Package: wordpress Version: 2.5.1-11+lenny3 Severity: important Tags: patch
The wordpress setup-mysql script runs "chown -R /srv/www". Since one might reasonably well have tons of stuff under /srv/www, this is horribly bad. Perhaps the intention was to chown some part of the wordpress install. If so, it should specify the directory exactly and now wholesale chown all of my DocumentRoots. This patch fixes the problem: --- setup-mysql 2010-10-02 15:02:36.000000000 -0400 +++ /usr/share/doc/wordpress/examples/setup-mysql 2010-02-07 12:44:10.000000000 -0500 @@ -80,7 +80,7 @@ FLUSH PRIVILEGES; EOF [ -d /srv/www ] || mkdir -p /srv/www -# chown -R www-data:www-data /srv/www +chown -R www-data:www-data /srv/www ln -s /usr/share/wordpress /srv/www/$DOMAIN echo Trying to create upload directory: $UPLOAD -- System Information: Debian Release: 5.0.5 APT prefers stable APT policy: (500, 'stable') Architecture: i386 (x86_64) Kernel: Linux 2.6.26-2-xen-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1) Shell: /bin/sh linked to /bin/bash Versions of packages wordpress depends on: ii apache2 2.2.9-10+lenny8 Apache HTTP Server metapackage ii apache2-mpm-prefor 2.2.9-10+lenny8 Apache HTTP Server - traditional n ii libapache2-mod-php 5.2.6.dfsg.1-1+lenny9 server-side, HTML-embedded scripti ii libjs-prototype 1.6.0.2-4 JavaScript Framework for dynamic w ii libjs-scriptaculou 1.8.1-5 JavaScript library for dynamic web ii libphp-phpmailer 1.73-6 full featured email transfer class ii libphp-snoopy 1.2.4-1 Snoopy is a PHP class that simulat ii mysql-client-5.0 [ 5.0.51a-24+lenny4 MySQL database client binaries ii php5 5.2.6.dfsg.1-1+lenny9 server-side, HTML-embedded scripti ii php5-gd 5.2.6.dfsg.1-1+lenny9 GD module for php5 ii php5-mysql 5.2.6.dfsg.1-1+lenny9 MySQL module for php5 ii tinymce 3.0.8-1 platform independent web based Jav wordpress recommends no packages. Versions of packages wordpress suggests: pn virtual-mysql-server <none> (no description available) -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org