Bug #8449 “php4-cgi: No working #! able php binary to go under m...” : Bugs : php4 package : Ubuntu

Revision history for this message

Debian Bug Importer (debzilla) wrote on 2004-09-24:

#1

Automatically imported from Debian bug report #273143 http://bugs.debian.org/273143

Revision history for this message

Debian Bug Importer (debzilla) wrote on 2004-09-24:

#2

Message-Id: <email address hidden>
Date: Thu, 23 Sep 2004 16:10:10 +1000
From: Jarne Cook <email address hidden>
To: Debian Bug Tracking System <email address hidden>
Subject: php4-cgi: No working #! able php binary to go under mass vhosting /cgi-bin

Package: php4-cgi
Version: 4:4.3.8-12
Severity: critical
Justification: breaks unrelated software

What a nasty night I have had. I have figured out that php4-cgi is not
what it appears.

Essentially, neither php4-cli or php4-cgi now provide a
#!/usr/bin/php<something> that can be executed by an executalble script
living in /cgi-bin.

This is because the cgi version (/usr/lib/cgi-bin/php4) has been
compiles with --enable-force-cgi-redirect which means apache has to be
(apprently) setup with
--
Action php-script /cgi-bin/php
AddHandler php-script .php
--

Unfortunately, that isn't going to work when doing complicated vhosts/mod_rewrite
setups.

php/cli on the other hand also can not help as it does not provide GPC
varaibles in a pre-processed way (you would have to manually parse
$_SERVER["QUERY_STRING"]).

So essentially for systems that cant use script alias in their vhost
config and want to use php/cgi in the conventional hash bang method
(aka. the 4th cgi method http://www.php.net/manual/en/security.cgi-bin.shell.php )
will have to have the php package recompiled, as one is not provided.

I see three options from here:
1) contuine to not provide a proper php/cgi binary
2) provide an extra binary in this package (eg /usr/bin/php-cgi)
3) create a new package again with the extra binary.

-- System Information:
Debian Release: 3.1
APT prefers testing
APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.6-1-386
Locale: LANG=C, LC_CTYPE=C

Versions of packages php4-cgi depends on:
ii debconf [debconf-2.0] 1.4.30.5 Debian configuration management sy
ii libbz2-1.0 1.0.2-1 A high-quality block-sorting file
ii libc6 2.3.2.ds1-16 GNU C Library: Shared libraries an
ii libdb4.2 4.2.52-17 Berkeley v4.2 Database Libraries [
ii libexpat1 1.95.6-8 XML parsing C library - runtime li
ii libmagic1 4.09-1 File type determination library us
ii libpcre3 4.5-1.1 Perl 5 Compatible Regular Expressi
ii libssl0.9.7 0.9.7d-4 SSL shared libraries
ii mime-support 3.28-1 MIME files 'mime.types' & 'mailcap
ii php4-cli 4:4.3.8-12 command-line interpreter for the p
ii php4-common 4:4.3.8-12 Common files for packages built fr
ii zlib1g 1:1.2.1.1-7 compression library - runtime

-- debconf information:
php4/update_cgi_php_ini: true

Message-Id: <20040923061010.ED8ADF8224@corp1.siliconriver.com.au>
Date: Thu, 23 Sep 2004 16:10:10 +1000
From: Jarne Cook <jcook@siliconriver.com.au>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: php4-cgi: No working #! able php binary to go under mass vhosting /cgi-bin

Package: php4-cgi
Version: 4:4.3.8-12
Severity: critical
Justification: breaks unrelated software

What a nasty night I have had.  I have figured out that php4-cgi is not
what it appears.

Essentially, neither php4-cli or php4-cgi now provide a
#!/usr/bin/php<something> that can be executed by an executalble script
living in /cgi-bin.

This is because the cgi version (/usr/lib/cgi-bin/php4) has been
compiles with --enable-force-cgi-redirect which means apache has to be
(apprently) setup with 
--
Action php-script /cgi-bin/php
AddHandler php-script .php
--

Unfortunately, that isn't going to work when doing complicated vhosts/mod_rewrite
setups.

php/cli on the other hand also can not help as it does not provide GPC
varaibles in a pre-processed way (you would have to manually parse
$_SERVER["QUERY_STRING"]).

So essentially for systems that cant use script alias in their vhost
config and want to use php/cgi in the conventional hash bang method
(aka. the 4th cgi method http://www.php.net/manual/en/security.cgi-bin.shell.php )
will have to have the php package recompiled, as one is not provided.

I see three options from here:
1) contuine to not provide a proper php/cgi binary 
2) provide an extra binary in this package (eg /usr/bin/php-cgi)
3) create a new package again with the extra binary.

