42512 - bug mail spam being sent to wrong people.

Status: VERIFIED INVALID

(Bugzilla :: Email Notifications, defect, P2)

Description

[Dawn Endico]

Lisa and Peterson are mysteriously getting notifications from bugzilla for
bugs which they shouldn't be notified about. (they're not reporter, cc
owner or qa contact) This is troubling since these are security bugs. Are
other people outside the security group getting these messages too? (or are
they in the group?)

these are the bugs they were cc'd on.
27010, 27012, 26041, 12182, 13291, 13192, 16307, 26603

Here's a sample mail header.


 Subject: 
         [Bug 26603] Changed - security audit of mozilla code
   Date: 
         Tue, 13 Jun 2000 09:11:48 -0700 (PDT)
   From: 
         [e-mail]
     To: 
         [e-mail]
     CC: 
         [e-mail], [e-mail], [e-mail]

Comment 1

[Dawn Endico]

btw, i verified that neither of them are watching other bugzilla users.

Comment 2

[lchiang]

There are more bug numbers than the ones that Dawn mentions (I just sent her a 
sampling via email :-).  It seems that junruh did a bulk change to all the 
security bugs which he was qa contact on and changed the qa contact to 
[e-mail].  

I haven't seen any more since that one time.

Comment 3

[Dawn Endico]

did you guys vote for those bugs by any chance?

Comment 4

[lchiang]

No.  I never vote for bugs and in this case, these are all security bugs which I 
have no interest in :-)

Comment 5

[Matthew Tuck [:CodeMachine]]

Is this still happening?  Without bug #26194, I don't see how we can
troubleshoot this even if it is.

Comment 6

[Christopher Aillon (sabbatical, not receiving bugmail)]

Mass moving to new product Bugzilla...

Comment 7

[Jacob Steenhagen]

This looks very much like oldemailtech (newemailtech doesn't have Cc: lines). 
Oldemailtech is long gone from the bugzilla codebase.  Also, I know I've seen a
line in processmail that will refuse to send bugmail to a user unless they are
in the proper groupset (and at this time it doesn't even account for that
*_accessable bits).

Marking this INVALID because it is in an old codebase.  If this is still
happening, please reopen.

Comment 8

[Zach Lipton [:zach]]

verif

Comment 9

[Dave Miller [:justdave]]

correcting version field lost in product move