Important: Python Bug

Marco Paganini <[email protected]> Tue, 8 Apr 2003 16:49:48 -0400
Newsgroups gmane.mail.spam.active-spam-killer.announce
Message-ID <20030408204948.GA12015__49792.7130003974$1049835421@zim.paganini.net>
--hQiwHBbRI9kgIhsi
Content-Type: multipart/mixed; boundary="rwEMma7ioTxnRzrJ"
Content-Disposition: inline


--rwEMma7ioTxnRzrJ
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hello All,

We found a bug in Python's email parsing routines. The bug seems to be
present in older versions of Python and causes ASK to incorrectly parse some
email addresses. All versions of ASK running those versions of Python are
affected.

The bug affects the parsing of emails with an unquoted user name and a dot
character anywhere inside the user name part. Example of an affected addres=
s:

John Q. Doe <[email protected]>

Emails containing quoted user names or no user name at all are not affected,
such as:

"John Q. Doe" <[email protected]> or
[email protected] or
John Q Doe <[email protected]>

If your version of Python has this bug, ASK will not be able to correctly
parse some emails causing the confirmation message to be sent to an invalid
address.

To determine if your system is affected, please execute the Python program
attached. If possible, send the results to [email protected] or to
the ASK-users mailing list. We'll update the recommended version in the
documentation to reflect the lowest version of Python that does not contain
this bug.

Many thanks to Nils Weisensee for relentlessly tracking this bug.

Regards,
Paga

--=20
Marco Paganini          | UNIX / Linux / Networking
[email protected]   | PGP: http://www.paganini.net/pgp/
http://www.paganini.net | Magnus Frater te spectat...

--rwEMma7ioTxnRzrJ
Content-Type: text/plain; charset=us-ascii
Content-Disposition: attachment; filename="pythontest.py"
Content-Transfer-Encoding: quoted-printable

#!/usr/bin/python

import sys
import string
import rfc822

(sender_name, sender_mail) =3D rfc822.parseaddr("Marco A. Paganini <paganin=
[email protected]")

print "We are now attempting to parse the following address:"
print "\nFrom: Marco A. Paganini <[email protected]>"
print "\nResults:"
print "Parsed name:  \"%s\" (correct should be \"Marco A. Paganini\")" % se=
nder_name=20
print "Parsed email: \"%s\" (correct should be \"[email protected]\")" =
% sender_mail

print "\nPlease report the following:"
print sys.version
if sender_mail <> "[email protected]":
	print "This version is broken. Please upgrade."
else:
	print "This version is OK."


--rwEMma7ioTxnRzrJ--

--hQiwHBbRI9kgIhsi
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE+kzXrL2FWjNfH2XwRAvFnAKCjMAoCuX57//LP2kLQ63Q7233XKACfeGSI
GMZs0Lg3FZmfWN/jajBk4qc=
=hFMk
-----END PGP SIGNATURE-----

--hQiwHBbRI9kgIhsi--


-------------------------------------------------------
This SF.net email is sponsored by: ValueWeb: 
Dedicated Hosting for just $79/mo with 500 GB of bandwidth! 
No other company gives more support or power for your dedicated server
http://click.atdmt.com/AFF/go/sdnxxaff00300020aff/direct/01/