-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.6-1-386
Locale: LANG=C, LC_CTYPE=C

Versions of packages php4-cgi depends on:
ii  debconf [debconf-2.0]       1.4.30.5     Debian configuration management sy
ii  libbz2-1.0                  1.0.2-1      A high-quality block-sorting file 
ii  libc6                       2.3.2.ds1-16 GNU C Library: Shared libraries an
ii  libdb4.2                    4.2.52-17    Berkeley v4.2 Database Libraries [
ii  libexpat1                   1.95.6-8     XML parsing C library - runtime li
ii  libmagic1                   4.09-1       File type determination library us
ii  libpcre3                    4.5-1.1      Perl 5 Compatible Regular Expressi
ii  libssl0.9.7                 0.9.7d-4     SSL shared libraries
ii  mime-support                3.28-1       MIME files 'mime.types' & 'mailcap
ii  php4-cli                    4:4.3.8-12   command-line interpreter for the p
ii  php4-common                 4:4.3.8-12   Common files for packages built fr
ii  zlib1g                      1:1.2.1.1-7  compression library - runtime

-- debconf information:
  php4/update_cgi_php_ini: true

Revision history for this message

In Debian Bug tracker #273143, Steve Langasek (vorlon) wrote on 2004-09-26: Another moron who doesn't know what 'unrelated' means

#3

severity 273143 important
thanks

Revision history for this message

Debian Bug Importer (debzilla) wrote on 2004-09-26:

#4

Message-ID: <email address hidden>
Date: Sun, 26 Sep 2004 00:59:17 -0700
From: Steve Langasek <email address hidden>
To: <email address hidden>
Subject: Another moron who doesn't know what 'unrelated' means

severity 273143 important
thanks

Revision history for this message

In Debian Bug tracker #273143, MJ Ray (mjr-dsl) wrote on 2004-10-04: php4-cgi: this does look release critical

#5

I suggest: severity 273143 grave

The reporter selected the wrong severity, but this does look like an
RC bug, unfortunately. I have just been asked to fix a system which
upgraded from stable and had many of their virtual-hosted scripts
break. It uses a #!-style of running CGI scripts. It is documented in
the PHP manual and seems a common situation for selecting php4-cgi
over the other flavours, so I think this makes the package unusable or
mostly so.

Because 4.1.2's config also included enable-force-cgi-redirect, I'm
not sure whether the reporter's diagnosis was correct. I have asked
them and I'm waiting for more information.

I have my afflicted system running through a wrapper as a workaround.
Please cc me on replies.

--
MJR/slef My Opinion Only and not of any group I know
Creative copyleft computing - http://www.ttllp.co.uk/
LinuxExpo.org.uk village 6+7 Oct http://www.affs.org.uk

Revision history for this message

Debian Bug Importer (debzilla) wrote on 2004-10-04:

#6

Message-ID: <email address hidden>
Date: Mon, 04 Oct 2004 09:49:49 +0100
From: MJ Ray <email address hidden>
To: <email address hidden>
Subject: php4-cgi: this does look release critical

I suggest: severity 273143 grave

The reporter selected the wrong severity, but this does look like an
RC bug, unfortunately. I have just been asked to fix a system which
upgraded from stable and had many of their virtual-hosted scripts
break. It uses a #!-style of running CGI scripts. It is documented in
the PHP manual and seems a common situation for selecting php4-cgi
over the other flavours, so I think this makes the package unusable or
mostly so.

Because 4.1.2's config also included enable-force-cgi-redirect, I'm
not sure whether the reporter's diagnosis was correct. I have asked
them and I'm waiting for more information.

I have my afflicted system running through a wrapper as a workaround.
Please cc me on replies.

--
MJR/slef My Opinion Only and not of any group I know
Creative copyleft computing - http://www.ttllp.co.uk/
LinuxExpo.org.uk village 6+7 Oct http://www.affs.org.uk

Revision history for this message

In Debian Bug tracker #273143, Adam Conrad (adconrad) wrote on 2004-10-05: Bug#273143: fixed in php4 4:4.3.9-1

#7

Download full text (9.3 KiB)

Source: php4
Source-Version: 4:4.3.9-1

We believe that the bug you reported is fixed in the latest version of
php4, which is due to be installed in the Debian FTP archive:

