Bug 33359

Summary:	PHP: Backport 8.3.9
Product:	Mageia	Reporter:	Marc Krämer <mageia>
Component:	Backports	Assignee:	QA Team <qa-bugs>
Status:	RESOLVED FIXED	QA Contact:
Severity:	normal
Priority:	Normal	CC:	andrewsfarm, dan, mageia, nicolas.salguero, sysadmin-bugs
Version:	9	Keywords:	validated_backport
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:	MGA9-64-OK
Source RPM:	php	CVE:
Status comment:
Bug Depends on:
Bug Blocks:	33278

Description Marc Krämer 2024-07-03 14:48:57 CEST

new version available
https://www.php.net/ChangeLog-8.php#8.3.9

Comment 1 Marc Krämer 2024-07-03 14:50:26 CEST

Advisory (if needed, will come after changelog)


Backports in core/backports_testing:
php8.3-phar-debuginfo-8.3.9-2.mga9
php8.3-dom-debuginfo-8.3.9-2.mga9
php8.3-intl-8.3.9-2.mga9
php8.3-openssl-debuginfo-8.3.9-2.mga9
php8.3-mbstring-8.3.9-2.mga9
php8.3-opcache-8.3.9-2.mga9
php8.3-pdo-debuginfo-8.3.9-2.mga9
php8.3-mbstring-debuginfo-8.3.9-2.mga9
php8.3-mysqli-debuginfo-8.3.9-2.mga9
php8.3-pgsql-debuginfo-8.3.9-2.mga9
php8.3-curl-debuginfo-8.3.9-2.mga9
php8.3-mysqlnd-debuginfo-8.3.9-2.mga9
php8.3-soap-8.3.9-2.mga9
php-debuginfo-8.3.9-2.mga9
php8.3-soap-debuginfo-8.3.9-2.mga9
php8.3-fileinfo-debuginfo-8.3.9-2.mga9
php8.3-sockets-debuginfo-8.3.9-2.mga9
php8.3-zip-debuginfo-8.3.9-2.mga9
php8.3-session-debuginfo-8.3.9-2.mga9
php8.3-phar-8.3.9-2.mga9
php8.3-mysqlnd-8.3.9-2.mga9
php8.3-sodium-debuginfo-8.3.9-2.mga9
php8.3-ini-8.3.9-2.mga9
php8.3-gd-debuginfo-8.3.9-2.mga9
php8.3-dba-debuginfo-8.3.9-2.mga9
php8.3-imap-debuginfo-8.3.9-2.mga9
php8.3-gmp-debuginfo-8.3.9-2.mga9
php8.3-ldap-debuginfo-8.3.9-2.mga9
php8.3-dom-8.3.9-2.mga9
php8.3-openssl-8.3.9-2.mga9
php8.3-intl-debuginfo-8.3.9-2.mga9
php8.3-snmp-debuginfo-8.3.9-2.mga9
php8.3-sqlite3-debuginfo-8.3.9-2.mga9
php8.3-pgsql-8.3.9-2.mga9
php8.3-posix-debuginfo-8.3.9-2.mga9
php8.3-pdo-8.3.9-2.mga9
php8.3-tidy-debuginfo-8.3.9-2.mga9
php8.3-ftp-debuginfo-8.3.9-2.mga9
php8.3-exif-debuginfo-8.3.9-2.mga9
php8.3-filter-debuginfo-8.3.9-2.mga9
php8.3-odbc-debuginfo-8.3.9-2.mga9
php8.3-mysqli-8.3.9-2.mga9
php8.3-bcmath-debuginfo-8.3.9-2.mga9
php8.3-opcache-debuginfo-8.3.9-2.mga9
php8.3-imap-8.3.9-2.mga9
php8.3-gd-8.3.9-2.mga9
php8.3-pdo_pgsql-debuginfo-8.3.9-2.mga9
php8.3-doc-8.3.9-2.mga9.noarch.rpm
php8.3-iconv-debuginfo-8.3.9-2.mga9
php8.3-sodium-8.3.9-2.mga9
