SRU: Fatal error: Uncaught Error: Class "MicroTimer" not found in /usr/share/phpliteadmin/phpliteadmin.php:475

[Nicholas Guriev]

[Impact]
phpLiteAdmin does not function in Ubuntu 21.10 (Impish Indri).

[Test Plan]
Prerequisites:

1. Have the package installed along with php-cli.
   $ sudo apt-get install php-cli phpliteadmin

Steps to reproduce:

1. Cd to the package directory and run PHP server as www-data user.
   $ cd /usr/share/phpliteadmin
   $ sudo -u www-data php -S localhost:8080
2. Open http://localhost:8080/phpliteadmin.php in browser.

Actual behavior:

1. No output into browser.
2. Fatal errors in terminal.

[Sun Mar 13 12:49:08 2022] 127.0.0.1:55128 Accepted
[Sun Mar 13 12:49:08 2022] PHP Fatal error: Uncaught Error: Class "MicroTimer" not found in /usr/share/phpliteadmin/phpliteadmin.php:475
Stack trace:
#0 {main}
  thrown in /usr/share/phpliteadmin/phpliteadmin.php on line 475
[Sun Mar 13 12:49:08 2022] 127.0.0.1:55128 [500]: GET /phpliteadmin.php - Uncaught Error: Class "MicroTimer" not found in /usr/share/phpliteadmin/phpliteadmin.php:475
Stack trace:
#0 {main}
  thrown in /usr/share/phpliteadmin/phpliteadmin.php on line 475
[Sun Mar 13 12:49:08 2022] 127.0.0.1:55128 Closing

Expected behavior:

1. phpLiteAdmin would work under PHP 8.0.8 which is default in Ubuntu 21.10.

[Where problems could occur]
Leaf package. Only minimal patch set applied from development branch.

[Marc Deslauriers (mdeslaur)]

ACK on the debdiff in comments #1. I did add the CVE number to the changelog though, to make it easier to track.

Since this package is completely broken currently in Impish, I think releasing the php fixes as part of the security update is acceptable.

I've uploaded the package to the security team PPA here:
https://launchpad.net/~ubuntu-security-proposed/+archive/ubuntu/ppa/+packages

Could you please give it a try and once it has been tested, we will publish it.

Thanks!

[Julian Andres Klode (juliank)]

As far as I can tell this is actually fixed in phpliteadmin (1.9.8.2-2) unstable; urgency=medium which is available in jammy and newer, so marking as fix released and unsubscribing sponsors.