caudium-php4_4.3.9-1_powerpc.deb
  to pool/main/p/php4/caudium-php4_4.3.9-1_powerpc.deb
libapache-mod-php4_4.3.9-1_powerpc.deb
  to pool/main/p/php4/libapache-mod-php4_4.3.9-1_powerpc.deb
libapache2-mod-php4_4.3.9-1_powerpc.deb
  to pool/main/p/php4/libapache2-mod-php4_4.3.9-1_powerpc.deb
php4-cgi_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-cgi_4.3.9-1_powerpc.deb
php4-cli_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-cli_4.3.9-1_powerpc.deb
php4-common_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-common_4.3.9-1_powerpc.deb
php4-curl_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-curl_4.3.9-1_powerpc.deb
php4-dev_4.3.9-1_all.deb
  to pool/main/p/php4/php4-dev_4.3.9-1_all.deb
php4-domxml_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-domxml_4.3.9-1_powerpc.deb
php4-gd_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-gd_4.3.9-1_powerpc.deb
php4-imap_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-imap_4.3.9-1_powerpc.deb
php4-ldap_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-ldap_4.3.9-1_powerpc.deb
php4-mcal_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-mcal_4.3.9-1_powerpc.deb
php4-mhash_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-mhash_4.3.9-1_powerpc.deb
php4-mysql_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-mysql_4.3.9-1_powerpc.deb
php4-odbc_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-odbc_4.3.9-1_powerpc.deb
php4-pear_4.3.9-1_all.deb
  to pool/main/p/php4/php4-pear_4.3.9-1_all.deb
php4-recode_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-recode_4.3.9-1_powerpc.deb
php4-snmp_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-snmp_4.3.9-1_powerpc.deb
php4-sybase_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-sybase_4.3.9-1_powerpc.deb
php4-xslt_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-xslt_4.3.9-1_powerpc.deb
php4_4.3.9-1.diff.gz
  to pool/main/p/php4/php4_4.3.9-1.diff.gz
php4_4.3.9-1.dsc
  to pool/main/p/php4/php4_4.3.9-1.dsc
php4_4.3.9-1_all.deb
  to pool/main/p/php4/php4_4.3.9-1_all.deb
php4_4.3.9.orig.tar.gz
  to pool/main/p/php4/php4_4.3.9.orig.tar.gz

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to <email address hidden>,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Adam Conrad <adconrad@0c3.net> (supplier of updated php4 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing <email address hidden>)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Mon, 4 Oct 2004 22:57:37 -0600
Source: php4
Binary: php4-cgi php4-sybase php4-recode libapache-mod-php4 php4-cli php4-dev libapache2-mod-php4 php4-snmp php4-odbc php4-xslt php4-mysql php4-domxml php4-gd php4-ldap php4-imap php4-common php4-curl php4 php4-pear php4-mcal caudium-php4 php4-mhash
Architecture: source powerpc all
Version: 4:4.3.9-1
Distribution: unstable
...

Source: php4
Source-Version: 4:4.3.9-1

We believe that the bug you reported is fixed in the latest version of
php4, which is due to be installed in the Debian FTP archive:

caudium-php4_4.3.9-1_powerpc.deb
  to pool/main/p/php4/caudium-php4_4.3.9-1_powerpc.deb
libapache-mod-php4_4.3.9-1_powerpc.deb
  to pool/main/p/php4/libapache-mod-php4_4.3.9-1_powerpc.deb
libapache2-mod-php4_4.3.9-1_powerpc.deb
  to pool/main/p/php4/libapache2-mod-php4_4.3.9-1_powerpc.deb
php4-cgi_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-cgi_4.3.9-1_powerpc.deb
php4-cli_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-cli_4.3.9-1_powerpc.deb
php4-common_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-common_4.3.9-1_powerpc.deb
php4-curl_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-curl_4.3.9-1_powerpc.deb
php4-dev_4.3.9-1_all.deb
  to pool/main/p/php4/php4-dev_4.3.9-1_all.deb
php4-domxml_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-domxml_4.3.9-1_powerpc.deb
php4-gd_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-gd_4.3.9-1_powerpc.deb
php4-imap_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-imap_4.3.9-1_powerpc.deb
php4-ldap_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-ldap_4.3.9-1_powerpc.deb
php4-mcal_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-mcal_4.3.9-1_powerpc.deb
php4-mhash_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-mhash_4.3.9-1_powerpc.deb
php4-mysql_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-mysql_4.3.9-1_powerpc.deb
php4-odbc_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-odbc_4.3.9-1_powerpc.deb
php4-pear_4.3.9-1_all.deb
  to pool/main/p/php4/php4-pear_4.3.9-1_all.deb
php4-recode_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-recode_4.3.9-1_powerpc.deb
php4-snmp_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-snmp_4.3.9-1_powerpc.deb
php4-sybase_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-sybase_4.3.9-1_powerpc.deb
php4-xslt_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-xslt_4.3.9-1_powerpc.deb
php4_4.3.9-1.diff.gz
  to pool/main/p/php4/php4_4.3.9-1.diff.gz
php4_4.3.9-1.dsc
  to pool/main/p/php4/php4_4.3.9-1.dsc
php4_4.3.9-1_all.deb
  to pool/main/p/php4/php4_4.3.9-1_all.deb
php4_4.3.9.orig.tar.gz
  to pool/main/p/php4/php4_4.3.9.orig.tar.gz

