[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [SECURITY] [DLA 91-1] tomcat6 security update



Hi,

full context for the benefit of the Debian Java maintainers and team 
security...

On Montag, 24. November 2014, H B wrote:
> thx to Tony for the huge effort!
> 
> I installed the update on 2 machines this morning, and i received an error
> message:
> 
> Setting up tomcat6 (6.0.41-2+squeeze5) ...
> sed: -e expression #1, char 396: unknown option to `s'
> dpkg: error processing tomcat6 (--configure):
>  subprocess installed post-installation script returned error exit status 1
> configured to not write apport reports
>                                       Errors were encountered while
> processing:
>  tomcat6
> E: Sub-process /usr/bin/dpkg returned an error code (1)
> A package failed to install.  Trying to recover:
> Setting up tomcat6 (6.0.41-2+squeeze5) ...
> sed: -e expression #1, char 396: unknown option to `s'
> dpkg: error processing tomcat6 (--configure):
>  subprocess installed post-installation script returned error exit status 1
> Errors were encountered while processing:
>  tomcat6
> 
> Does anyone have the same problem?

together with Hubert we tracked this down to (most likely) him having 
JAVA_OPTS include "ErrorFile=/var/lib/tomcat6/hs_err_pid%p.log" and the % sign 
is causing this error as tomcat6.postinst has this:

        cat $TEMPLATE \
                | sed "s%^TOMCAT6_USER=.*$%TOMCAT6_USER=$TOMCAT6_USER%" \
                | sed "s%^TOMCAT6_GROUP=.*$%TOMCAT6_GROUP=$TOMCAT6_GROUP%" \
                | sed "s%^JAVA_OPTS=.*$%JAVA_OPTS=\"$JAVA_OPTS\"%" \
                >> $tmpfile

IOW, it's using % as seperator.

I believe this is a rather rare case, else postinst wouldn't look like it 
looks like (and rather use § or # as seperator) and there is nothing I/we 
should do for this DLA - and the upcoming DSA. 

(I didn't hit this bug in my testing...)

Do you agree?


cheers,
	Holger

Attachment: signature.asc
Description: This is a digitally signed message part.


Reply to: