2013-11-26 22:15:02 |
Dustin Lundquist |
bug |
|
|
added bug |
2013-11-26 22:16:48 |
Dustin Lundquist |
attachment added |
|
memcached-no-create-home.patch https://bugs.launchpad.net/ubuntu/+source/memcached/+bug/1255328/+attachment/3917778/+files/memcached-no-create-home.patch |
|
2013-11-26 22:17:50 |
Dustin Lundquist |
description |
<pre>
[dustin@lilthing ~]$ ls /
bin boot cdrom dev etc home initrd.img initrd.img.old lib lib64 lost+found media mnt opt proc root run sbin srv sys tmp usr var vmlinuz vmlinuz.old
[dustin@lilthing ~]$ sudo apt-get install memcached
Reading package lists... Done
Building dependency tree
Reading state information... Done
Suggested packages:
libcache-memcached-perl libmemcached
The following NEW packages will be installed:
memcached
0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 0 B/76.3 kB of archives.
After this operation, 228 kB of additional disk space will be used.
Selecting previously unselected package memcached.
(Reading database ... 243247 files and directories currently installed.)
Unpacking memcached (from .../memcached_1.4.14-0ubuntu4_amd64.deb) ...
Processing triggers for man-db ...
Processing triggers for ureadahead ...
Setting up memcached (1.4.14-0ubuntu4) ...
Starting memcached: memcached.
Processing triggers for ureadahead ...
[dustin@lilthing ~]$ ls /
bin boot cdrom dev etc home initrd.img initrd.img.old lib lib64 lost+found media mnt nonexistent opt proc root run sbin srv sys tmp usr var vmlinuz vmlinuz.old
</pre>
Suggested fix:
<pre>
--- memcached-1.4.14/debian/memcached.postinst.orig 2013-11-26 14:13:52.632357089 -0800
+++ memcached-1.4.14/debian/memcached.postinst 2013-11-26 14:14:30.788355734 -0800
@@ -22,6 +22,7 @@
adduser \
--system \
--disabled-login \
+ --no-create-home \
--ingroup $GROUP \
--home $DATADIR \
--gecos "Memcached" \
</pre>
ProblemType: Bug
DistroRelease: Ubuntu 13.10
Package: memcached 1.4.14-0ubuntu4
ProcVersionSignature: Ubuntu 3.11.0-13.20-generic 3.11.6
Uname: Linux 3.11.0-13-generic x86_64
ApportVersion: 2.12.5-0ubuntu2.1
Architecture: amd64
Date: Tue Nov 26 14:08:48 2013
EcryptfsInUse: Yes
InstallationDate: Installed on 2013-10-08 (49 days ago)
InstallationMedia: Ubuntu 13.10 "Saucy Salamander" - Beta amd64 (20130925.1)
MarkForUpload: True
SourcePackage: memcached
UpgradeStatus: No upgrade log present (probably fresh install) |
memcached package creates /nonexistant which should not exist:
[dustin@lilthing ~]$ ls /
bin boot cdrom dev etc home initrd.img initrd.img.old lib lib64 lost+found media mnt opt proc root run sbin srv sys tmp usr var vmlinuz vmlinuz.old
[dustin@lilthing ~]$ sudo apt-get install memcached
Reading package lists... Done
Building dependency tree
Reading state information... Done
Suggested packages:
libcache-memcached-perl libmemcached
The following NEW packages will be installed:
memcached
0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 0 B/76.3 kB of archives.
After this operation, 228 kB of additional disk space will be used.
Selecting previously unselected package memcached.
(Reading database ... 243247 files and directories currently installed.)
Unpacking memcached (from .../memcached_1.4.14-0ubuntu4_amd64.deb) ...
Processing triggers for man-db ...
Processing triggers for ureadahead ...
Setting up memcached (1.4.14-0ubuntu4) ...
Starting memcached: memcached.
Processing triggers for ureadahead ...
[dustin@lilthing ~]$ ls /
bin boot cdrom dev etc home initrd.img initrd.img.old lib lib64 lost+found media mnt nonexistent opt proc root run sbin srv sys tmp usr var vmlinuz vmlinuz.old
ProblemType: Bug
DistroRelease: Ubuntu 13.10
Package: memcached 1.4.14-0ubuntu4
ProcVersionSignature: Ubuntu 3.11.0-13.20-generic 3.11.6
Uname: Linux 3.11.0-13-generic x86_64
ApportVersion: 2.12.5-0ubuntu2.1
Architecture: amd64
Date: Tue Nov 26 14:08:48 2013
EcryptfsInUse: Yes
InstallationDate: Installed on 2013-10-08 (49 days ago)
InstallationMedia: Ubuntu 13.10 "Saucy Salamander" - Beta amd64 (20130925.1)
MarkForUpload: True
SourcePackage: memcached
UpgradeStatus: No upgrade log present (probably fresh install) |
|
2013-11-27 00:18:07 |
Ubuntu Foundations Team Bug Bot |
tags |
amd64 apport-bug saucy |
amd64 apport-bug patch saucy |
|
2013-11-27 00:18:18 |
Ubuntu Foundations Team Bug Bot |
bug |
|
|
added subscriber Ubuntu Review Team |
2013-11-29 08:32:21 |
Yolanda Robla |
memcached (Ubuntu): status |
New |
Confirmed |
|
2013-11-29 08:32:24 |
Yolanda Robla |
memcached (Ubuntu): importance |
Undecided |
Medium |
|
2014-01-07 06:07:51 |
Dustin Lundquist |
tags |
amd64 apport-bug patch saucy |
amd64 apport-bug patch saucy trusty |
|
2014-01-07 06:08:17 |
Dustin Lundquist |
summary |
Memcached package creates /nonexistent/ |
Installing memcached package creates /nonexistent |
|
2014-01-13 21:58:20 |
Launchpad Janitor |
memcached (Ubuntu): status |
Confirmed |
Fix Released |
|
2014-01-13 21:58:20 |
Launchpad Janitor |
cve linked |
|
2011-4971 |
|
2014-01-13 21:58:20 |
Launchpad Janitor |
cve linked |
|
2013-0179 |
|
2014-01-13 21:58:20 |
Launchpad Janitor |
cve linked |
|
2013-7239 |
|