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 273143@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Adam Conrad <adconrad@0c3.net> (supplier of updated php4 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Mon,  4 Oct 2004 22:57:37 -0600
Source: php4
Binary: php4-cgi php4-sybase php4-recode libapache-mod-php4 php4-cli php4-dev libapache2-mod-php4 php4-snmp php4-odbc php4-xslt php4-mysql php4-domxml php4-gd php4-ldap php4-imap php4-common php4-curl php4 php4-pear php4-mcal caudium-php4 php4-mhash
Architecture: source powerpc all
Version: 4:4.3.9-1
Distribution: unstable
Urgency: high
Maintainer: Adam Conrad <adconrad@0c3.net>
Changed-By: Adam Conrad <adconrad@0c3.net>
Description: 
 caudium-php4 - server-side, HTML-embedded scripting language (caudium module)
 libapache-mod-php4 - server-side, HTML-embedded scripting language (apache 1.3 module)
 libapache2-mod-php4 - server-side, HTML-embedded scripting language (apache 2.0 module)
 php4       - server-side, HTML-embedded scripting language (meta-package)
 php4-cgi   - server-side, HTML-embedded scripting language (CGI binary)
 php4-cli   - command-line interpreter for the php4 scripting language
 php4-common - Common files for packages built from the php4 source
 php4-curl  - CURL module for php4
 php4-dev   - Files for PHP4 module development
 php4-domxml - XMLv2 module for php4
 php4-gd    - GD module for php4
 php4-imap  - IMAP module for php4
 php4-ldap  - LDAP module for php4
 php4-mcal  - MCAL calendar module for php4
 php4-mhash - MHASH module for php4
 php4-mysql - MySQL module for php4
 php4-odbc  - ODBC module for php4
 php4-pear  - PEAR - PHP Extension and Application Repository
 php4-recode - Character recoding module for php4
 php4-snmp  - SNMP module for php4
 php4-sybase - Sybase / MS SQL Server module for php4
 php4-xslt  - XSLT module for php4
Closes: 119902 149430 166811 195929 205553 230956 232840 233849 260389 270435 271000 271171 272463 273143 274031 274038 274206
Changes: 
 php4 (4:4.3.9-1) unstable; urgency=high
 .
   * New upstream release, removed the following patches fixed upstream:
     014-apache2handler_CVS_fixes.patch, 015-gdNewDynamicCtx_Add_Ex.patch,
     018-unix_socket_fd_leak.patch, 020-4.3.9_overflow_fixes.patch,
     021-4.3.9_sybase_ct_fixes.patch, 022-4.3.9_sprintf_fixes.patch,
     023-4.3.9_array_fixes.patch, 024-4.3.9_glob_fix.patch,
     and 025-4.3.9_domxml_segfaults.patch
   * Resolves undiscolsed vulnerabilities in GPC processing and rfc1867
     handling of file uploads via the $_FILES array (closes: #274206)
   * After some fairly heavy testing from several users and developers,
     finally update php4-snmp to use libsnmp5 (closes: #195929)
   * Add 026-4.3.10_session_fixes.patch from CVS, which prevents PHP
     from segfaulting when a nonexistant or unsupported save_handler or
     serialize_handler is specified in php.ini.
   * Add /etc/apache/conf.d/php4.conf, setting up our mime-types, on the
     off chance that the user's /etc/mime.types is broken (closes: #271171)
   * Reintroduce a CGI binary at /usr/bin/php4-cgi, so people who can't
     make use of the --force-cgi-redirect CGI binary in /usr/lib/cgi-bin
     can instead use #!/usr/bin/php4-cgi scripts (closes: #273143)
   * Enable FastCGI for both CGI binaries, now that it no longer conflicts
     with, but rather complements, the CGI SAPI (closes: #233849)
   * Bump libgd2 build-dep a notch to make sure we build against a version
     that actually has XPM support built in (closes: #270435)
   * Finally drop the bogus libapache-mod-ssl dependency from the apache1.3
     php4 module, as glibc (>= 2.3.2.ds1-17) has fixed the dlopen refcount
     bug that we were hacking around (closes: #205553, #230956, #271000)
   * Remove the mm session handler from the apache1.3 build.  Since the
     files handler now works on all arches, and is configured to be secure
     by default, mm seems to have outlived its usefulness.
     (closes: #119902, #149430, #166811, #272463, #232840)
   * Rename sapi/apache2handler/sapi_apache2.c to mod_php4.c so that
     <IfModule> directives aren't ambiguous between php4 and php5.
   * Add Czech translation, thanks to Miroslav Kure (closes: #274038)
   * Configure CLI with --with-libedit for readline support, and add
     027-readline_is_editline.patch, since Debian's libedit headers are
     not installed in /usr/include/readline (closes: #274031)
   * libcurl grew a new SONAME somewhere along the way, and upgrading
     doesn't seem to cause regressions in php4-curl, so upgrade we shall,
     changing build-deps accordingly (closes: #260389)
Files: 
 d5878fe4e3e10818dab5f79d432fcae1 1794 web optional php4_4.3.9-1.dsc
 c685cb76bff996a4dff87097c43e6987 4869710 web optional php4_4.3.9.orig.tar.gz
 dc63afa6b9525c40611a39623d89b46d 588663 web optional php4_4.3.9-1.diff.gz
 7cf04f3e857c97c427b567a82aac9c2c 144122 web optional php4-common_4.3.9-1_powerpc.deb
 552e09412dbbf74880d7eea637298e45 1645462 web optional libapache-mod-php4_4.3.9-1_powerpc.deb
 1dba80a26b098e8e9e9eb9c946f0a951 19300 web optional php4-curl_4.3.9-1_powerpc.deb
 feefc330a23bb3bf5916e8a9ca55144c 38516 web optional php4-domxml_4.3.9-1_powerpc.deb
 937d4642b60888a7f2e22f8f8468d9c6 34300 web optional php4-gd_4.3.9-1_powerpc.deb
 40b08bdfba3e1b56f0dd56c455a29387 37024 web optional php4-imap_4.3.9-1_powerpc.deb
 7aa7f8df81976ec02907330808b7ec4d 21638 web optional php4-ldap_4.3.9-1_powerpc.deb
 923baf9dffd65511236c4b2f9de2036b 19490 web optional php4-mcal_4.3.9-1_powerpc.deb
 90c3466c0e05f6ec08ab5f269e066bef 9504 web optional php4-mhash_4.3.9-1_powerpc.deb
 1ed377ea30d77f51fc7fe6dcef3bef1b 22866 web optional php4-mysql_4.3.9-1_powerpc.deb
 d1131fe9713b1febf3057d2c97a2903a 28572 web optional php4-odbc_4.3.9-1_powerpc.deb
 016b8834aef63ec01ddcb6c8ed53c8bd 9182 web optional php4-recode_4.3.9-1_powerpc.deb
 ed65728865d0f5c21f414d1efcddc539 18234 web optional php4-xslt_4.3.9-1_powerpc.deb
 0edafd33f175c3993cda96f3c4c1630d 14742 web optional php4-snmp_4.3.9-1_powerpc.deb
 72c1d7226d0f9a509422fc32aa548806 22834 web optional php4-sybase_4.3.9-1_powerpc.deb
 5ffb62eabe18b8c5fa91e77d5077667d 3224318 web optional php4-cgi_4.3.9-1_powerpc.deb
 f152d0e4199de9fcbcde04c0d3bbffd7 1620648 web optional php4-cli_4.3.9-1_powerpc.deb
 22b652d62f85fe92d254371e41329c4b 1721138 web optional caudium-php4_4.3.9-1_powerpc.deb
 a4d3920aa0741380f99c3670296c57cf 1643548 web optional libapache2-mod-php4_4.3.9-1_powerpc.deb
 96a00daab60964203532359447263582 1322 web optional php4_4.3.9-1_all.deb
 d0e82c62a215621b1b1e15e17b9162a1 232154 devel optional php4-dev_4.3.9-1_all.deb
 3d04121727ad6e4440d5403c8c597ffa 246342 web optional php4-pear_4.3.9-1_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD4DBQFBYkt5vjztR8bOoMkRAnQWAKDdC5nj7IN8bIrNmL9gRWqtNd5ANgCVEd/p
ElGkhVFUXbDCB3R5zSVGaw==
=l1rP
-----END PGP SIGNATURE-----

