archlinux distribution email issue

hongy19 · 2025-01-26 05:47:01

Hi,
do you know how to report bug for archlinux email distribution list?
in latest "[arch-announce] Critical rsync security release 3.4.0",
it is text plain, not html. it should be ' , not "'" in "We'd like to raise awareness about the rsync security release.

From arch-announce-bounces@lists.archlinux.org Thu Jan 16 23:43:01 2025
Return-Path: <arch-announce-bounces@lists.archlinux.org>
Delivered-To: hongy19@hongy19.net
Received: from lists.archlinux.org (lists.archlinux.org [2a01:4f9:c010:9eb4::1])
        by hongy19.net (OpenSMTPD) with ESMTPS id cadcd7e3 (TLSv1.3:TLS_AES_256_GCM_SHA384:256:NO)
        for <hongy19@hongy19.net>;
        Thu, 16 Jan 2025 15:43:01 +0000 (UTC)
Received: from [95.217.236.249] (localhost [IPv6:::1])
        by lists.archlinux.org (Postfix) with ESMTP id 5DEC333F49B4;
        Thu, 16 Jan 2025 15:40:53 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lists.archlinux.org;
        s=dkim-rsa; t=1737042053;
        h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
         to:to:cc:mime-version:mime-version:content-type:content-type:
         content-transfer-encoding:content-transfer-encoding:list-id:list-help:
         list-owner:list-unsubscribe:list-subscribe:list-post;
        bh=YIxQb4fmW4Q5dnt6MSjZyVCQ58OGvMyQuE70hLolseE=;
        b=lIrHiJS3a75iw7RoTO7ljdJa2kycC8ofpHkP3DjAg5bll4QF6EaHudcE78DAoMRGXZdH4b
        dY3fjVch+8W/O8r45AEQtx4IyXbmANxLNkJFz50hpUMkhh3zmXvya3xMh1gwnlk4CFE0Gu
        35h5hbYLnff0nxyn73Q9iDMU7REapTmu0cNolrDpBMn0vIGjvHTThkfHdYNwdEss5I+jwl
        vs9FtLV7Wk9D+xapCXah6it4rSe7yCjOgO3zCHv0chjGD6wwSQ3+drQAG/mZ/d6w07f1wo
        TheqGUCfd3WLs/MotpjgWWcVuJ/IiVQ2FZZyKB3tTRBTNY8UVrDOT1w7x8GgcMDWm5i7Id
        wWbVuQM7xdtSRBtxV//F0pz4fXAOwGDDN9WbSREEbOqFX90DCYZbVONh8zjqqVGF5sS9h0
        8kDQcz0BftAe86S4N6ynUi9WQmPnvrwt4U4yqCDQEtyaLK7m7FmP7Ufk27/1h97iL6jnZ+
        7jiNj8vlxrCTmWOX1mXW5yIYPx1UcBN12H4+htpSDyheU1naXA5Ryvpdt+0wUBDvksSYmI
        li/rQEKwHgpLskZYnqiBWL4XW0Es8UDtLgozMgKER5cW37PwIvM2dBvFsjmo/zeJ2LBgOO
        6/tseJp4+Zz6fOe92cnT3Y1duOKIexJGDKW7j6Kk/5scAMWBuObgU=
DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=lists.archlinux.org;
        s=dkim-ed25519; t=1737042053;
        h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
         to:to:cc:mime-version:mime-version:content-type:content-type:
         content-transfer-encoding:content-transfer-encoding:list-id:list-help:
         list-owner:list-unsubscribe:list-subscribe:list-post;
        bh=YIxQb4fmW4Q5dnt6MSjZyVCQ58OGvMyQuE70hLolseE=;
        b=RxQ1xHWLPwT/Sw7CcN5vBaoI/gWFzvs8fTj8sdXwwPMF6xDQx038RfVXgj1VOwWn1htgHV
        MWuC5uiyaJL8yqDg==
Received: from mail.archlinux.org (mail.archlinux.org
 [IPv6:2a01:4f9:c010:3052::1])
        by lists.archlinux.org (Postfix) with ESMTPS id 93D2833F37BF
        for <arch-announce@lists.archlinux.org>;
 Thu, 16 Jan 2025 15:33:44 +0000 (UTC)
Authentication-Results: lists.archlinux.org;
        dkim=pass header.d=archlinux.org header.s=dkim-rsa header.b=mKMi2LXR;
        dkim=pass header.d=archlinux.org header.s=dkim-ed25519 header.b=OOLoXGuO;
        spf=softfail (lists.archlinux.org: 2a01:4f9:c010:3052::1 is neither permitted
 nor denied by domain of arch-announce@lists.archlinux.org)
 smtp.mailfrom=arch-announce@lists.archlinux.org;
        dmarc=pass (policy=none) header.from=archlinux.org
Content-Type: text/plain; charset="utf-8"

