escaped simple quotes. src/lib/Log.pm: [Submitted by P. DiCamillo, univ. Brown] Using Oracle 10, the logs for the list were never displayed in the web interface. This was due to Oracle returning 0 to function $sth->rows, before any row are fetched. fixed by first trying to fetch rows before counting the number of rows. src/sympa_wizard.pl.in: [Reported by M. anderson, riseup.net] changed the minimal version of Time::hires to the older which doesn't seem to have any problem with the "time()" function. po/ar.po, po/bg.po, po/br.po, po/ca.po, po/cs.po, po/de.po, po/el.po, po/en_US.po, po/es.po, po/et.po, po/eu.po, po/fi.po, po/fr.po, po/hu.po, po/id.po, po/it.po, po/ja.po, po/ko.po, po/la.po, po/ml.po, po/nb_NO.po, po/nl.po, po/oc.po, po/pl.po, po/pt.po, po/pt_BR.po, po/ro.po, po/ru.po, po/sv.po, po/sympa.pot, po/tr.po, po/vi.po, po/zh_CN.po, po/zh_TW.po, web_tt2/home.tt2: [Reported by M. deranek, slonko.net] Removed inheritance of a faulty message with the sympa email address in it. Makefile.am: [Reported by P. Polkinghorne, Brunel univ.] The message displayed at the end of the "make install" didn't make it clear that the Perl modules checking must be done before any other upgrade or setting operation. wwsympa/wwsympa.fcgi.in: [Submitted by K. Maneva-Jakimoska, univ. Montclair] when a user had set her name, she could not delete it. the only was to set it as ' '. fixed by setting it to undef if no value is provided by the form. wwsympa/Bounce.pm: [Reported by Q. Brown, univ. Simmons] Sympa misinterpreted a header added by the puremessage antispam engine when no from was present in a bounce file. this lead to huge filenames for bad bounces and overwhlmingly large logs. src/lib/List.pm: [Submitted by R. Pinson] When a cutsom_subject was used AND the user added the tag herself AND The subject was a multi-line subject, then only the first line of the subject was kept in the final messgage. Fixed by changing the way Wympa catches the non-funtional (subject message and "Re:") part of the subject. wwsympa/wwsympa.fcgi.in: [Submitted by K. clair, when no user was bouncing in a list, trying to access to the bounces review lead to a cryptic error : "No page 1". Fixed by checking if there are more than 0 bounces before issuing an error. src/lib/Upgrade.pm: [Reproted by M. Deranek, slonko.net] Upgrade.pm had three problems : src/lib/Conf.pm: [Reported by J. Bazik, Brown University] When the 'sendmail_aliases' parameter was set to 'none', a file named 'none' was still created in the list_data directory. Fixed by testing the value of this parameter before creating the file. src/lib/Lock.pm: [Reported by J. Bazik, Brown University] In the subroutine Lock::_lock_nfs, if File::NFSLock failed, the else clause attempted to close a filehandle that was never set. Fixed by removing this closing attempt. Makefile.am: During the make isntall, the Makefile used a line tha ttested the existence of the data_structure.version file in the sympa subdirectory of etc. If the file did not exist, then it was created. Problems: configure.ac: [Reported by M. Deranek, slonko.net] While running configure, the option "--with-localedir" could be used, but a warning was issued, stating that this option was obsolete. But the replacement option proposed (--localedir) was invalid. Fixed by deleting this warning message and the overall documentation in configure. Same problem fixed with the pair "--with-docdir"/"--docdir". src/lib/Upgrade.pm: [Submitted by M. Deranek, slonko.net] The upgrade process failed with SQLite, because DBD::SQLite >= 1.26_02 returns the table names prefixed with "main". web_tt2/compose_mail.tt2: [Submitted by M. Warkus, univ. Marburg]When accessing the "Compose message" page from an archive by selecting "sender", "list" or "both" with the radio buttons, the selected destination address appeared next to two buttons: "Send to the list" and "Send to me". wwsympa/wwsympa.fcgi.in: Avoid to print a sybillin message when no bounces exist. If nothing exist, just go on and display a page with no entries. src/lib/SQLSource.pm: [Submitted by F. Lachapelle, Inverse] If the db_type is set to Oracle and db_port is specified in the main configuration file, than the port would appear two times in the connection string. Fixed by removing useless isolated port insertion in the connect string, as it is done for any connection in a central place. src/lib/tools.pm: [reported by F.Fareneau, univ Valenciennes] shared documents/folders names were badly encoded while using Encode >= 2.19. The issue was related to a low level subroutine (Encode::MIME::Header::_encode_q()) that slightly changed its API (expecting unicode instead of bytes parameter). Now using MIME::EncWords::encode_mimewords() instead. src/lib/tools.pm: [#6552] [Soji IKEDA] Wwsympa would stall while loading session data including metacharacters. Existing code (tools::string_2_hash()) would loop on a regular expression match. Patch also escapes ``"'' characters. Changes: po/Makefile.in.in: Updated the make rules for i18N to update the English catalogue withou loosing customization. 6.0.1 9th December 2009 Bug fixes: [Submitted by Wen Si] "date" is a reserved keywork with Oracle. Fixed by replacing all the occurrences of "AS date" by "AS \"date\". wwsympa/wwsympa.fcgi.in: [Submitted by T. Bellempois, ENS Lyon] In case of CAS error, wwsympa.fcgi crashed, because it was calling a subroutine in the module CAS, which doesn't exist in Sympa, instead of AuthCAS. mail_tt2/listmaster_notification.tt2, wwsympa/wwsympa.fcgi.in: [Reported by P. Maes, univ. Louvain] The report sent to the listmaster when a user cloned a list said "