Revision history for this message

Debian Bug Importer (debzilla) wrote on 2004-10-05:

#8

Download full text (9.5 KiB)

Message-Id: <email address hidden>
Date: Tue, 05 Oct 2004 03:47:13 -0400
From: Adam Conrad <adconrad@0c3.net>
To: <email address hidden>
Subject: Bug#273143: fixed in php4 4:4.3.9-1

Source: php4
Source-Version: 4:4.3.9-1

We believe that the bug you reported is fixed in the latest version of
php4, which is due to be installed in the Debian FTP archive:

caudium-php4_4.3.9-1_powerpc.deb
  to pool/main/p/php4/caudium-php4_4.3.9-1_powerpc.deb
libapache-mod-php4_4.3.9-1_powerpc.deb
  to pool/main/p/php4/libapache-mod-php4_4.3.9-1_powerpc.deb
libapache2-mod-php4_4.3.9-1_powerpc.deb
  to pool/main/p/php4/libapache2-mod-php4_4.3.9-1_powerpc.deb
php4-cgi_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-cgi_4.3.9-1_powerpc.deb
php4-cli_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-cli_4.3.9-1_powerpc.deb
php4-common_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-common_4.3.9-1_powerpc.deb
php4-curl_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-curl_4.3.9-1_powerpc.deb
php4-dev_4.3.9-1_all.deb
  to pool/main/p/php4/php4-dev_4.3.9-1_all.deb
php4-domxml_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-domxml_4.3.9-1_powerpc.deb
php4-gd_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-gd_4.3.9-1_powerpc.deb
php4-imap_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-imap_4.3.9-1_powerpc.deb
php4-ldap_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-ldap_4.3.9-1_powerpc.deb
php4-mcal_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-mcal_4.3.9-1_powerpc.deb
php4-mhash_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-mhash_4.3.9-1_powerpc.deb
php4-mysql_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-mysql_4.3.9-1_powerpc.deb
php4-odbc_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-odbc_4.3.9-1_powerpc.deb
php4-pear_4.3.9-1_all.deb
  to pool/main/p/php4/php4-pear_4.3.9-1_all.deb
php4-recode_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-recode_4.3.9-1_powerpc.deb
php4-snmp_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-snmp_4.3.9-1_powerpc.deb
php4-sybase_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-sybase_4.3.9-1_powerpc.deb
php4-xslt_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-xslt_4.3.9-1_powerpc.deb
php4_4.3.9-1.diff.gz
  to pool/main/p/php4/php4_4.3.9-1.diff.gz
php4_4.3.9-1.dsc
  to pool/main/p/php4/php4_4.3.9-1.dsc
php4_4.3.9-1_all.deb
  to pool/main/p/php4/php4_4.3.9-1_all.deb
php4_4.3.9.orig.tar.gz
  to pool/main/p/php4/php4_4.3.9.orig.tar.gz

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to <email address hidden>,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Adam Conrad <adconrad@0c3.net> (supplier of updated php4 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing <email address hidden>)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Mon, 4 Oct 2004 22:57:37 -0600
Source: php4
Binary: php4-cgi php4-sybase php4-recode libapache-mod-php4 php4-cli php4-dev libapache2-mod-php4 php4-snmp php4-odbc ph...

Message-Id: <E1CEk2T-0003Cc-00@newraff.debian.org>
Date: Tue, 05 Oct 2004 03:47:13 -0400
From: Adam Conrad <adconrad@0c3.net>
To: 273143-close@bugs.debian.org
Subject: Bug#273143: fixed in php4 4:4.3.9-1

Source: php4
Source-Version: 4:4.3.9-1

We believe that the bug you reported is fixed in the latest version of
php4, which is due to be installed in the Debian FTP archive:

caudium-php4_4.3.9-1_powerpc.deb
  to pool/main/p/php4/caudium-php4_4.3.9-1_powerpc.deb
libapache-mod-php4_4.3.9-1_powerpc.deb
  to pool/main/p/php4/libapache-mod-php4_4.3.9-1_powerpc.deb
libapache2-mod-php4_4.3.9-1_powerpc.deb
  to pool/main/p/php4/libapache2-mod-php4_4.3.9-1_powerpc.deb
php4-cgi_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-cgi_4.3.9-1_powerpc.deb
php4-cli_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-cli_4.3.9-1_powerpc.deb
php4-common_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-common_4.3.9-1_powerpc.deb
php4-curl_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-curl_4.3.9-1_powerpc.deb
php4-dev_4.3.9-1_all.deb
  to pool/main/p/php4/php4-dev_4.3.9-1_all.deb
php4-domxml_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-domxml_4.3.9-1_powerpc.deb
php4-gd_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-gd_4.3.9-1_powerpc.deb
php4-imap_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-imap_4.3.9-1_powerpc.deb
php4-ldap_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-ldap_4.3.9-1_powerpc.deb
php4-mcal_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-mcal_4.3.9-1_powerpc.deb
php4-mhash_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-mhash_4.3.9-1_powerpc.deb
php4-mysql_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-mysql_4.3.9-1_powerpc.deb
php4-odbc_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-odbc_4.3.9-1_powerpc.deb
php4-pear_4.3.9-1_all.deb
  to pool/main/p/php4/php4-pear_4.3.9-1_all.deb
php4-recode_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-recode_4.3.9-1_powerpc.deb
php4-snmp_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-snmp_4.3.9-1_powerpc.deb
php4-sybase_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-sybase_4.3.9-1_powerpc.deb
php4-xslt_4.3.9-1_powerpc.deb
  to pool/main/p/php4/php4-xslt_4.3.9-1_powerpc.deb
php4_4.3.9-1.diff.gz
  to pool/main/p/php4/php4_4.3.9-1.diff.gz
php4_4.3.9-1.dsc
  to pool/main/p/php4/php4_4.3.9-1.dsc
php4_4.3.9-1_all.deb
  to pool/main/p/php4/php4_4.3.9-1_all.deb
php4_4.3.9.orig.tar.gz
  to pool/main/p/php4/php4_4.3.9.orig.tar.gz