php8.3-xmlreader-debuginfo-8.3.9-2.mga9
php8.3-session-8.3.9-2.mga9
php8.3-sockets-8.3.9-2.mga9
php8.3-curl-8.3.9-2.mga9
php8.3-pcntl-debuginfo-8.3.9-2.mga9
php8.3-gmp-8.3.9-2.mga9
php8.3-exif-8.3.9-2.mga9
php8.3-ldap-8.3.9-2.mga9
php8.3-readline-debuginfo-8.3.9-2.mga9
php8.3-xmlwriter-debuginfo-8.3.9-2.mga9
php8.3-pdo_firebird-debuginfo-8.3.9-2.mga9
php8.3-zlib-debuginfo-8.3.9-2.mga9
php8.3-pdo_mysql-debuginfo-8.3.9-2.mga9
php8.3-xsl-debuginfo-8.3.9-2.mga9
php8.3-zip-8.3.9-2.mga9
php8.3-pdo_sqlite-debuginfo-8.3.9-2.mga9
php8.3-bz2-debuginfo-8.3.9-2.mga9
php8.3-pdo_odbc-debuginfo-8.3.9-2.mga9
php8.3-dba-8.3.9-2.mga9
php8.3-tidy-8.3.9-2.mga9
php8.3-tokenizer-debuginfo-8.3.9-2.mga9
php8.3-snmp-8.3.9-2.mga9
php8.3-sqlite3-8.3.9-2.mga9
php8.3-odbc-8.3.9-2.mga9
php8.3-pdo_dblib-debuginfo-8.3.9-2.mga9
php8.3-ftp-8.3.9-2.mga9
php8.3-calendar-debuginfo-8.3.9-2.mga9
php8.3-pdo_firebird-8.3.9-2.mga9
php8.3-bcmath-8.3.9-2.mga9
php8.3-xmlreader-8.3.9-2.mga9
php8.3-posix-8.3.9-2.mga9
php8.3-pdo_pgsql-8.3.9-2.mga9
php8.3-iconv-8.3.9-2.mga9
php8.3-zlib-8.3.9-2.mga9
php8.3-filter-8.3.9-2.mga9
php8.3-xmlwriter-8.3.9-2.mga9
php8.3-pcntl-8.3.9-2.mga9
php8.3-enchant-debuginfo-8.3.9-2.mga9
php8.3-tokenizer-8.3.9-2.mga9
php8.3-pdo_sqlite-8.3.9-2.mga9
php8.3-readline-8.3.9-2.mga9
php8.3-pdo_dblib-8.3.9-2.mga9
php8.3-pdo_odbc-8.3.9-2.mga9
php8.3-xsl-8.3.9-2.mga9
php8.3-calendar-8.3.9-2.mga9
php8.3-pdo_mysql-8.3.9-2.mga9
php8.3-gettext-debuginfo-8.3.9-2.mga9
php8.3-sysvmsg-debuginfo-8.3.9-2.mga9
php8.3-ctype-debuginfo-8.3.9-2.mga9
php8.3-bz2-8.3.9-2.mga9
php8.3-ctype-8.3.9-2.mga9
php8.3-sysvshm-8.3.9-2.mga9
php8.3-sysvsem-8.3.9-2.mga9
php8.3-gettext-8.3.9-2.mga9
php8.3-sysvmsg-8.3.9-2.mga9
php8.3-shmop-8.3.9-2.mga9
php8.3-enchant-8.3.9-2.mga9
php8.3-sysvsem-debuginfo-8.3.9-2.mga9
php8.3-shmop-debuginfo-8.3.9-2.mga9
php8.3-sysvshm-debuginfo-8.3.9-2.mga9
php8.3-fpm-nginx-8.3.9-2.mga9
php8.3-fpm-apache-8.3.9-2.mga9
php-latest-8.3.9-2.mga9
php8.3-fpm-8.3.9-2.mga9
phpdbg8.3-8.3.9-2.mga9
php8.3-cli-8.3.9-2.mga9
php8.3-cgi-8.3.9-2.mga9
apache-mod_php8.3-8.3.9-2.mga9
php8.3-fileinfo-8.3.9-2.mga9
apache-mod_php8.3-debuginfo-8.3.9-2.mga9
php8.3-cli-debuginfo-8.3.9-2.mga9
phpdbg8.3-debuginfo-8.3.9-2.mga9
php8.3-cgi-debuginfo-8.3.9-2.mga9
php8.3-fpm-debuginfo-8.3.9-2.mga9
php-debugsource-8.3.9-2.mga9
php8.3-devel-8.3.9-2.mga9

