[Pkg-sympa-devel] Bug#629082: wwsympa: wrong permissions on wwsympa.fcgi and C wrapper

Fri Jun 3 11:33:39 UTC 2011

Package: sympa
Version: 6.1.1~dfsg-2
Severity: important

Hi,

During an upgrade on a system running the unstable branch, both perl
(to 5.12) and Sympa (to 6.1.1) were ugraded. After this upgrade, wwsympa
was broken:

[pts/0] # su www-data -c /usr/lib/cgi-bin/sympa/wwsympa-wrapper.fcgi
defined(%hash) is deprecated at /usr/lib/cgi-bin/sympa/wwsympa.fcgi line 15775.
        (Maybe you should just omit the defined()?)
Unable to load config file /etc/sympa/wwsympa.conf

The first error is because of perl5.12, the second one however seems to be
related to permissions on files wwsympa.fcgi and wwsympa-wrapper.fcgi.

Files "as is" after package install:

-rwsr-sr-x 1 sympa sympa 608094 Oct 28  2010 wwsympa.fcgi
-rwxr-xr-x 1 root  root    2816 Oct 28  2010 wwsympa-wrapper.fcgi

Had to change perms/owner to:

-rwxr-xr-x 1 sympa sympa 608094 Oct 28  2010 wwsympa.fcgi
-rwsr-sr-x 1 sympa sympa   2816 Oct 28  2010 wwsympa-wrapper.fcgi

(chmod ug-s wwsympa.fcgi; chown sympa.sympa wwsympa-wrapper.fcgi;
 chmod ug+s wwsympa-wrapper.fcgi).

Please review this and correct the package if you agree with this fix.

Thanks.
JL.

-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.38.6
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages sympa depends on:
ii  adduser                     3.112+nmu2   add and remove users and groups
ii  dbconfig-common             1.8.47       common framework for packaging dat
ii  debconf [debconf-2.0]       1.5.39       Debian configuration management sy
ii  libarchive-zip-perl         1.30-4       Perl module for manipulation of ZI
ii  libc6                       2.13-4       Embedded GNU C Library: Shared lib
ii  libcgi-fast-perl            5.12.3-7     CGI::Fast Perl module
ii  libcgi-pm-perl              3.53-1       module for Common Gateway Interfac
ii  libdbd-mysql-perl           4.019-1      Perl5 database interface to the My
ii  libdbi-perl                 1.616-1+b1   Perl Database Interface (DBI)
ii  libfcgi-perl                0.71-1+b1    helper module for FastCGI
ii  libfile-copy-recursive-perl 0.38-1       Perl extension for recursively cop
ii  libhtml-format-perl         2.05-1       module for transforming HTML into 
ii  libhtml-stripscripts-parser 1.03-1       module to filter scripts out of HT
ii  libhtml-tree-perl           4.2-1        Perl module to represent and creat
ii  libintl-perl                1.20-1       Uniforum message translations syst
ii  libio-stringy-perl          2.110-4      Perl modules for IO from scalars a
ii  libmailtools-perl           2.07-1       Manipulate email in perl programs
ii  libmime-charset-perl        1.008.1-1    module for MIME character set info
ii  libmime-encwords-perl       1.012-1      Perl interface to deal with RFC 20
ii  libmime-lite-html-perl      1.23-1       Transform HTML page into MIME emai
ii  libmime-tools-perl          5.502-1      Perl5 modules for MIME-compliant m
ii  libmsgcat-perl              1.03-5+b1    Locale::Msgcat perl module
ii  libnet-ldap-perl            1:0.4001-2   client interface to LDAP servers
ii  libnet-netmask-perl         1.9015-4     parse, manipulate and lookup IP ne
ii  libregexp-common-perl       2011041701-1 module with common regular express
ii  libtemplate-perl            2.22-0.1+b1  template processing system written
ii  libterm-progressbar-perl    2.09-6       Perl module to print a progress ba
ii  libxml-libxml-perl          1.70.ds-1+b1 Perl interface to the libxml2 libr
ii  lsb-base                    3.2-27       Linux Standard Base 3.2 init scrip
ii  mhonarc                     2.6.18-1     Mail to HTML converter
ii  perl                        5.12.3-7     Larry Wall's Practical Extraction 
ii  perl-modules [libcgi-pm-per 5.12.3-7     Core Perl modules
ii  postfix [mail-transport-age 2.8.3-1      High-performance mail transport ag
ii  syslog-ng [system-log-daemo 3.2.4-1      Next generation logging daemon

Versions of packages sympa recommends:
ii  ca-certificates       20110421           Common CA certificates
pn  doc-base              <none>             (no description available)
ii  libapache2-mod-fastcg 2.4.7~0910052141-1 Apache 2 FastCGI module for long-r
ii  libcrypt-ciphersaber- 0.61-4             Perl module implementing CipherSab
ii  libfile-nfslock-perl  1.20-2             perl module to do NFS (or not) loc
ii  libio-socket-ssl-perl 1.43-1             Perl module implementing object or
ii  libmail-dkim-perl     0.39-1             cryptographically identify the sen
ii  libsoap-lite-perl     0.712-3            Perl implementation of a SOAP clie
ii  locales               2.13-4             Embedded GNU C Library: National L
ii  locales-all [locales] 2.13-4             Embedded GNU C Library: Precompile
ii  logrotate             3.7.8-6            Log rotation utility
ii  mysql-server          5.1.56-1           MySQL database server (metapackage
ii  mysql-server-5.1 [mys 5.1.56-1           MySQL database server binaries and

Versions of packages sympa suggests:
ii  apache2                       2.2.19-1   Apache HTTP Server metapackage
ii  apache2-mpm-prefork [httpd-cg 2.2.19-1   Apache HTTP Server - traditional n
ii  libapache2-mod-fcgid          1:2.3.6-1  an alternative module compat with 
pn  libauthcas-perl               <none>     (no description available)
pn  libdbd-oracle-perl            <none>     (no description available)
pn  libtext-linefold-perl         <none>     (no description available)
pn  libtext-wrap-perl             <none>     (no description available)
ii  openssl                       1.0.0d-2   Secure Socket Layer (SSL) binary a

-- Configuration Files:
/etc/sympa/apache changed:
Alias /static-sympa /var/lib/sympa/static_content
ScriptAlias /wws /usr/lib/cgi-bin/sympa/wwsympa-wrapper.fcgi

/etc/sympa/sympa.conf-smime.in [Errno 13] Permission denied: u'/etc/sympa/sympa.conf-smime.in'

-- debconf information excluded