[Bug 377131] New: security-update of apache2 introduces new packages
https://bugzilla.novell.com/show_bug.cgi?id=377131 Summary: security-update of apache2 introduces new packages Product: openSUSE 10.3 Version: Final Platform: 32bit OS/Version: openSUSE 10.3 Status: NEW Severity: Normal Priority: P5 - None Component: Apache AssignedTo: bnc-team-apache@forge.provo.novell.com ReportedBy: kssingvo@novell.com QAContact: qa@suse.de Found By: Development Last night a security-update of apache2 got installed on my server. Running openSUSE-10.3, i586 there. The package "apache2-utils" requires suddenly "ed", which wasn't required on my server before, and therefore got additional installed. I looked through the "apache2-utils" and noticed that "/usr/sbin/sysconf_addword" is the only candidate who is using "ed". All other programs are using "perl". Can we please modify "/usr/sbin/sysconf_addword" to use "perl" instead? Thanks in advance. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=377131 User skh@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=377131#c1 Sonja Krause-Harder <skh@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |skh@novell.com AssignedTo|bnc-team-apache@forge.provo.novell.com |ro@novell.com Summary|security-update of apache2 introduces new |sysconf_addword requires ed |packages | --- Comment #1 from Sonja Krause-Harder <skh@novell.com> 2008-04-04 05:26:18 MST --- Yes, the additional requirement was the fix for bug #363611. sysconf_addword is actually in aaa_base now, so we should either add the Requires there too or modify the script as suggested. Rudi? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=377131 User kssingvo@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=377131#c2 Klaus Singvogel <kssingvo@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |kssingvo@novell.com --- Comment #2 from Klaus Singvogel <kssingvo@novell.com> 2008-04-04 05:29:37 MST --- http://www.computing.net/programming/wwwboard/forum/13458.html shows (later) a way to use Tie::File for reading files backwards. This might be a good reference to rewrite the relevant parts in perl. perl is required often by apache2-utils, so this wouldn't become an additional requirement. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=377131 User poeml@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=377131#c3 Peter Poeml <poeml@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |poeml@novell.com --- Comment #3 from Peter Poeml <poeml@novell.com> 2008-04-04 05:37:08 MST --- Yes, aaa_base would indeed need the ed requirement now. ed used to be in the base system I think, so that wasn't an issue in the past. I think sed would do the job (which is required by aaa_base anyway). The only requirement I had at the time (I think) is to modify only last occurrence of a variable in the file. But something like reversing the lines with 'tac', running a sed replacement on the first occurrence, and reversing back with 'tac' should probably do. Maybe sed can do it right away, I don't know. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=377131 User ro@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=377131#c4 Ruediger Oertel <ro@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO Info Provider| |poeml@novell.com --- Comment #4 from Ruediger Oertel <ro@novell.com> 2008-04-04 07:40:26 MST --- this would do most of it: tac $file \ | sed -e "0,/^\($var=\".*\)\(\".*\)/s//\1 $word_quoted\2/" \ | tac > $tmpfile && mv $tmpfile $file the only thing is: I need a tempfile for this. Any better ideas ? and then the s/=" /="/ is not yet done. What I completely fail to understand: why do you only want to modify the last occurrence of $VAR ? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=377131 User poeml@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=377131#c5 --- Comment #5 from Peter Poeml <poeml@novell.com> 2008-04-17 08:12:20 MST --- The simple reason is that I sometimes have several lines with a variable in a sysconfig files, which may sound stupid but usually is a result of heavy experimenting and testing, and keeping those lines available. Consider it a personal habit of mine, to not comment those extra lines but just leave them uncommented. That was the reason why I implemented it that way. Of course I'll be able to deal with it if the new sysconf_addword won't do it the same way. I'll look into it right now. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=377131 User poeml@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=377131#c6 --- Comment #6 from Peter Poeml <poeml@novell.com> 2008-04-17 09:30:56 MST --- Meanwhile a further reason occured to me why I used ed for some things: its capability for in-place changes. However, all sed packages that we have in SLES9 onwards should do that also. I am attaching a version of sysconf_addword which implements the same thing as before, just now with sed (which is always required by aaa_base). -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=377131 User poeml@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=377131#c7 --- Comment #7 from Peter Poeml <poeml@novell.com> 2008-04-17 09:31:59 MST --- Created an attachment (id=208683) --> (https://bugzilla.novell.com/attachment.cgi?id=208683) patch for aaa_base/usr/sbin/sysconf_addword -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=377131 User poeml@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=377131#c8 --- Comment #8 from Peter Poeml <poeml@novell.com> 2008-04-17 09:32:44 MST --- Created an attachment (id=208684) --> (https://bugzilla.novell.com/attachment.cgi?id=208684) the patched version of sysconf_addword -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=377131 User poeml@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=377131#c9 --- Comment #9 from Peter Poeml <poeml@novell.com> 2008-04-17 09:55:00 MST --- I will fold it into the buildservice apache2 package (it is required there anyway) to give it some more testing. The package will use aaa_base's version if present. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=377131 User poeml@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=377131#c10 Peter Poeml <poeml@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|poeml@novell.com | --- Comment #10 from Peter Poeml <poeml@novell.com> 2008-04-17 11:00:46 MST --- Rudi, I tested it, a2enmod/a2enflag work fine with it, and I think it is ready to be submitted into aaa_base. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=377131 User ro@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=377131#c11 Ruediger Oertel <ro@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED --- Comment #11 from Ruediger Oertel <ro@novell.com> 2008-06-02 10:08:15 MDT --- -> done in STABLE/aaa_base -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com