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 273143@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Adam Conrad <adconrad@0c3.net> (supplier of updated php4 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Mon,  4 Oct 2004 22:57:37 -0600
Source: php4
Binary: php4-cgi php4-sybase php4-recode libapache-mod-php4 php4-cli php4-dev libapache2-mod-php4 php4-snmp php4-odbc php4-xslt php4-mysql php4-domxml php4-gd php4-ldap php4-imap php4-common php4-curl php4 php4-pear php4-mcal caudium-php4 php4-mhash
Architecture: source powerpc all
Version: 4:4.3.9-1
Distribution: unstable
Urgency: high
Maintainer: Adam Conrad <adconrad@0c3.net>
Changed-By: Adam Conrad <adconrad@0c3.net>
Description: 
 caudium-php4 - server-side, HTML-embedded scripting language (caudium module)
 libapache-mod-php4 - server-side, HTML-embedded scripting language (apache 1.3 module)
 libapache2-mod-php4 - server-side, HTML-embedded scripting language (apache 2.0 module)
 php4       - server-side, HTML-embedded scripting language (meta-package)
 php4-cgi   - server-side, HTML-embedded scripting language (CGI binary)
 php4-cli   - command-line interpreter for the php4 scripting language
 php4-common - Common files for packages built from the php4 source
 php4-curl  - CURL module for php4
 php4-dev   - Files for PHP4 module development
 php4-domxml - XMLv2 module for php4
 php4-gd    - GD module for php4
 php4-imap  - IMAP module for php4
 php4-ldap  - LDAP module for php4
 php4-mcal  - MCAL calendar module for php4
 php4-mhash - MHASH module for php4
 php4-mysql - MySQL module for php4
 php4-odbc  - ODBC module for php4
 php4-pear  - PEAR - PHP Extension and Application Repository
 php4-recode - Character recoding module for php4
 php4-snmp  - SNMP module for php4
 php4-sybase - Sybase / MS SQL Server module for php4
 php4-xslt  - XSLT module for php4
Closes: 119902 149430 166811 195929 205553 230956 232840 233849 260389 270435 271000 271171 272463 273143 274031 274038 274206
Changes: 
 php4 (4:4.3.9-1) unstable; urgency=high
 .
   * New upstream release, removed the following patches fixed upstream:
     014-apache2handler_CVS_fixes.patch, 015-gdNewDynamicCtx_Add_Ex.patch,
     018-unix_socket_fd_leak.patch, 020-4.3.9_overflow_fixes.patch,
     021-4.3.9_sybase_ct_fixes.patch, 022-4.3.9_sprintf_fixes.patch,
     023-4.3.9_array_fixes.patch, 024-4.3.9_glob_fix.patch,
     and 025-4.3.9_domxml_segfaults.patch
   * Resolves undiscolsed vulnerabilities in GPC processing and rfc1867
     handling of file uploads via the $_FILES array (closes: #274206)
   * After some fairly heavy testing from several users and developers,
     finally update php4-snmp to use libsnmp5 (closes: #195929)
   * Add 026-4.3.10_session_fixes.patch from CVS, which prevents PHP
     from segfaulting when a nonexistant or unsupported save_handler or
     serialize_handler is specified in php.ini.
   * Add /etc/apache/conf.d/php4.conf, setting up our mime-types, on the
     off chance that the user's /etc/mime.types is broken (closes: #271171)
   * Reintroduce a CGI binary at /usr/bin/php4-cgi, so people who can't
     make use of the --force-cgi-redirect CGI binary in /usr/lib/cgi-bin
     can instead use #!/usr/bin/php4-cgi scripts (closes: #273143)
   * Enable FastCGI for both CGI binaries, now that it no longer conflicts
     with, but rather complements, the CGI SAPI (closes: #233849)
   * Bump libgd2 build-dep a notch to make sure we build against a version
     that actually has XPM support built in (closes: #270435)
   * Finally drop the bogus libapache-mod-ssl dependency from the apache1.3
     php4 module, as glibc (>= 2.3.2.ds1-17) has fixed the dlopen refcount
     bug that we were hacking around (closes: #205553, #230956, #271000)
   * Remove the mm session handler from the apache1.3 build.  Since the
     files handler now works on all arches, and is configured to be secure