SRPM:
php-8.3.9-2.mga9.src.rpm

Marc Krämer 2024-07-03 14:50:35 CEST

Assignee: mageia => qa-bugs

PC LX 2024-07-03 17:58:49 CEST

CC: (none) => mageia

Comment 2 katnatek 2024-07-04 00:57:34 CEST

(In reply to Marc Krämer from comment #1)
> Advisory (if needed, will come after changelog)
As a dedicate sysadmin require announces in ml to promote the backports I say is needed, thank you.

Comment 3 Marc Krämer 2024-07-04 18:07:00 CEST

Advisory:
This update ships the latest version of php 8.3. It brings the usuall bug fixes.
Noteable fixes:

DOM:
- Fixed bug GH-14343 (Memory leak in xml and dom).

FPM:
- Fixed bug GH-13563 (Setting bool values via env in FPM config fails).

MySQLnd:
- Fix bug GH-14255 (mysqli_fetch_assoc reports error from nested query).

Posix:
- Fix usage of reentrant functions in ext/posix.

Soap:
- Various memory issues

SPL:
- Fixed bug GH-14290 (Member access within null pointer in extension spl).

Streams:
- Fixed bug GH-11078 (PHP Fatal error triggers pointer being freed was not allocated and malloc: double free for ptr errors).


References:
https://www.php.net/ChangeLog-8.php#8.3.8
https://www.php.net/ChangeLog-8.php#8.3.7

Comment 4 PC LX 2024-07-08 14:43:06 CEST

Installed and tested for 5 days without issues.

Tested:
- systemd socket activated;
- with apache and php-fpm;
- heimdall, wordpress, drupal, nextcloud, phpmyadmin, mediawiki, roundcubemail, etc;
- multiple websites and CLI scripts;
- xdebug with netbeans.

All OK. No regressions found.



System: Mageia 9, x86_64, Intel(R) Core(TM) i5-4590 CPU @ 3.30GHz.



