Debian Bug report logs - #770108
sessionclean script uses sed -z option which doesn't exist in wheezy's sed

version graph

Package: php5-common; Maintainer for php5-common is (unknown);

Reported by: Marian Sigler <m@qjym.de>

Date: Tue, 18 Nov 2014 22:09:01 UTC

Severity: normal

Tags: security

Merged with 770105, 770150, 770151, 770156, 770164

Found in versions php5/5.4.4-14+deb7u14, php5/5.4.35-0deb7u2, php5/5.4.35-0+deb7u1

Fixed in versions php5/5.4.35-0deb7u1, 5.4.35-0deb7u2, 5.4.35-0+deb7u2

Done: "Thijs Kinkhorst" <thijs@debian.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#770108; Package php5-common. (Tue, 18 Nov 2014 22:09:06 GMT) (full text, mbox, link).

Acknowledgement sent to Marian Sigler <m@qjym.de>:
New Bug report received and forwarded. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>. (Tue, 18 Nov 2014 22:09:06 GMT) (full text, mbox, link).

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Marian Sigler <m@qjym.de>
To: submit@bugs.debian.org
Subject: sessionclean script uses sed -z option which doesn't exist in wheezy's sed
Date: Tue, 18 Nov 2014 22:59:03 +0100
Package: php5-common
Version: 5.4.35-0+deb7u1

The /usr/lib/php5/sessionclean script uses the -z option of sed, which
the version in wheezy (sed 4.2.1-10) doesn't have yet.


In addition I think the `[ -x /usr/bin/lsof ] &&` in the script is not a
good idea, because in the case lsof really does not exist, the second
line would remove used files after some time. (I don't know the details
but that's what it looks to me, just wanted to point it out.)


Marian

Severity set to 'serious' from 'normal' Request was from Ondřej Surý <ondrej@debian.org> to control@bugs.debian.org. (Wed, 19 Nov 2014 08:27:13 GMT) (full text, mbox, link).

Merged 770105 770108 Request was from Ondřej Surý <ondrej@debian.org> to control@bugs.debian.org. (Wed, 19 Nov 2014 08:27:15 GMT) (full text, mbox, link).

Message #10 received at 770105-done@bugs.debian.org (full text, mbox, reply):

From: Ondřej Surý <ondrej@sury.org>
To: 770105-done@bugs.debian.org
Cc: Daniel Reichelt <debian@nachtgeist.net>, Chris Frey <cdfrey@foursquare.net>, Paul Tomblin <ptomblin@xcski.com>, Piotr Ożarowski <piotr@debian.org>, Aaron Schrab <aaron@schrab.com>, Pablo Rauzy <debbug@uzy.me>, Kees Meijs <post@keesmeijs.nl>, Christoph Biedl <debian.axhn@manchmal.in-ulm.de>
Subject: Re: Bug#770105: php5-common: sed call in cron script fails with "invalid opdtion -- 'z'"
Date: Wed, 19 Nov 2014 09:39:06 +0100
Version: 5.4.35-0deb7u2

Hi folks,

sorry for the breakage. I did quite extensive testing with the submitter
of #766147, but somehow we have missed the fact that sed -z doesn't work
on wheezy.

5.4.35-0deb7u2 with reverted change has been uploaded to security-master
and should be available quickly.

Cheers,
-- 
Ondřej Surý <ondrej@sury.org>
Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server

Merged 770105 770108 770150 770151 770156 Request was from Sebastiaan Couwenberg <sebastic@xs4all.nl> to control@bugs.debian.org. (Wed, 19 Nov 2014 09:36:41 GMT) (full text, mbox, link).

Merged 770105 770108 770150 770151 770156 770164 Request was from "Sebastiaan Couwenberg" <sebastic@xs4all.nl> to control@bugs.debian.org. (Wed, 19 Nov 2014 10:48:11 GMT) (full text, mbox, link).

Severity set to 'normal' from 'serious' Request was from Yves-Alexis Perez <corsac@debian.org> to control@bugs.debian.org. (Wed, 19 Nov 2014 10:48:19 GMT) (full text, mbox, link).

Bug reopened Request was from Yves-Alexis Perez <corsac@debian.org> to control@bugs.debian.org. (Wed, 19 Nov 2014 10:48:25 GMT) (full text, mbox, link).

No longer marked as fixed in versions 5.4.35-0deb7u2. Request was from Yves-Alexis Perez <corsac@debian.org> to control@bugs.debian.org. (Wed, 19 Nov 2014 10:48:30 GMT) (full text, mbox, link).

Marked as fixed in versions php5/5.4.35-0deb7u1 and 5.4.35-0deb7u2. Request was from Yves-Alexis Perez <corsac@debian.org> to control@bugs.debian.org. (Wed, 19 Nov 2014 10:48:36 GMT) (full text, mbox, link).

Marked as found in versions php5/5.4.4-14+deb7u14 and php5/5.4.35-0deb7u2. Request was from Yves-Alexis Perez <corsac@debian.org> to control@bugs.debian.org. (Wed, 19 Nov 2014 10:48:42 GMT) (full text, mbox, link).

Added tag(s) security and pending. Request was from Yves-Alexis Perez <corsac@debian.org> to control@bugs.debian.org. (Wed, 19 Nov 2014 10:48:47 GMT) (full text, mbox, link).

Merged 766147 770105 770108 770150 770151 770156 770164 Request was from Yves-Alexis Perez <corsac@debian.org> to control@bugs.debian.org. (Wed, 19 Nov 2014 10:48:54 GMT) (full text, mbox, link).

Disconnected #766147 from all other report(s). Request was from Yves-Alexis Perez <corsac@debian.org> to control@bugs.debian.org. (Wed, 19 Nov 2014 10:54:06 GMT) (full text, mbox, link).

Merged 770105 770108 770150 770151 770156 770164 Request was from Yves-Alexis Perez <corsac@debian.org> to control@bugs.debian.org. (Wed, 19 Nov 2014 10:54:10 GMT) (full text, mbox, link).

Disconnected #770108 from all other report(s). Request was from Yves-Alexis Perez <corsac@debian.org> to control@bugs.debian.org. (Wed, 19 Nov 2014 11:00:08 GMT) (full text, mbox, link).

Merged 770105 770108 770150 770151 770156 770164 Request was from Yves-Alexis Perez <corsac@debian.org> to control@bugs.debian.org. (Wed, 19 Nov 2014 11:03:18 GMT) (full text, mbox, link).

Message #37 received at 770164-done@bugs.debian.org (full text, mbox, reply):

From: "Thijs Kinkhorst" <thijs@debian.org>
To: 770164-done@bugs.debian.org
Subject: Re: Bug#770164: php5: /usr/lib/php5/sessionclean broken: passes incompatible argument to sed
Date: Wed, 19 Nov 2014 12:03:01 +0100
Version: 5.4.35-0+deb7u2

This was fixed in a DSA regression update.

Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Sat, 20 Dec 2014 07:25:49 GMT) (full text, mbox, link).

Send a report that this bug log contains spam.

Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Sun Jul 2 03:47:33 2023; Machine Name: bembo

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.