[Bug 1385050] Re: segfault and apparent memory corruption in tsrm_virtual_cwd.c

2014-10-24 Thread Jeff Waugh
I have a test system on which I can reproduce the issue and do additional investigation. Given the memory corruption, this may well be a security issue. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in Ubuntu.

[Bug 1385050] Re: segfault and apparent memory corruption in tsrm_virtual_cwd.c

2014-10-24 Thread Jeff Waugh
** Information type changed from Public to Public Security -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in Ubuntu. https://bugs.launchpad.net/bugs/1385050 Title: segfault and apparent memory corruption in tsrm_virtual_cwd.c

[Bug 1385050] Re: segfault and apparent memory corruption in tsrm_virtual_cwd.c

2014-10-24 Thread Jeff Waugh
Steps to reproduce would depend on a private (Drupal-based) codebase and database. I'll go upstream, and report back. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in Ubuntu. https://bugs.launchpad.net/bugs/1385050 Title:

[Bug 1385050] Re: segfault and apparent memory corruption in tsrm_virtual_cwd.c

2014-10-24 Thread Jeff Waugh
It's beginning to look like a stack overflow segfault caused by recursion or infinite loop. I'll turn off the security switch for now. ** Information type changed from Public Security to Public -- You received this bug notification because you are a member of Ubuntu Server Team, which is

[Bug 1385050] [NEW] segfault and apparent memory corruption in tsrm_virtual_cwd.c

2014-10-23 Thread Jeff Waugh
Public bug reported: I have an utterly reproducible segfault with php5-fpm 5.5.9+dfsg- 1ubuntu4.4. Here are the top 4 backtrace frames. It looks to these relatively naive eyes like there's memory corruption in cwd, resolved_path, trypath, and actual_path. This trace was generated with realpath

[Bug 1385050] Re: segfault and apparent memory corruption in tsrm_virtual_cwd.c

2014-10-23 Thread Jeff Waugh
This is the core dump. ** Attachment added: core-php5-fpm.16825.bz2 https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1385050/+attachment/4243073/+files/core-php5-fpm.16825.bz2 -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to

[Bug 1319595] Re: upstart script ignores some php-fpm.conf parameters, cannot be bypassed in preference of SystemV init script.

2014-08-09 Thread Jeff Waugh
The init script bails out if the system is using upstart, so anything that expects sysvinit compatibility won't work. # Don't run if we are running upstart if init_is_upstart; then exit 1 fi -- You received this bug notification because you are a member of Ubuntu Server Team, which is

[Bug 1319595] Re: upstart script ignores some php-fpm.conf parameters, cannot be bypassed in preference of SystemV init script.

2014-08-07 Thread Jeff Waugh
Looks like we've conflated two problems here -- ignoring options and the init script not working. Would it be inappropriate for me to rename this to focus on the init script issue? -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5

[Bug 1319595] Re: upstart script ignores some php-fpm.conf parameters, cannot be bypassed in preference of SystemV init script.

2014-08-04 Thread Jeff Waugh
This is quite a serious regression because it badly impacts integration with other systems that depend on sysvinit compatibility. My use case: AWS::CloudFormation::Init (cfn-init) understands sysvinit services, but not upstream services. On Trusty, I can't restart php5-fpm with the init script

[Bug 1319595] Re: upstart script ignores some php-fpm.conf parameters, cannot be bypassed in preference of SystemV init script.

