Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 173159 - Take into account base64 encoding when adding mailing list sign.
Summary: Take into account base64 encoding when adding mailing list sign.
Status: RESOLVED TEST-REQUEST
Alias: None
Product: Gentoo Infrastructure
Classification: Unclassified
Component: Mailing Lists (show other bugs)
Hardware: All Linux
: High critical (vote)
Assignee: Gentoo Infrastructure
URL: http://mlmmj.mmj.dk/archives/mlmmj/20...
Whiteboard:
Keywords:
: 230929 (view as bug list)
Depends on:
Blocks:
 
Reported: 2007-04-02 16:45 UTC by Peter Volkov (RETIRED)
Modified: 2010-12-02 07:32 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
Example of buggy message (message.txt,3.94 KB, text/plain)
2007-04-04 06:10 UTC, Antonio
Details
Screenshot of buggy message in gmail (Image-0016.png,18.48 KB, text/plain)
2007-04-04 06:11 UTC, Antonio
Details
Screenshot of buggy message in gmail (Image-0016.png,18.48 KB, image/png)
2007-04-04 06:12 UTC, Antonio
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Peter Volkov (RETIRED) gentoo-dev 2007-04-02 16:45:21 UTC
Hello.

Recently I found that some mail have very interesting signature in gentoo-user-ru mailing list. Signature is looking like this:

�│ИМ╒▀╛z╨Н│ИМ╒┼+┌f╒√)Ю√+-

Firstly I though that users enjoy such signature but when more such mails come from different users I found that this is bug in our mailing lists. Take a look at mail source:

++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Received: (qmail 16991 invoked by uid 1000); 2 Apr 2007 19:04:26 +0400
Subject: [gentoo-user-ru] WM5
From:   "=?koi8-r?Q?=E7=CC=D5=D3=CB=C5=D2_?= =?koi8-r?Q?=E1=CC=C5=CB=D3=C1=CE=C4=D2_?= =?koi8-r?Q?=E9=C7=CF=D2=C5=D7=C9=DE?=" <rsc@rsc.pp.ru>
To: gentoo-user-ru@lists.gentoo.org
In-Reply-To: <20070402110554.GA28175@oei2.npp>
References: <20070402110554.GA28175@oei2.npp>
Content-Type: text/plain; charset=KOI8-R
Content-Transfer-Encoding: base64
Date: Mon, 02 Apr 2007 19:04:25 +0400
Message-Id: <1175526265.13808.75.camel@localhost>


4SDL1M8tzsnC1cTYINPJzsjSz87J2snS1cXUIMvPztTBy9TZL8vBzMXOxMHS2CDTIFdpbmRvd3Mg
TW9iaWxlIDUuMA0K1dPU0s/K09TXz80/DQo=

-- 
gentoo-user-ru@gentoo.org mailing list

++++++++++++++++++++++++++++++++++++++++++++++++++++++++

I've reduced the number of headers but you see that the problem is in signature which mailing list adds:

--
gentoo-user-ru@gentoo.org mailing list

All mail clients decode this list signature from base64 encoding and add such "beautiful" signature at the end of letter.

TIA
Comment 1 Antonio 2007-04-04 06:10:14 UTC
Created attachment 115401 [details]
Example of buggy message
Comment 2 Antonio 2007-04-04 06:11:31 UTC
Created attachment 115405 [details]
Screenshot of buggy message in gmail
Comment 3 Antonio 2007-04-04 06:12:38 UTC
Created attachment 115406 [details]
Screenshot of buggy message in gmail
Comment 4 Peter Volkov (RETIRED) gentoo-dev 2007-04-05 15:40:31 UTC
Severity changed on critical as this behavior does not allow our users which use gmail reader to see messages at all! See screenshot in comment #3!
Comment 5 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2007-04-11 09:55:31 UTC
I've passed this on to the upstream mlmmj folk, hopefully have a fix soon.
Comment 6 Peter Volkov (RETIRED) gentoo-dev 2007-04-17 18:58:05 UTC
(In reply to comment #5)
> I've passed this on to the upstream mlmmj folk, hopefully have a fix soon.

Robbin, but is it possible temporary disable signature addition for gentoo-user-ru until it's not fixed upstream? This bug makes mailing list less usable for some of our users and all others receive mails from surprised users and following unnecessary discussions... In any way, thank you very much for looking at this.
Comment 7 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2007-04-17 22:44:49 UTC
yeah, I disabled the footer for the moment.
still pending on upstream for a real fix - I don't want to have to pass mails through procmail/formail :-(
Comment 8 Peter Volkov (RETIRED) gentoo-dev 2007-05-15 14:37:31 UTC
Could we disable footer for gentoo-doc-ru? TIA
Comment 9 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2007-05-15 14:48:00 UTC
disabled on gentoo-doc-ru
Comment 10 Peter Volkov (RETIRED) gentoo-dev 2007-12-11 11:08:12 UTC
Robin, do you have any answer from upstream? If not, what version of mlmmj do we have installed? How this footer is defined in configs? I'm going to subscribe tomlmmj mailing list and ask for help there... May be a bit activity here helps.
Comment 11 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2007-12-11 11:25:15 UTC
No response from them.
We're on 1.2.14 now, will be moving to 1.2.15 with the new lists server (couple of config niceties added).

The disabled footer was:
[footer]
-- 
gentoo-doc-ru@gentoo.org mailing list
[/footer]

The core of the problem is that it doesn't think about MIME encodings properly when dealing with adding the footer. The best fix would be, if the body has a non-plaintext type, add the footer in another MIME block, rather than trying to add it to the existing block.
Comment 12 Peter Volkov (RETIRED) gentoo-dev 2007-12-13 11:21:47 UTC
And now we have the answer. It'll be never fixed. See URL.
Comment 13 Mike Doty (RETIRED) gentoo-dev 2007-12-13 17:19:30 UTC
seems like there's nothing more for us to do here.
Comment 14 Peter Volkov (RETIRED) gentoo-dev 2007-12-14 16:07:45 UTC
Mike, it's not possible to resolve this bug as UPSTREAM as this bug is about our broken mailing lists (our infrastructure) and not about mailing list software.

This bug make us look unprofessional as some mails do not have footer some do have, some have strange symbols at the end and some in some cases are unreadable.

I suggest to disable this footer at all. In any case most of mails do not have this footer visible now (see archives.gentoo.org). If we really do need this footer, then we should fix this bug somehow, either fixing mlmmj or may be using different software.
Comment 15 Robert Buchholz (RETIRED) gentoo-dev 2008-06-09 18:18:50 UTC
We cannot handle adding MIME signatures without parsing MIME content, because we might have to use the provided boundary. But even considering the three cases (mime with no boundary, mime multipart, no mime) should not be impossible to do. 

There are two possible solutions for this bug: Patch mlmmj ourselves, change list software. Infra, what do you think about either?
Comment 16 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2008-06-09 18:54:29 UTC
rbu: 
two more options:
3. Disable footer everywhere
4. Get rid of base64 encoding on the input path to mlmmj.

Somebody writing a patch for mlmmj is my preference, followed by disabling the footer, but a reliable procmail/foo rule for the conversion wouldn't go wrong either.

It would have to go on stdin, and be absolutely reliable in the face of any badly encoding base64/mime structures.
Comment 17 Christian Faulhammer (RETIRED) gentoo-dev 2008-07-06 14:43:21 UTC
*** Bug 230929 has been marked as a duplicate of this bug. ***
Comment 18 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2010-12-02 07:32:46 UTC
Upstream claims fixed a while ago.