Mailing-List: contact ooo-dev-help@incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: ooo-dev@incubator.apache.org
Received-SPF: pass (athena.apache.org: local policy)
Message-Id: <1321251019.11109.140660998541301@webmail.messagingengine.com>
From: "Daniel Shahaf" <d.s@daniel.shahaf.name>
To: ooo-dev@incubator.apache.org
Cc: "Apache Infrastructure" <infrastructure@apache.org>
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="UTF-8"
References: <4EBD9029.7080206@apache.org>
 <20111113203127.GA18990@daniel3.local>
 <4EC04087.4010802@apache.org>
Subject: Re: Problem showing on main ASF page
In-Reply-To: <4EC04087.4010802@apache.org>
Date: Mon, 14 Nov 2011 08:10:19 +0200


On Sunday, November 13, 2011 5:11 PM, "tj@apache.org" <tj@apache.org> wrote:
> Daniel,
>=20
> On 11/13/2011 15:32, Daniel Shahaf wrote:
> > Would have been useful if you noted the date/time you saw the site, the
> > revision of ^/infrastructure/trunk/site at the time, or took
> > a screenshot.  The site regenerates hourly.
> >
> You may assume from the date line on my email that the problem was=20
> occurring then. Actually, the problem is still visible *now*. The=20
> security item has moved off the bottom of the list, but the pied item is=
=20
> still visible as the last item.
>=20
> I have no idea how to find the revision level; I have no SVN fu.
>=20

Go to https://svn.apache.org/repos/infra/websites/production/www and
note the revnum at the end of the page.

> Screenshots I can do. I will attach them (and a copy of the whole page)=
=20
> for the benefit of the mbox developers. (If anybody else has a use for=20
> them, just ask.) But they (and the subject line) are only part of the=20
> problem.
>=20
> > Anyway, the subject line contains a =E2=84=A2 character, which had gott=
en
> > encoded, was not decoded by mod_mbox (aka mail-archives.apache.org the
> > software behind), and the CMS stuff just took it literally.
> >
> Please note the garbled em-dashes in the announcement date line. I have=
=20
> seen very similar garbles where mbox is not at all involved. I suggest=20
> that there is another problem, elsewhere.
>=20

Can't reproduce.  The =E2=84=A2 in the subject link and the em dashes in the
body display fine here.

> > I suggest you follow up with the mod_mbox developers
> > (http://httpd.apache.org/mod_mbox/) about the mod_mbox bug.
>=20
> Will do. (Well, will try.)
>=20

Good luck

> > I'll
> > follow up with press@ to advise them not to use UTF-8 in subjects until
> > the bug is fixed.
> >
> > Thanks for the report.
>=20
> Welcome. It's very frustrating to still have the system programmer's eye=
=20
> for things out of place, but not have the "hands" (tools and fu) to fix=
=20
> them myself. --/tj/

I'm sure mod_mbox devs would appreciate extra eyes/hands on the bugfix.

> >
> > tj@apache.org wrote on Fri, Nov 11, 2011 at 16:14:17 -0500:
> >> http://www.apache.org/
> >>
> >> is showing a garbled announcement for the Tika project. The top
> >> version is fine, but another, further down (just above the Tomcat
> >> CVE), is trashed.
> >>
> >> In particular, the date line shows garbles where em-dashes should
> >> be. (Not to mention the headline.) I have seen similar garbles on
> >> the web pages of the AOOo podling. I have looked at the SVN content
> >> of one of these, using the "view" link provided by the commit
> >> notice, and the content itself looks okay, although the commit
> >> notice shows the garbles.
> >>
> >> The problem is with UTF-8 translation somewhere. Using the UTF-8
> >> rules for multi-byte encoding, the garbles decode into the expected
> >> characters.
> >>
> >> If I knew enough to file an issue, I would. --/tj/
> >>
> >> =3D=3D=3D=3D=3D=3D scraped off the web page:
> >> =3D?utf-8?B?VGhlIEFwYWNoZSBTb2Z0d2FyZSBGb3VuZGF0aW9uIEFubm91bmNlcyBBcG=
Fj?=3D
> >> =3D?utf-8?B?aGUgVGlrYeKEoiB2MS4wIA=3D=3D?=3D
> >>
> >> [this announcement is also available online at=C3=82 http://s.apache.o=
rg/N0I]
> >>
> >> Standards-based, Content and Metadata Detection and Analysis Toolkit
> >> Powers Large-scale, Multi-lingual,
> >> Multi-format Repositories at Adobe, the Internet Archive, NASA Jet
> >> Propulsion Laboratory,
> >> and more.
> >>
> >> 9 November 2011 =C3=A2=C2=80=C2=94FOREST HILL, MD=C3=A2=C2=80=C2=94 Th=
e Apache Software Foundation
> >> (ASF), the all-volunteer
> >> developers, stewards, and incubators of...
> >>
> >> [SECURITY] CVE-2011-3376 Apache Tomcat - Privilege Escalation via
> >> Manager app
> >>
> >
> >
>=20
>=20
>=20