[pkg-firebird-general] Bug#754888: firebird2.5-server-common: firebird2.5 installation fails if current directory is in PATH

Graham Cobb g+debian at cobb.uk.net
Tue Jul 15 16:09:53 UTC 2014


Package: firebird2.5-server-common
Version: 2.5.2.26540.ds4-15
Severity: important

I have just been upgrading an earlier Jessie system to the current version and 
get the following error messages during the upgrade:

Setting up firebird2.5-server-common (2.5.2.26540.ds4-15) ...
find: The current directory is included in the PATH environment variable, which is insecure in combination with the -execdir action of find.  Please remove the current directory from your $PATH (that is, remove "." or leading or trailing colons)
dpkg: error processing package firebird2.5-server-common (--configure):
 subprocess installed post-installation script returned error exit status 1

(further errors relate to dependencies)

I do indeed have "." in my PATH (note that the manpage for find lists other 
entries which should not appear in PATH as well as .).  
That may be insecure, but it should not prevent installations. In fact, if the 
installation uses -execdir, it should be defining a specific PATH it wants to 
use.

Redefining PATH as "/sbin:/bin:/usr/sbin:/usr/bin" allows the installation to 
complete.

-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (990, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.9-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_IE at euro, LC_CTYPE=en_IE at euro (charmap=ISO-8859-15) (ignored: LC_ALL set to en_IE at euro)
Shell: /bin/sh linked to /bin/bash

Versions of packages firebird2.5-server-common depends on:
ii  firebird2.5-common-doc  2.5.2.26540.ds4-15
ii  libc6                   2.19-7
ii  libfbclient2            2.5.2.26540.ds4-15
ii  libgcc1                 1:4.9.0-7
ii  libicu52                52.1-4
ii  libstdc++6              4.9.0-7

firebird2.5-server-common recommends no packages.

firebird2.5-server-common suggests no packages.

-- no debconf information



More information about the pkg-firebird-general mailing list