Comment 1 for bug 1621172

Revision history for this message
Mark Sapiro (msapiro) wrote :

Additional info on the impact of this bug.

Normally, the qrunner processes are not affected by this as the Python that runs mailmanctl is not invoked with a -S option.

The compiled wrappers that invoke the Mailman CGIs and the mail queueing scripts do invoke Python with a -S option for additional security. This is also not normally a problem because the CGIs and mail queueing scripts don't import anything outside of Mailman and the Python standard library, however if there are site or list modifications to use, for example, a modified MemberAdaptor that wants to import something such as 'ldap' which is outside of Mailman and the standard library, the path to that module must be in sys.path.

The fix committed here will help in those cases, but won't help if the required module is, for example, in /usr/local/lib/pythonx.y/*.