# uname -a
Linux marte 6.6.28-desktop-1.mga9 #1 SMP PREEMPT_DYNAMIC Wed Apr 17 17:19:36 UTC 2024 x86_64 GNU/Linux
# rpm -qa | grep -E 'php(8.3|-pear)' | sort
php8.3-apcu-5.1.23-5.mga9
php8.3-apcu-admin-5.1.23-5.mga9
php8.3-bcmath-8.3.9-2.mga9
php8.3-bz2-8.3.9-2.mga9
php8.3-cli-8.3.9-2.mga9
php8.3-ctype-8.3.9-2.mga9
php8.3-curl-8.3.9-2.mga9
php8.3-dom-8.3.9-2.mga9
php8.3-exif-8.3.9-2.mga9
php8.3-fileinfo-8.3.9-2.mga9
php8.3-filter-8.3.9-2.mga9
php8.3-fpm-8.3.9-2.mga9
php8.3-fpm-apache-8.3.9-2.mga9
php8.3-gd-8.3.9-2.mga9
php8.3-gmp-8.3.9-2.mga9
php8.3-iconv-8.3.9-2.mga9
php8.3-imagick-3.7.0-10.mga9
php8.3-imap-8.3.9-2.mga9
php8.3-ini-8.3.9-2.mga9
php8.3-intl-8.3.9-2.mga9
php8.3-ldap-8.3.9-2.mga9
php8.3-mbstring-8.3.9-2.mga9
php8.3-mysqli-8.3.9-2.mga9
php8.3-mysqlnd-8.3.9-2.mga9
php8.3-opcache-8.3.9-2.mga9
php8.3-openssl-8.3.9-2.mga9
php8.3-pcntl-8.3.9-2.mga9
php8.3-pdo-8.3.9-2.mga9
php8.3-pdo_mysql-8.3.9-2.mga9
php8.3-pdo_sqlite-8.3.9-2.mga9
php8.3-pear-1.10.14-3.mga9
php8.3-phar-8.3.9-2.mga9
php8.3-posix-8.3.9-2.mga9
php8.3-session-8.3.9-2.mga9
php8.3-sockets-8.3.9-2.mga9
php8.3-sodium-8.3.9-2.mga9
php8.3-sqlite3-8.3.9-2.mga9
php8.3-sysvsem-8.3.9-2.mga9
php8.3-sysvshm-8.3.9-2.mga9
php8.3-tokenizer-8.3.9-2.mga9
php8.3-xdebug-3.3.1-2.mga9
php8.3-xmlreader-8.3.9-2.mga9
php8.3-xmlwriter-8.3.9-2.mga9
php8.3-zip-8.3.9-2.mga9
php8.3-zlib-8.3.9-2.mga9
php-pear-Auth_SASL-1.1.0-3.mga9
php-pear-Console_CommandLine-1.2.2-6.mga9
php-pear-Crypt_GPG-1.6.7-2.mga9
php-pear-Mail_Mime-1.10.9-2.mga9
php-pear-Net_LDAP2-2.2.0-5.mga9
php-pear-Net_Sieve-1.4.6-1.mga9
php-pear-Net_SMTP-1.10.1-2.mga9
php-pear-Net_Socket-1.2.2-4.mga9
# systemctl status php-fpm.service
● php-fpm.service - The PHP FastCGI Process Manager
     Loaded: loaded (/usr/lib/systemd/system/php-fpm.service; enabled; preset: disabled)
     Active: active (running) since Thu 2024-07-04 10:42:57 WEST; 4 days ago
   Main PID: 1346416 (php-fpm)
     Status: "Processes active: 0, idle: 0, Requests: 25372, slow: 0, Traffic: 0.00req/sec"
      Tasks: 1 (limit: 19042)
     Memory: 173.8M
        CPU: 20min 58.063s
     CGroup: /system.slice/php-fpm.service
             └─1346416 "php-fpm: master process (/etc/php-fpm.conf)"

jul 04 10:42:57 marte systemd[1]: Starting php-fpm.service...
jul 04 10:42:57 marte systemd[1]: Started php-fpm.service.
jul 04 10:43:00 marte systemd[1]: Reloading php-fpm.service...
jul 04 10:43:00 marte systemd[1]: Reloaded php-fpm.service.
jul 04 10:43:00 marte php-fpm[1346416]: [04-Jul-2024 10:43:00] NOTICE: using inherited socket fd=8, "/run/php-fpm/php-fpm.socket"

katnatek 2024-07-08 19:47:03 CEST

Whiteboard: (none) => MGA9-64-OK
CC: (none) => andrewsfarm

Nicolas Salguero 2024-07-09 10:15:57 CEST

Blocks: (none) => 33278
CC: (none) => nicolas.salguero

Comment 5 Thomas Andrews 2024-07-11 01:27:28 CEST

Validating.

Keywords: (none) => validated_backport

katnatek 2024-07-11 02:11:50 CEST

CC: (none) => sysadmin-bugs

Comment 6 katnatek 2024-07-11 02:14:04 CEST

As usual once I get the confirmation that the packages were moved
I'll post the mail in backports-announce list

Comment 7 Dan Fandrich 2024-07-11 03:10:34 CEST

php-8.3.9-2.mga9 has been moved to 9/backports.

Status: NEW => ASSIGNED
CC: (none) => dan

Comment 8 katnatek 2024-07-12 00:38:39 CEST

Announce sent to ml

Resolution: (none) => FIXED
Status: ASSIGNED => RESOLVED