2014-08-04 Thread Jeff Waugh
Bug is specific to php5-fpm. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in Ubuntu. https://bugs.launchpad.net/bugs/1319595 Title: upstart script ignores some php-fpm.conf parameters, cannot be bypassed in preference of

[Bug 1334337] Re: Regression: php5-fpm's socket should be accessible by www-data by default

2014-06-25 Thread Jeff Waugh
Thanks for picking this up! -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in Ubuntu. https://bugs.launchpad.net/bugs/1334337 Title: Regression: php5-fpm's socket should be accessible by www-data by default To manage

[Bug 1307027] Re: php5-fpm: Possible privilege escalation due to insecure default permissions of sockets

2014-06-24 Thread Jeff Waugh
I'm worried this fix might be broken: I upgraded php5-fpm on my 14.04 system, and the socket was changed to root:root rather than root:www- data, so nginx could no longer connect to it. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to

[Bug 1307027] Re: php5-fpm: Possible privilege escalation due to insecure default permissions of sockets

2014-06-24 Thread Jeff Waugh
Yep, reproduced it on another system. Temporary fix: sudo chown :www-data /var/run/php5-fpm.sock Configuration fix: Uncomment listen.group = www-data in /etc/php5/fpm/pool.d/www.conf -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to

[Bug 831886] Re: Dovecot regression: Evolution quick sync (QRESYNC) not working anymore

2011-10-11 Thread Jeff Waugh
It is a bug in both dovecot and Evolution. Remember, dovecot shouldn't fail even if the client does something silly. This patch should totally go in updates for Ubuntu 10.04 LTS and supported releases beyond. The fix was shipped in Fedora 12 and 13.

[Bug 671065] Re: deliver broken because dovecot.conf uses !include_try

2011-10-10 Thread Jeff Waugh
This bug has been described well, and I have confirmed it on lucid. It's a serious bug for anyone intending to use the dovecot local delivery agent (which is very useful in virtual mail configurations, and provides an easy way to use sieve filtering). ** Changed in: dovecot (Ubuntu)

[Bug 279980] Re: php5 using bundled tzdata in hardy?

2008-11-21 Thread Jeff Waugh
Nailed it! :-) [EMAIL PROTECTED]:~$ php5 --version PHP 5.2.4-2ubuntu5.4 with Suhosin-Patch 0.9.6.2 (cli) (built: Nov 22 2008 15:51:10) [EMAIL PROTECTED]:~$ php5 php5-timezone.php time(): 1210669875 change: 1223136000 October 5, 2008 @ 3:00 am EST Thanks heaps, Chuck! -- php5 using bundled

[Bug 279980] Re: php5 using bundled tzdata in hardy?

2008-11-02 Thread Jeff Waugh
Hi Chuck, Just tried with php5-cli from your PPA, and it doesn't seem to work: [EMAIL PROTECTED]:~$ php5 php5-timezone.php time(): 1210669875 change: 1224950400 October 26, 2008 @ 3:00 am EST (Should say October 5.) Thanks! -- php5 using bundled tzdata in hardy?

[Bug 279980] Re: php5 using bundled tzdata in hardy?

2008-11-02 Thread Jeff Waugh
Looks like you added the patch, but didn't add --with-system-tzdata to rules. :-) -- php5 using bundled tzdata in hardy? https://bugs.launchpad.net/bugs/279980 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in ubuntu. --

[Bug 279980] Re: php5 using bundled tzdata in hardy?

2008-10-08 Thread Jeff Waugh
I blogged a quick workaround for people suffering this bug: http://bethesignal.org/blog/2008/10/08/php5-daylight-saving-dst- timezone-tzdata-ubuntu-hardy-lts/ (php5-timezonedb was synced and then removed from intrepid, largely because it seems that intrepid's php5 includes a patch to support

[Bug 279980] [NEW] php5 using bundled tzdata in hardy?

2008-10-07 Thread Jeff Waugh
Public bug reported: Binary package hint: php5 Seems like php5 in hardy has bundled, and now out-of-date, tzdata. Sydney just hit DST this weekend (October 5), but php5 seems to think it will happen on the old date of October 26. I have attached a script that provides this output. ** Affects:

[Bug 279980] Re: php5 using bundled tzdata in hardy?

2008-10-07 Thread Jeff Waugh
** Attachment added: script that demonstrates incorrect timezone data http://launchpadlibrarian.net/18310408/php5-timezone.php -- php5 using bundled tzdata in hardy? https://bugs.launchpad.net/bugs/279980 You received this bug notification because you are a member of Ubuntu Server Team,