-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 04 Apr 2024 18:15:10 +0000 Source: schleuder Architecture: source Version: 4.0.3-7+deb12u1 Distribution: bookworm Urgency: medium Maintainer: Debian Ruby Team Changed-By: Georg Faerber Closes: 1068330 1068331 1068332 1068333 1068334 1068335 Changes: schleuder (4.0.3-7+deb12u1) bookworm; urgency=medium . * debian/patches: - x-subscribe: fix parsing of arguments. Optional flags provided at the end are only taken into account if there is a valid fingerprint, and they are checked to be "true", or "false". Before, due to insufficient validation, an email address might have been erroneously subscribed with 'admin' permissions. (Closes: #1068330) - x-add-key: fix importing keys from attachments as Thunderbird sends them. Before, such attachments were ignored. This regression was introduced in 4.0.0. (Closes: #1068331) - x-add-key: fix handling of emails without further content or attachments. A proper error message is returned. Before, a traceback was thrown. (Closes: #1068332) - Stop looking for keywords if email starts with other content. This allows to send usage instructions including keywords within an email to a Schleuder list. Before, these keywords would have been stripped, which limited the value of such an email. This change matches documentation, which tells that keywords require that they are written in the beginning of an email body. (Closes: #1068333) - receive_from_subscribed_emailaddresses_only(): check downcased email address. This follows and mirrors changes made in both schleuder-cli and schleuder-web, which nowadays enforce lowercase if adding subscriptions. Before, incoming emails might have been erroneously rejected, if an uppercase email address was used in the From: header. (Closes: #1068334) - Consider From: when finding reply address. Look for a subscription that matches the sending email address, in case of multiple subscriptions which rely on the same key. As a fallback, the first subscription found is used. Before, people might have received a reply to a different email address. (Closes: #1068335) Checksums-Sha1: 08657e129629b88a84db0873b162b4a0b157e04b 1709 schleuder_4.0.3-7+deb12u1.dsc 8e5b4dd945aa618f8e7e836a41ebe33a8f56dba6 291499 schleuder_4.0.3.orig.tar.gz c4f0a05817e832dceae96564edbc64963513c631 45428 schleuder_4.0.3-7+deb12u1.debian.tar.xz d3c2afdce56d170000dc4da76bd339e5d388940f 10090 schleuder_4.0.3-7+deb12u1_amd64.buildinfo Checksums-Sha256: 1feb62ea6be6675590a26e53f0747a4c0db7e3c5b19025fb8f4a710faa0790a3 1709 schleuder_4.0.3-7+deb12u1.dsc 121fe3dff20845063cd06c945f958a4ee7791b15eb506034941cf65e3099f047 291499 schleuder_4.0.3.orig.tar.gz 34473d40defe58e3f40cdaeb488501fdcaac534c6a7984ac175cc9e9f7146574 45428 schleuder_4.0.3-7+deb12u1.debian.tar.xz 2a7e39a323857bbdea8ca05c2ce0571fc23862207df1ac8569af24bc6482d8a8 10090 schleuder_4.0.3-7+deb12u1_amd64.buildinfo Files: 5874b5164fbd8261944ff5e9e323a7d1 1709 mail optional schleuder_4.0.3-7+deb12u1.dsc 4624a90ac4ec27b43af72aa913208b69 291499 mail optional schleuder_4.0.3.orig.tar.gz 2647b2f55cfbb6045e8039c79c584326 45428 mail optional schleuder_4.0.3-7+deb12u1.debian.tar.xz 1dba69f9d7bc0a2fe1613b10fd76102b 10090 mail optional schleuder_4.0.3-7+deb12u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iHUEARYIAB0WIQTEfr/MTlfp/DLKNABGG+5dJAqekQUCZhPOIgAKCRBGG+5dJAqe kdZxAP9C1QN9dD/pGML/Jb6GaI0dvV99oK9zS3QlP3j1tK2m+gD9HFFAXWl/WjiP icVSVMJKhuJL+LYw6p38J23rhLg/qwQ= =bJ5z -----END PGP SIGNATURE-----