Re: SECURITY ERROR on cacheid files - need explains
| From: | Laurent Laville | Date: | Tue, 19 Jul 2011 16:40:39 +0000 |
| Subject: | Re: SECURITY ERROR on cacheid files - need explains | ||
| References: | 1 | Groups: | php.pear.dev |
| Request: | Send a blank email to pear-dev+get-54401@lists.php.net to get a copy of this message | ||
More issue and no solution (except clear-cache again)
Today, at work, I've tried to update my local copy of Zend Framework via Zfcampus PEAR channel
My previous version was 1.11.7
First try:
pear upgrade zfcampus/ZF
Here are result :
Nothing to upgrade
Second try :
pear remote-info zfcampus/ZF
Here are results :
Unknown package: "ZF" in channel "pear.zfcampus.org"
Debug: SECURITY ERROR: Will not write to
C:\UwAmp\bin\php\php-5.2.17\cache\9721b9ba64031b1efed02e794e796bc8rest.cacheid
as it is symlinked to
C:\UwAmp\bin\php\php-5.2.17\cache\9721b9ba64031b1efed02e794e796bc8rest.cacheid
- Possible symlink attack
Temporary solution : pear clear-cache
And then re-run command pear remote-info zfcampus/ZF
I got this time
pear remote-info zfcampus/ZF
PACKAGE DETAILS:
================
Latest 1.11.9Installed 1.11.7
Package ZF License BSD Category Zend Framework Summary Zend Framework Full Pear DistributionDescription The Zend Framework full pear distribution
includes the Standard Library along with the
unit tests.
Nobody think it's important ?
Le 18/07/2011 14:39, Laurent Laville a écrit :
Hello, Since I've upgrade my PEAR version to 1.9.4 , each time I used PEAR command related to packages, I got "SECURITY ERROR" messages. Example SECURITY ERROR: Will not write to C:\UwAmp\bin\php\php-5.2.17\cache\90f637c10bac06c77628571c5abfb459rest.cacheid as it is symlinked to C:\UwAmp\bin\php\php-5.2.17\cache\90f637c10bac06c77628571c5abfb459rest.cacheid - Possible symlink attack Both on PHP5.2 and PHP5.3 on windows XP As symbolic link does not exists on Windows, I will appreciate if someone can give me explains about this issue. My temporary solution is to clear cache before to run other command Example pear clear-cache Before to run pear list-upgrades