Bug#516164: sympa: 2 Insecure errors when running setuid in apache error log

2012-01-07 Thread Giorgio Volpe
Same problem!? Upgraded from sympa 5.4 to sympa_6.1.7~dfsg-2 Now wwsympa doesn't work any more. I got a lot of Insecure errors when running setuid in the logs, repeated many times. This are only the first and last lines ... [Sat Jan 07 17:05:18 2012] [error] [client 151.49.48.182] FastCGI:

Bug#516164: sympa: 2 Insecure errors when running setuid in apache error log

2012-01-05 Thread David Verdin
Dear all, This problem showed up recently and was fixed upstream: https://sourcesup.cru.fr/scm/viewvc.php?view=revisionroot=symparevision=7215 I'm not sure whether this patch was already included in a new stable version but I'll tag the 6.1.8 pretty soon, so you will be able to add it to the

Bug#516164: sympa: 2 Insecure errors when running setuid in apache error log

2012-01-04 Thread Olivier Berger
On Mon, Dec 19, 2011 at 09:39:54PM +0100, Emmanuel Bouthenot wrote: Hi Olivier, On Thu, Dec 15, 2011 at 02:21:04PM +0100, Olivier Berger wrote: [...] I'm not sure, but I don't think so, for those errors above. On the other hand, the problem with these warnings : mod_fcgid: stderr:

Bug#516164: sympa: 2 Insecure errors when running setuid in apache error log

2011-12-19 Thread Emmanuel Bouthenot
Hi Olivier, On Thu, Dec 15, 2011 at 02:21:04PM +0100, Olivier Berger wrote: [...] I'm not sure, but I don't think so, for those errors above. On the other hand, the problem with these warnings : mod_fcgid: stderr: Insecure dependency in open while running setuid at

Bug#516164: sympa: 2 Insecure errors when running setuid in apache error log

2011-12-15 Thread Olivier Berger
On Mon, Nov 28, 2011 at 11:06:27PM +0100, Emmanuel Bouthenot wrote: Hi Olivier, On Thu, Feb 19, 2009 at 05:12:30PM +0100, Olivier Berger wrote: Package: sympa Version: 5.3.4-6.1 Severity: normal Hi. I just upgraded one of my servers from etch to lenny and got : [Thu Feb 19

Bug#516164: sympa: 2 Insecure errors when running setuid in apache error log

2011-11-28 Thread Emmanuel Bouthenot
Hi Olivier, On Thu, Feb 19, 2009 at 05:12:30PM +0100, Olivier Berger wrote: Package: sympa Version: 5.3.4-6.1 Severity: normal Hi. I just upgraded one of my servers from etch to lenny and got : [Thu Feb 19 17:05:34 2009] [error] [client xxx.xxx.xxx.xxx] Insecure $ENV{PATH} while

Bug#516164: sympa: 2 Insecure errors when running setuid in apache error log

2009-02-20 Thread Olivier Salaün
Hi Olivier, I might provide some useful informations : * first line of wwsympa.fcgi should look like #!/usr/bin/perl -U. If the -U option is missing, it might be the reason why you get these warnings/errors * Sympa 5.2 introduced a Perl wrapper for wwsympa.fcgi that uses

Bug#516164: sympa: 2 Insecure errors when running setuid in apache error log

2009-02-20 Thread Olivier Berger
Le vendredi 20 février 2009 à 11:22 +0100, Olivier Salaün a écrit : Hi Olivier, I might provide some useful informations : * first line of wwsympa.fcgi should look like #!/usr/bin/perl -U. If the -U option is missing, it might be the reason why you get these

Bug#516164: sympa: 2 Insecure errors when running setuid in apache error log

2009-02-20 Thread Olivier Berger
On Fri, Feb 20, 2009 at 02:25:14PM +0100, Olivier Berger wrote: * Sympa 5.2 introduced a Perl wrapper for wwsympa.fcgi that uses sudo. Do you use it? Nope... the wrapper is provided in the Debian package but not used in the default setup. I've tried with the wrapper and this

Bug#516164: sympa: 2 Insecure errors when running setuid in apache error log

2009-02-20 Thread Olivier Berger
On Fri, Feb 20, 2009 at 02:40:58PM +0100, Olivier Berger wrote: On Fri, Feb 20, 2009 at 02:25:14PM +0100, Olivier Berger wrote: * Sympa 5.2 introduced a Perl wrapper for wwsympa.fcgi that uses sudo. Do you use it? Nope... the wrapper is provided in the Debian package but not

Bug#516164: sympa: 2 Insecure errors when running setuid in apache error log

2009-02-19 Thread Olivier Berger
Package: sympa Version: 5.3.4-6.1 Severity: normal Hi. I just upgraded one of my servers from etch to lenny and got : [Thu Feb 19 17:05:34 2009] [error] [client xxx.xxx.xxx.xxx] Insecure $ENV{PATH} while running setuid at /usr/lib/sympa/bin/Conf.pm line 295, IN line 37. [Thu Feb 19 17:05:34

Bug#516164: sympa: 2 Insecure errors when running setuid in apache error log

2009-02-19 Thread Stefan Hornburg
Olivier Berger wrote: Package: sympa Version: 5.3.4-6.1 Severity: normal Hi. I just upgraded one of my servers from etch to lenny and got : [Thu Feb 19 17:05:34 2009] [error] [client xxx.xxx.xxx.xxx] Insecure $ENV{PATH} while running setuid at /usr/lib/sympa/bin/Conf.pm line 295, IN line 37.

Bug#516164: sympa: 2 Insecure errors when running setuid in apache error log

2009-02-19 Thread Olivier Berger
On Thu, Feb 19, 2009 at 05:12:30PM +0100, Olivier Berger wrote: Package: sympa Version: 5.3.4-6.1 Severity: normal Hi. I just upgraded one of my servers from etch to lenny and got : [Thu Feb 19 17:05:34 2009] [error] [client xxx.xxx.xxx.xxx] Insecure $ENV{PATH} while running setuid at

Bug#516164: sympa: 2 Insecure errors when running setuid in apache error log

2009-02-19 Thread Stefan Hornburg
Olivier Berger wrote: On Thu, Feb 19, 2009 at 05:12:30PM +0100, Olivier Berger wrote: Package: sympa Version: 5.3.4-6.1 Severity: normal Hi. I just upgraded one of my servers from etch to lenny and got : [Thu Feb 19 17:05:34 2009] [error] [client xxx.xxx.xxx.xxx] Insecure $ENV{PATH} while

Bug#516164: sympa: 2 Insecure errors when running setuid in apache error log

2009-02-19 Thread Olivier Berger
title 516164 Several Insecure errors when running setuid in apache error log thanks On Thu, Feb 19, 2009 at 05:12:30PM +0100, Olivier Berger wrote: I just upgraded one of my servers from etch to lenny and got : [Thu Feb 19 17:05:34 2009] [error] [client xxx.xxx.xxx.xxx] Insecure $ENV{PATH}

Bug#516164: sympa: 2 Insecure errors when running setuid in apache error log

2009-02-19 Thread Olivier Berger
Le jeudi 19 février 2009 à 17:40 +0100, Olivier Berger a écrit : There's actually unfortunately more than these 2 : # grep Insecure dependency /var/log/apache2/error.log | sed 's/.*Insecure/Insecure/g' | sed 's/, referer.*//g' | sort -u Insecure dependency in open while running setuid at