Re: Re: SECURITY ERROR on cacheid files - need explains

From: Date: Tue, 19 Jul 2011 23:07:32 +0000
Subject: Re: Re: SECURITY ERROR on cacheid files - need explains
References: 1 2  Groups: php.pear.dev 
Request: Send a blank email to pear-dev+get-54402@lists.php.net to get a copy of this message
I think these are regressions from a bugfix that was rolled out. Can you open a bug report? On Tue, Jul 19, 2011 at 6:40 PM, Laurent Laville <pear@laurent-laville.org> wrote: > More issue and no solution (except clear-cache again) > > Today, at work, I've tried to update my local copy of Zend Framework via > Zfcampus PEAR channel > > My previous version was 1.11.7 > > First try: > > pear upgrade zfcampus/ZF > > Here are result : > > Nothing to upgrade > > > Second try : > > pear remote-info zfcampus/ZF > > Here are results : > > Unknown package: "ZF" in channel "pear.zfcampus.org" > > Debug: SECURITY ERROR: Will not write to > C:\UwAmp\bin\php\php-5.2.17\cache\9721b9ba64031b1efed02e794e796bc8rest.cacheid > as it is symlinked to > C:\UwAmp\bin\php\php-5.2.17\cache\9721b9ba64031b1efed02e794e796bc8rest.cacheid > - Possible symlink attack > > > Temporary solution : pear clear-cache > > And then re-run command pear remote-info zfcampus/ZF > > I got this time > > pear remote-info zfcampus/ZF > PACKAGE DETAILS: > ================ > Latest      1.11.9 > Installed   1.11.7 > Package     ZF > License     BSD > Category    Zend Framework > Summary     Zend Framework Full Pear Distribution > Description The Zend Framework full pear distribution >            includes the Standard Library along with the >            unit tests. > > Nobody think it's important ? > > > > > Le 18/07/2011 14:39, Laurent Laville a écrit : >> >> Hello, >> >> Since I've upgrade my PEAR version to 1.9.4 , each time I used PEAR >> command related to packages, I got "SECURITY ERROR" messages. >> >> Example >> >> SECURITY ERROR: Will not write to >> >> C:\UwAmp\bin\php\php-5.2.17\cache\90f637c10bac06c77628571c5abfb459rest.cacheid >> >> as it is symlinked to >> >> C:\UwAmp\bin\php\php-5.2.17\cache\90f637c10bac06c77628571c5abfb459rest.cacheid >> >> - Possible symlink attack >> >> Both on PHP5.2 and PHP5.3 on windows XP >> >> As symbolic link does not exists on Windows, I will appreciate if >> someone can give me explains about this issue. >> >> My temporary solution is to clear cache before to run other command >> >> Example >> >> pear clear-cache >> >> Before to run >> >> pear list-upgrades > > > -- > PEAR Development Mailing List (http://pear.php.net/) > To unsubscribe, visit: http://www.php.net/unsub.php > >

« previous php.pear.dev (#54402) next »