Package: roundcube Version: 0.1.1-8 Severity: normal File: /etc/cron.daily/roundcube-core Tags: patch
Hi cron job installed as /etc/cron.daily/roundcube-core silently removes file /var/lib/roundcube/temp/.htaccess, which is shipped with package. This make later fail integrity check using debsums and allows access to the files in cache. Attached patch fixes cron job to ignore .htaccess file. -- Michal Čihař | http://cihar.com | http://blog.cihar.com -- System Information: Debian Release: lenny/sid APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 2.6.26-1-vserver-amd64 (SMP w/1 CPU core) Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages roundcube-core depends on: ii dbconfig-common 1.8.40 common framework for packaging dat ii debconf [debconf-2.0] 1.5.23 Debian configuration management sy ii libmagic1 4.26-1 File type determination library us ii lighttpd [httpd] 1.4.19-4 A fast webserver with minimal memo ii php-auth 1.6.1-1 PHP PEAR modules for creating an a ii php-db 1.7.13-2 PHP PEAR Database Abstraction Laye ii php-mail-mime 1.5.2-0.1 PHP PEAR module for creating MIME ii php-net-smtp 1.3.1-1 PHP PEAR module implementing SMTP ii php-net-socket 1.0.9-1 PHP PEAR Network Socket Interface ii php5 5.2.6-3 server-side, HTML-embedded scripti ii php5-mcrypt 5.2.6-3 MCrypt module for php5 ii roundcube-mysql [roundcube-db 0.1.1-8 metapackage providing MySQL depend ii tinymce2 2.1.3-1 platform independent web based Jav ii ucf 3.0010 Update Configuration File: preserv roundcube-core recommends no packages. roundcube-core suggests no packages. Versions of packages roundcube depends on: ii roundcube-mysql [roundcube-db 0.1.1-8 metapackage providing MySQL depend -- debconf information excluded
--- /tmp/roundcube-core 2008-09-26 08:03:30.000000000 +0200 +++ /etc/cron.daily/roundcube-core 2008-09-26 08:04:00.000000000 +0200 @@ -6,4 +6,4 @@ . /etc/default/roundcube-core fi -find /var/lib/roundcube/temp -type f -mtime +$MAX_TMPFILE_LIFETIME -print0 | xargs -0 -r rm +find /var/lib/roundcube/temp -type f -not -name .htaccess -mtime +$MAX_TMPFILE_LIFETIME -print0 | xargs -0 -r rm