X-Rspamd-Action: no action
Message-ID-Hash: SFUT42DYYFRULKK7FZN6YX77QE2XFEQQ
X-Message-ID-Hash: SFUT42DYYFRULKK7FZN6YX77QE2XFEQQ
X-MailFrom: arch-announce@lists.archlinux.org
X-Mailman-Rule-Hits: approved
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders
X-Mailman-Version: 3.3.10
Precedence: list
List-Id: "This mailing list is for official announcements for the Arch Linux
 distribution." <arch-announce.lists.archlinux.org>
Archived-At:
 <https://lists.archlinux.org/archives/list/arch-announce@lists.archlinux.org/message/SFUT42DYYFRULKK7FZN6YX77QE2XFEQQ/>
List-Archive:
 <https://lists.archlinux.org/archives/list/arch-announce@lists.archlinux.org/>
List-Help: <mailto:arch-announce-request@lists.archlinux.org?subject=help>
List-Owner: <mailto:arch-announce-owner@lists.archlinux.org>
List-Post: NO
List-Subscribe: <mailto:arch-announce-join@lists.archlinux.org>
List-Unsubscribe: <mailto:arch-announce-leave@lists.archlinux.org>
X-UID: 4786
Content-Length: 1116
Status: RO
X-Keywords: $Forwarded

We&#x27;d like to raise awareness about the rsync security release version `3.4.0-1` as described in our advisory [ASA-202501-1](https://security.archlinux.org/ASA-202501-1).

An attacker only requires anonymous read access to a vulnerable rsync server, such as a public mirror, to execute arbitrary code on the machine the server is running on.
Additionally, attackers can take control of an affected server and read/write arbitrary files of any connected client.
Sensitive data can be extracted, such as OpenPGP and SSH keys, and malicious code can be executed by overwriting files such as `~/.bashrc` or `~/.popt`.

We highly advise anyone who runs an rsync daemon or client prior to version `3.4.0-1` to upgrade and reboot their systems immediately.
As Arch Linux mirrors are mostly synchronized using rsync, we highly advise any mirror administrator to act immediately, even though the hosted package files themselves are cryptographically signed.

All infrastructure servers and mirrors maintained by Arch Linux have already been updated.

URL: https://archlinux.org/news/critical-rsync-security-release-340/

mpan · 2025-01-26 06:37:20

Hello,

This isn’t a bug, that could be in any way corrected. The emails are already sent. So I’m not sure, what kind of bug report would that be.

In general, if the issue was of other nature, one may contact the author directly. In this case it was Robin Candau. You could notify them on the #archlinux channel (user Antiz) or over the private email. You could also mention this on arch-general.

gromit · 2025-01-26 14:20:50

You can file an issue with the archweb platform: https://github.com/archlinux/archweb
These emails are not sent manually but from the "Create News item" form and it seems like the python code messes up certain symbol conversions when translating this from HTML

hongy19 · 2025-01-27 00:44:55

gromit wrote:

You can file an issue with the archweb platform: https://github.com/archlinux/archweb
These emails are not sent manually but from the "Create News item" form and it seems like the python code messes up certain symbol conversions when translating this from HTML

thanks so much! I has sent email to Robin Candau and will issue tr on archweb.

Arch Linux

#1 2025-01-26 05:47:01

archlinux distribution email issue

#2 2025-01-26 06:37:20

Re: archlinux distribution email issue

#3 2025-01-26 14:20:50

Re: archlinux distribution email issue

#4 2025-01-27 00:44:55

Re: archlinux distribution email issue

Board footer