Bug#711098: gforge-lists-mailman: Accentuated chars in ML description causes trouble for mailman's config_list

2013-06-05 Thread Thorsten Glaser 
On Tue, 4 Jun 2013, Olivier Berger wrote:

 SyntaxError: Non-ASCII character '\xc3' in file /tmp/9fykga on line 1, but no 
 encoding declared; see http://www.python.org/peps/pep-0263.html for details

Interestingly, mailman itself outputs the proper
# -*- coding: utf-8 -*-
header.

The create-mailing-lists.pl contains:

[…]
$cmd = /usr/lib/mailman/bin/config_list -o $tmp $listname ;
#print cmd = $cmd\n ;
# Commented out on Matt Hope do...@debian.org advice
# To be revised by Roland Mas
#   system ($cmd) ;
open CONFIG, $tmp ;
[…]

I would like to know why this is commented out, because prepending
the existing list configuration to the new values written would
indeed fix this bug.

I’ll commit a workaround in the meantime.

bye,
//mirabilos
-- 
tarent solutions GmbH
Rochusstraße 2-4, D-53123 Bonn • http://www.tarent.de/
Tel: +49 228 54881-393 • Fax: +49 228 54881-314
HRB 5168 (AG Bonn) • USt-ID (VAT): DE122264941
Geschäftsführer: Boris Esser, Sebastian Mancke


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#711098: gforge-lists-mailman: Accentuated chars in ML description causes trouble for mailman's config_list

2013-06-04 Thread Olivier Berger 
Package: gforge-lists-mailman
Version: 5.2.1+20130227-1
Severity: normal

Hi.

If one uses a character like ô (circumflex accent over o) in ML description 
field at ML creation time in FusionForge, the string is passed to the mailman 
config_list script, which fails on a Python stack trace like :

# /usr/share/gforge/bin/create-mailing-lists.pl
Traceback (most recent call last):
  File /usr/lib/mailman/bin/config_list, line 362, in module
main()
  File /usr/lib/mailman/bin/config_list, line 357, in main
do_input(listname, infile, checkonly, verbose)
  File /usr/lib/mailman/bin/config_list, line 263, in do_input
execfile(infile, globals)
  File /tmp/9fykga, line 1
SyntaxError: Non-ASCII character '\xc3' in file /tmp/9fykga on line 1, but no 
encoding declared; see http://www.python.org/peps/pep-0263.html for details
Importing fix_url...
Running fix_url.fix_url()...
Loading list helpdesk-testaccent (locked)
Saving list
Finalizing

I'm not sure how bad this is, but I fear the list is not configured properly 
(potential information disclpsure issue for list access control, etc ?).

The encoding should then be either refused by fusionforge, or simply escaped in 
some way, before calling mailman's scripts.

Hope this helps.

Best regards,

-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (900, 'testing')
Architecture: i386 (i686)

Kernel: Linux 3.2.0-4-686-pae (SMP w/2 CPU cores)
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org