Re: Re: SECURITY ERROR on cacheid files - need explains
| From: | till | Date: | Tue, 19 Jul 2011 23:07:32 +0000 |
| Subject: | Re: Re: SECURITY ERROR on cacheid files - need explains | ||
| References: | 1 2 | Groups: | php.pear.dev |
| Request: | Send a blank email to pear-dev+get-54402@lists.php.net to get a copy of this message | ||
I think these are regressions from a bugfix that was rolled out.
Can you open a bug report?
On Tue, Jul 19, 2011 at 6:40 PM, Laurent Laville
<pear@laurent-laville.org> wrote:
> More issue and no solution (except clear-cache again)
>
> Today, at work, I've tried to update my local copy of Zend Framework via
> Zfcampus PEAR channel
>
> My previous version was 1.11.7
>
> First try:
>
> pear upgrade zfcampus/ZF
>
> Here are result :
>
> Nothing to upgrade
>
>
> Second try :
>
> pear remote-info zfcampus/ZF
>
> Here are results :
>
> Unknown package: "ZF" in channel "pear.zfcampus.org"
>
> Debug: SECURITY ERROR: Will not write to
> C:\UwAmp\bin\php\php-5.2.17\cache\9721b9ba64031b1efed02e794e796bc8rest.cacheid
> as it is symlinked to
> C:\UwAmp\bin\php\php-5.2.17\cache\9721b9ba64031b1efed02e794e796bc8rest.cacheid
> - Possible symlink attack
>
>
> Temporary solution : pear clear-cache
>
> And then re-run command pear remote-info zfcampus/ZF
>
> I got this time
>
> pear remote-info zfcampus/ZF
> PACKAGE DETAILS:
> ================
> Latest 1.11.9
> Installed 1.11.7
> Package ZF
> License BSD
> Category Zend Framework
> Summary Zend Framework Full Pear Distribution
> Description The Zend Framework full pear distribution
> includes the Standard Library along with the
> unit tests.
>
> Nobody think it's important ?
>
>
>
>
> Le 18/07/2011 14:39, Laurent Laville a écrit :
>>
>> Hello,
>>
>> Since I've upgrade my PEAR version to 1.9.4 , each time I used PEAR
>> command related to packages, I got "SECURITY ERROR" messages.
>>
>> Example
>>
>> SECURITY ERROR: Will not write to
>>
>> C:\UwAmp\bin\php\php-5.2.17\cache\90f637c10bac06c77628571c5abfb459rest.cacheid
>>
>> as it is symlinked to
>>
>> C:\UwAmp\bin\php\php-5.2.17\cache\90f637c10bac06c77628571c5abfb459rest.cacheid
>>
>> - Possible symlink attack
>>
>> Both on PHP5.2 and PHP5.3 on windows XP
>>
>> As symbolic link does not exists on Windows, I will appreciate if
>> someone can give me explains about this issue.
>>
>> My temporary solution is to clear cache before to run other command
>>
>> Example
>>
>> pear clear-cache
>>
>> Before to run
>>
>> pear list-upgrades
>
>
> --
> PEAR Development Mailing List (http://pear.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>