     by default, mm seems to have outlived its usefulness.
     (closes: #119902, #149430, #166811, #272463, #232840)
   * Rename sapi/apache2handler/sapi_apache2.c to mod_php4.c so that
     <IfModule> directives aren't ambiguous between php4 and php5.
   * Add Czech translation, thanks to Miroslav Kure (closes: #274038)
   * Configure CLI with --with-libedit for readline support, and add
     027-readline_is_editline.patch, since Debian's libedit headers are
     not installed in /usr/include/readline (closes: #274031)
   * libcurl grew a new SONAME somewhere along the way, and upgrading
     doesn't seem to cause regressions in php4-curl, so upgrade we shall,
     changing build-deps accordingly (closes: #260389)
Files: 
 d5878fe4e3e10818dab5f79d432fcae1 1794 web optional php4_4.3.9-1.dsc
 c685cb76bff996a4dff87097c43e6987 4869710 web optional php4_4.3.9.orig.tar.gz
 dc63afa6b9525c40611a39623d89b46d 588663 web optional php4_4.3.9-1.diff.gz
 7cf04f3e857c97c427b567a82aac9c2c 144122 web optional php4-common_4.3.9-1_powerpc.deb
 552e09412dbbf74880d7eea637298e45 1645462 web optional libapache-mod-php4_4.3.9-1_powerpc.deb
 1dba80a26b098e8e9e9eb9c946f0a951 19300 web optional php4-curl_4.3.9-1_powerpc.deb
 feefc330a23bb3bf5916e8a9ca55144c 38516 web optional php4-domxml_4.3.9-1_powerpc.deb
 937d4642b60888a7f2e22f8f8468d9c6 34300 web optional php4-gd_4.3.9-1_powerpc.deb
 40b08bdfba3e1b56f0dd56c455a29387 37024 web optional php4-imap_4.3.9-1_powerpc.deb
 7aa7f8df81976ec02907330808b7ec4d 21638 web optional php4-ldap_4.3.9-1_powerpc.deb
 923baf9dffd65511236c4b2f9de2036b 19490 web optional php4-mcal_4.3.9-1_powerpc.deb
 90c3466c0e05f6ec08ab5f269e066bef 9504 web optional php4-mhash_4.3.9-1_powerpc.deb
 1ed377ea30d77f51fc7fe6dcef3bef1b 22866 web optional php4-mysql_4.3.9-1_powerpc.deb
 d1131fe9713b1febf3057d2c97a2903a 28572 web optional php4-odbc_4.3.9-1_powerpc.deb
 016b8834aef63ec01ddcb6c8ed53c8bd 9182 web optional php4-recode_4.3.9-1_powerpc.deb
 ed65728865d0f5c21f414d1efcddc539 18234 web optional php4-xslt_4.3.9-1_powerpc.deb
 0edafd33f175c3993cda96f3c4c1630d 14742 web optional php4-snmp_4.3.9-1_powerpc.deb
 72c1d7226d0f9a509422fc32aa548806 22834 web optional php4-sybase_4.3.9-1_powerpc.deb
 5ffb62eabe18b8c5fa91e77d5077667d 3224318 web optional php4-cgi_4.3.9-1_powerpc.deb
 f152d0e4199de9fcbcde04c0d3bbffd7 1620648 web optional php4-cli_4.3.9-1_powerpc.deb
 22b652d62f85fe92d254371e41329c4b 1721138 web optional caudium-php4_4.3.9-1_powerpc.deb
 a4d3920aa0741380f99c3670296c57cf 1643548 web optional libapache2-mod-php4_4.3.9-1_powerpc.deb
 96a00daab60964203532359447263582 1322 web optional php4_4.3.9-1_all.deb
 d0e82c62a215621b1b1e15e17b9162a1 232154 devel optional php4-dev_4.3.9-1_all.deb
 3d04121727ad6e4440d5403c8c597ffa 246342 web optional php4-pear_4.3.9-1_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD4DBQFBYkt5vjztR8bOoMkRAnQWAKDdC5nj7IN8bIrNmL9gRWqtNd5ANgCVEd/p
ElGkhVFUXbDCB3R5zSVGaw==
=l1rP
-----END PGP SIGNATURE-----

Revision history for this message

Matt Zimmerman (mdz) wrote on 2004-10-28:

#9

Fixed in Debian, just needs some merge love

Revision history for this message

Thom May (thombot) wrote on 2004-11-04:

#10

php4 (4:4.3.9-1ubuntu1) hoary; urgency=low
.
* Remove caudium-php and php4-imap packages

This brings us up to date with unstable

Bug Watch Updater (bug-watch-updater) on 2006-09-27

Changed in php4:
status:	Unknown → Fix Released

Affects		Status	Importance	Assigned to	Milestone
	php4 (Debian)	Fix Released	Unknown	debbugs #273143
	php4 (Ubuntu)	Fix Released	Medium	Thom May

Ubuntu
php4 package

php4-cgi: No working #! able php binary to go under mass vhosting /cgi-bin

Bug Description

Other bug subscribers

Remote bug watches

Ubuntuphp4 package

php4-cgi: No working #! able php binary to go under mass vhosting /cgi-bin

Bug Description

Other bug subscribers

Remote bug watches

Ubuntu
php4 package