Bug 49859 - Elm update uses metamail
Elm update uses metamail
Status: CLOSED WONTFIX
Product: Red Hat Linux
Classification: Retired
Component: elm (Show other bugs)
7.1
i386 Linux
high Severity medium
: ---
: ---
Assigned To: Trond Eivind Glomsrxd
David Lawrence
: Security
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2001-07-24 13:09 EDT by Alan Cox
Modified: 2007-03-26 23:47 EDT (History)
2 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2002-03-15 14:31:40 EST
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)

  None (edit)
Description Alan Cox 2001-07-24 13:09:55 EDT
The elm errata package was for some reason built using metamail hacks.
Unfortunately the hacks themselves are buggy

(trivial demo - read a mime email, while reading it hit ^C. Now the arrow
keys dont work to move up/down mails)

Secondly metamail is how shall I put it "not exactly the most secure code
on the planet"

Several of the metamail scripts are insecure, and the showexternal one
appears to be quite useful for third party mailbombing setups

I wont ask why we include stuff like showaudio which requires you ghave a
bell labs telephone !
Comment 1 Trond Eivind Glomsrxd 2001-07-25 18:31:05 EDT
These sounds like bugs in metamail, not in elm - reassigning.
Comment 2 Alan Cox 2001-07-25 18:54:11 EDT
Reassigning back to ELM. The basic problem is the metamail hacks got put into
ELM. I will open a new bug with a copy of the metamail specific errors. Either
way the metamail patch is broken - it breaks arrow keys, redraw on bounce,
viewing headers on spam and a few other things

Comment 3 Alan Cox 2001-07-26 12:45:54 EDT
Reassigning back to elm again.
The base problem is the broken patch someone merged into elm

Comment 4 Trond Eivind Glomsrxd 2001-08-23 12:36:57 EDT
Is this OK in elm 2.5.6?
Comment 5 Alan Cox 2001-08-23 13:51:08 EDT
Providing you built the package from the spec file which didnt include metamail
then should be. Im running the 2.5.6 built without that change and its behaving
fine and not using messamail at all
Comment 6 jrjohns 2001-09-18 13:41:06 EDT
If metamail is going to be left on by default, then there should be clear
comments in the spec file on how to disable it.  I tried commenting out the
Requires field, and I tried changing "d_mime" in the configuration patch to
"undef".  Neither solution fixed the problem, I guess I'm just dumb - I ended up
performing an 'rpm -e metamail' to force ELM back to the desired behavior.

Metamail is broken in other ways not even listed above.  For example:  View any
message of sufficient length with metamail enabled, and the headers to the
message scroll off of the window.  Even if the user types 'h' specifically to
display all headers, the headers roll away because they aren't counted along
with the message content.  This behavior is inconsistent with ELM's behavior
when metamail is not enabled.
Comment 7 Henri Schlereth 2002-03-15 14:31:36 EST
Additionally this also seems to affect the 7.0 update version of elm. BTW once
you remove metamail
then trying to send an attachment crashes elm with a segmentation violation.
Comment 8 Trond Eivind Glomsrxd 2002-07-24 19:02:39 EDT
elm is now deprecated.

Note You need to log in before you can comment on or make changes to this bug.