Bug#359905: PTS: unsubscription fraud possible
Package: qa.debian.org
Severity: important
Recently, I stopped receiving bug information via the PTS for
rsnapshot (with various consequences including an NMU). I
found nothing relevant in the PTS log files but I did see
PTS mail was sent to several of my different email addresses.
When tidying my PTS subscriptions after that, it seemed that
I was not asked for confirmation when unsubscribing email
addresses from some packages - anyone can unsubscribe
any address from packages without the victim being told.
I hope I have misunderstood. If not and this bug is tagged
confirmed help, I will work on a patch when I get time.
Reply to: