Bug 29775 - PHP: update to 8.0.14
Summary: PHP: update to 8.0.14
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 8
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: MGA8-64-OK
Keywords: advisory, validated_update
Depends on:
Blocks:
 
Reported: 2021-12-17 15:29 CET by Marc Krämer
Modified: 2021-12-23 22:03 CET (History)
4 users (show)

See Also:
Source RPM: php
CVE: CVE-2017-9118
Status comment:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description Marc Krämer 2021-12-17 15:29:06 CET 
a new update is available.
Comment 1 Marc Krämer 2021-12-17 15:32:14 CET 
SRPM:
php-8.0.14-1.mga8.src.rpm

files in core/updates_testing:
php-dom-debuginfo-8.0.14-1.mga8
php-openssl-debuginfo-8.0.14-1.mga8
php-mbstring-8.0.14-1.mga8
php-debuginfo-8.0.14-1.mga8
php-phar-debuginfo-8.0.14-1.mga8
php-mysqlnd-debuginfo-8.0.14-1.mga8
php-mbstring-debuginfo-8.0.14-1.mga8
php-pgsql-debuginfo-8.0.14-1.mga8
php-fileinfo-debuginfo-8.0.14-1.mga8
php-intl-8.0.14-1.mga8
php-mysqli-debuginfo-8.0.14-1.mga8
php-curl-debuginfo-8.0.14-1.mga8
php-opcache-8.0.14-1.mga8
php-ini-8.0.14-1.mga8
php-pdo-debuginfo-8.0.14-1.mga8
php-intl-debuginfo-8.0.14-1.mga8
php-sockets-debuginfo-8.0.14-1.mga8
php-phar-8.0.14-1.mga8
php-soap-8.0.14-1.mga8
php-mysqlnd-8.0.14-1.mga8
php-soap-debuginfo-8.0.14-1.mga8
php-session-debuginfo-8.0.14-1.mga8
php-imap-debuginfo-8.0.14-1.mga8
php-gmp-debuginfo-8.0.14-1.mga8
php-gd-debuginfo-8.0.14-1.mga8
php-exif-debuginfo-8.0.14-1.mga8
php-ldap-debuginfo-8.0.14-1.mga8
php-zip-debuginfo-8.0.14-1.mga8
php-dba-debuginfo-8.0.14-1.mga8
php-snmp-debuginfo-8.0.14-1.mga8
php-openssl-8.0.14-1.mga8
php-ftp-debuginfo-8.0.14-1.mga8
php-sodium-debuginfo-8.0.14-1.mga8
php-dom-8.0.14-1.mga8
php-tidy-debuginfo-8.0.14-1.mga8
php-doc-8.0.14-1.mga8
php-pgsql-8.0.14-1.mga8
php-odbc-debuginfo-8.0.14-1.mga8
php-bcmath-debuginfo-8.0.14-1.mga8
php-iconv-debuginfo-8.0.14-1.mga8
php-sqlite3-debuginfo-8.0.14-1.mga8
php-mysqli-8.0.14-1.mga8
php-filter-debuginfo-8.0.14-1.mga8
php-zlib-debuginfo-8.0.14-1.mga8
php-posix-debuginfo-8.0.14-1.mga8
php-pdo_pgsql-debuginfo-8.0.14-1.mga8
php-pdo-8.0.14-1.mga8
php-sockets-8.0.14-1.mga8
php-session-8.0.14-1.mga8
php-xsl-debuginfo-8.0.14-1.mga8
php-pdo_sqlite-debuginfo-8.0.14-1.mga8
php-gd-8.0.14-1.mga8
php-curl-8.0.14-1.mga8
php-pdo_mysql-debuginfo-8.0.14-1.mga8
php-pdo_firebird-debuginfo-8.0.14-1.mga8
php-imap-8.0.14-1.mga8
php-exif-8.0.14-1.mga8
php-sodium-8.0.14-1.mga8
php-xmlreader-debuginfo-8.0.14-1.mga8
php-ldap-8.0.14-1.mga8
php-readline-debuginfo-8.0.14-1.mga8
php-pdo_dblib-debuginfo-8.0.14-1.mga8
php-calendar-debuginfo-8.0.14-1.mga8
php-tokenizer-debuginfo-8.0.14-1.mga8
php-xmlwriter-debuginfo-8.0.14-1.mga8
php-pcntl-debuginfo-8.0.14-1.mga8
php-sqlite3-8.0.14-1.mga8
php-dba-8.0.14-1.mga8
php-gmp-8.0.14-1.mga8
php-odbc-8.0.14-1.mga8
php-pdo_odbc-debuginfo-8.0.14-1.mga8
php-ftp-8.0.14-1.mga8
php-bz2-debuginfo-8.0.14-1.mga8
php-zip-8.0.14-1.mga8
php-tidy-8.0.14-1.mga8
php-bcmath-8.0.14-1.mga8
php-pdo_pgsql-8.0.14-1.mga8
php-snmp-8.0.14-1.mga8
php-iconv-8.0.14-1.mga8
php-filter-8.0.14-1.mga8
php-ctype-debuginfo-8.0.14-1.mga8
php-xmlwriter-8.0.14-1.mga8
php-zlib-8.0.14-1.mga8
php-enchant-debuginfo-8.0.14-1.mga8
php-gettext-debuginfo-8.0.14-1.mga8
php-pdo_sqlite-8.0.14-1.mga8
php-calendar-8.0.14-1.mga8
php-xsl-8.0.14-1.mga8
php-readline-8.0.14-1.mga8
php-xmlreader-8.0.14-1.mga8
php-sysvmsg-debuginfo-8.0.14-1.mga8
php-pcntl-8.0.14-1.mga8
php-pdo_firebird-8.0.14-1.mga8
php-posix-8.0.14-1.mga8
php-sysvshm-debuginfo-8.0.14-1.mga8
php-sysvshm-8.0.14-1.mga8
php-pdo_mysql-8.0.14-1.mga8
php-enchant-8.0.14-1.mga8
php-pdo_dblib-8.0.14-1.mga8
php-bz2-8.0.14-1.mga8
php-pdo_odbc-8.0.14-1.mga8
php-tokenizer-8.0.14-1.mga8
php-sysvsem-debuginfo-8.0.14-1.mga8
php-shmop-debuginfo-8.0.14-1.mga8
php-sysvmsg-8.0.14-1.mga8
php-ctype-8.0.14-1.mga8
php-fpm-nginx-8.0.14-1.mga8
php-fpm-apache-8.0.14-1.mga8
php-gettext-8.0.14-1.mga8
php-sysvsem-8.0.14-1.mga8
php-shmop-8.0.14-1.mga8
php-cgi-8.0.14-1.mga8
php-cli-8.0.14-1.mga8
php-fpm-8.0.14-1.mga8
phpdbg-8.0.14-1.mga8
apache-mod_php-8.0.14-1.mga8
php-opcache-debuginfo-8.0.14-1.mga8
php-fileinfo-8.0.14-1.mga8
php-cli-debuginfo-8.0.14-1.mga8
php-fpm-debuginfo-8.0.14-1.mga8
apache-mod_php-debuginfo-8.0.14-1.mga8
php-cgi-debuginfo-8.0.14-1.mga8
phpdbg-debuginfo-8.0.14-1.mga8
php-debugsource-8.0.14-1.mga8
php-devel-8.0.14-1.mga8
Comment 2 David Walser 2021-12-17 19:46:09 CET 
https://www.php.net/ChangeLog-8.php#8.0.14

GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).

actually needs to be fixed in the libgd package:
https://github.com/libgd/libgd/issues/295
https://github.com/libgd/libgd/commit/636100b9280a86e70d852d89251fc5492fce33f4

PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).

is https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9118

I didn't check the other bugs for CVEs.

Keywords: (none) => feedback
QA Contact: (none) => security
Component: RPM Packages => Security

Comment 3 Marc Krämer 2021-12-17 19:48:40 CET 
When I built this, no advisory was available. I'll check them later.
Comment 4 Marc Krämer 2021-12-17 21:53:51 CET 
@David: gd is just a warning. No need to fix.


Updated php to the latest release 8.0.14:

A security vulnerability (Out of bounds in php_pcre_replace_impl) [1] was found and fixed.

It fixes some rare bugs [2]

References:
[1] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9118
[2] https://www.php.net/ChangeLog-8.php#8.0.14
========================

Updated packages in core/updates_testing:
========================
SRPM:
php-8.0.14-1.mga8.src.rpm

files in core/updates_testing:
php-dom-debuginfo-8.0.14-1.mga8
php-openssl-debuginfo-8.0.14-1.mga8
php-mbstring-8.0.14-1.mga8
php-debuginfo-8.0.14-1.mga8
php-phar-debuginfo-8.0.14-1.mga8
php-mysqlnd-debuginfo-8.0.14-1.mga8
php-mbstring-debuginfo-8.0.14-1.mga8
php-pgsql-debuginfo-8.0.14-1.mga8
php-fileinfo-debuginfo-8.0.14-1.mga8
php-intl-8.0.14-1.mga8
php-mysqli-debuginfo-8.0.14-1.mga8
php-curl-debuginfo-8.0.14-1.mga8
php-opcache-8.0.14-1.mga8
php-ini-8.0.14-1.mga8
php-pdo-debuginfo-8.0.14-1.mga8
php-intl-debuginfo-8.0.14-1.mga8
php-sockets-debuginfo-8.0.14-1.mga8
php-phar-8.0.14-1.mga8
php-soap-8.0.14-1.mga8
php-mysqlnd-8.0.14-1.mga8
php-soap-debuginfo-8.0.14-1.mga8
php-session-debuginfo-8.0.14-1.mga8
php-imap-debuginfo-8.0.14-1.mga8
php-gmp-debuginfo-8.0.14-1.mga8
php-gd-debuginfo-8.0.14-1.mga8
php-exif-debuginfo-8.0.14-1.mga8
php-ldap-debuginfo-8.0.14-1.mga8
php-zip-debuginfo-8.0.14-1.mga8
php-dba-debuginfo-8.0.14-1.mga8
php-snmp-debuginfo-8.0.14-1.mga8
php-openssl-8.0.14-1.mga8
php-ftp-debuginfo-8.0.14-1.mga8
php-sodium-debuginfo-8.0.14-1.mga8
php-dom-8.0.14-1.mga8
php-tidy-debuginfo-8.0.14-1.mga8
php-doc-8.0.14-1.mga8
php-pgsql-8.0.14-1.mga8
php-odbc-debuginfo-8.0.14-1.mga8
php-bcmath-debuginfo-8.0.14-1.mga8
php-iconv-debuginfo-8.0.14-1.mga8
php-sqlite3-debuginfo-8.0.14-1.mga8
php-mysqli-8.0.14-1.mga8
php-filter-debuginfo-8.0.14-1.mga8
php-zlib-debuginfo-8.0.14-1.mga8
php-posix-debuginfo-8.0.14-1.mga8
php-pdo_pgsql-debuginfo-8.0.14-1.mga8
php-pdo-8.0.14-1.mga8
php-sockets-8.0.14-1.mga8
php-session-8.0.14-1.mga8
php-xsl-debuginfo-8.0.14-1.mga8
php-pdo_sqlite-debuginfo-8.0.14-1.mga8
php-gd-8.0.14-1.mga8
php-curl-8.0.14-1.mga8
php-pdo_mysql-debuginfo-8.0.14-1.mga8
php-pdo_firebird-debuginfo-8.0.14-1.mga8
php-imap-8.0.14-1.mga8
php-exif-8.0.14-1.mga8
php-sodium-8.0.14-1.mga8
php-xmlreader-debuginfo-8.0.14-1.mga8
php-ldap-8.0.14-1.mga8
php-readline-debuginfo-8.0.14-1.mga8
php-pdo_dblib-debuginfo-8.0.14-1.mga8
php-calendar-debuginfo-8.0.14-1.mga8
php-tokenizer-debuginfo-8.0.14-1.mga8
php-xmlwriter-debuginfo-8.0.14-1.mga8
php-pcntl-debuginfo-8.0.14-1.mga8
php-sqlite3-8.0.14-1.mga8
php-dba-8.0.14-1.mga8
php-gmp-8.0.14-1.mga8
php-odbc-8.0.14-1.mga8
php-pdo_odbc-debuginfo-8.0.14-1.mga8
php-ftp-8.0.14-1.mga8
php-bz2-debuginfo-8.0.14-1.mga8
php-zip-8.0.14-1.mga8
php-tidy-8.0.14-1.mga8
php-bcmath-8.0.14-1.mga8
php-pdo_pgsql-8.0.14-1.mga8
php-snmp-8.0.14-1.mga8
php-iconv-8.0.14-1.mga8
php-filter-8.0.14-1.mga8
php-ctype-debuginfo-8.0.14-1.mga8
php-xmlwriter-8.0.14-1.mga8
php-zlib-8.0.14-1.mga8
php-enchant-debuginfo-8.0.14-1.mga8
php-gettext-debuginfo-8.0.14-1.mga8
php-pdo_sqlite-8.0.14-1.mga8
php-calendar-8.0.14-1.mga8
php-xsl-8.0.14-1.mga8
php-readline-8.0.14-1.mga8
php-xmlreader-8.0.14-1.mga8
php-sysvmsg-debuginfo-8.0.14-1.mga8
php-pcntl-8.0.14-1.mga8
php-pdo_firebird-8.0.14-1.mga8
php-posix-8.0.14-1.mga8
php-sysvshm-debuginfo-8.0.14-1.mga8
php-sysvshm-8.0.14-1.mga8
php-pdo_mysql-8.0.14-1.mga8
php-enchant-8.0.14-1.mga8
php-pdo_dblib-8.0.14-1.mga8
php-bz2-8.0.14-1.mga8
php-pdo_odbc-8.0.14-1.mga8
php-tokenizer-8.0.14-1.mga8
php-sysvsem-debuginfo-8.0.14-1.mga8
php-shmop-debuginfo-8.0.14-1.mga8
php-sysvmsg-8.0.14-1.mga8
php-ctype-8.0.14-1.mga8
php-fpm-nginx-8.0.14-1.mga8
php-fpm-apache-8.0.14-1.mga8
php-gettext-8.0.14-1.mga8
php-sysvsem-8.0.14-1.mga8
php-shmop-8.0.14-1.mga8
php-cgi-8.0.14-1.mga8
php-cli-8.0.14-1.mga8
php-fpm-8.0.14-1.mga8
phpdbg-8.0.14-1.mga8
apache-mod_php-8.0.14-1.mga8
php-opcache-debuginfo-8.0.14-1.mga8
php-fileinfo-8.0.14-1.mga8
php-cli-debuginfo-8.0.14-1.mga8
php-fpm-debuginfo-8.0.14-1.mga8
apache-mod_php-debuginfo-8.0.14-1.mga8
php-cgi-debuginfo-8.0.14-1.mga8
phpdbg-debuginfo-8.0.14-1.mga8
php-debugsource-8.0.14-1.mga8
php-devel-8.0.14-1.mga8

Keywords: feedback => (none)
Assignee: mageia => qa-bugs

Marc Krämer 2021-12-17 21:54:13 CET

CVE: (none) => CVE-2017-9118

Comment 5 Herman Viaene 2021-12-20 11:53:33 CET 
MGA8-64 Plasmaon Lenovo B50 in Dutch
Copied the whole list in QARepo (except debug stuff), enable it as I do all the time, but for any rpm I select in MCC, I get "sorry, cannot be selected". Checked that the system has all 8.0.13 installed.

CC: (none) => herman.viaene

Comment 6 Marc Krämer 2021-12-20 12:00:55 CET 
is it the problem, that 
apache-mod_php-8.0.14-1.mga8
and 
php-fpm-apache-8.0.14-1.mga8

are mutual exclusive?

I don't know how I can prepare that better for your testing, but if I can, just tell me.
I'm grateful for your testing!
Comment 7 Herman Viaene 2021-12-20 13:53:11 CET 
I'm aware of the issue of those two rpm's, since I bumped my nose on it before. But I don't get that far at all, any rpm is refused.
I will clear out my QARepo and start from scratch again.
Comment 8 Herman Viaene 2021-12-20 14:03:15 CET 
Cleared QARepo, took your list again, same result.
Dsabled my local repo, enabled Core Updates Testing, refreshed and have the same problem.
Comment 9 Marc Krämer 2021-12-20 18:25:20 CET 
tried to use qarepo. The errors are a bit strange and I don't find it obvious what to put in the fields. The mirror has the files in
http://ftp-stud.hs-esslingen.de/pub/Mirrors/Mageia/distrib/8/x86_64/media/core/updates_testing

I used 
Mirror: http://ftp-stud.hs-esslingen.de/pub/Mirrors/Mageia
QA-Repo: core/updates_testing

But the tool does not connect to the mirror, with the message "couldn't enable the QA Testing (64-bit) media"

What am I doing wrong with that tool?
Comment 10 Marc Krämer 2021-12-20 18:30:04 CET 
I'm not sure, if we have an issue with our rpm db...
If I enable updates_testing and run urpmi php-cli, it installs version 8.0.14 without issues. If I run drakrpm, and I try to enable php-cli it tells me about conflicts with php-cli-8.1 which is not installed and the backports repo is not enabled....
Comment 11 Herman Viaene 2021-12-21 13:41:48 CET 
@ Marc on Comment 9:
My mirror is http://mirror.tuxinator.org/mageia/
Are you sure you have "8" in the Release box ????
The box Qa-Repo should point to your local repo folder, like mine: /home/tester8/qa-testing
Comment 12 Marc Krämer 2021-12-21 15:22:11 CET 
strange tool...
the error reports should be improved a bit.
I'll write to the mailing list, to my opionion sth. wrent totally wrong with the upload. I'll come back, if I have more infos. Thanks so far Herman.
Comment 13 Marc Krämer 2021-12-21 22:42:41 CET 
@Herman: do you have backports enabled?
I tried to install php-cli (just via urpmi) and it worked as expected.
Comment 14 David Walser 2021-12-21 22:52:46 CET 
There's a bug in MageiaUpdate where it uses backports for some people even if you don't have it enabled.  You won't see it with urpmi.
Comment 15 Marc Krämer 2021-12-21 23:54:20 CET 
Ok. Thanks david. Is there a workaround for Herman to test it?
Comment 16 David Walser 2021-12-22 00:07:03 CET 
The bug doesn't affect everyone.  I wonder if it only affects mirrorlist users rather than those that only have a specific mirror configured, as I don't see the bug, but I don't know what Herman's urpmi configuration is.  If he can't get the issue to disappear, he could uninstall php completely and then install it with updates_testing enabled.  That would avoid the issue.
Comment 17 Herman Viaene 2021-12-22 14:59:20 CET 
I just use the default mirror list. Backport is not enabled. I'll try the updates_testing directly.
Comment 18 Herman Viaene 2021-12-22 15:11:11 CET 
So disabled the local QARepo,enabled core update testing. Used MCC - Software installation and on the first php I select I get the same error.
Tried # urpmi php-bcmath-8.0.14-1.mga8.x86_64
and that works perfectly. But I hav some reservations to have thru this long list manually.....
Comment 19 Herman Viaene 2021-12-22 15:46:24 CET 
Went thru the wole list, no installation issues.Ref bug 29673 and 25045 for testing.
# systemctl start httpd
# systemctl -l status httpd
● httpd.service - The Apache HTTP Server
     Loaded: loaded (/usr/lib/systemd/system/httpd.service; disabled; vendor preset: disabled)
     Active: active (running) since Wed 2021-12-22 15:35:57 CET; 16s ago
   Main PID: 13600 (/usr/sbin/httpd)
     Status: "Total requests: 0; Idle/Busy workers 100/0;Requests/sec: 0; Bytes served/sec:   0 B/sec"
      Tasks: 11 (limit: 9396)
     Memory: 36.8M
        CPU: 206ms
     CGroup: /system.slice/httpd.service
             ├─13600 /usr/sbin/httpd -DFOREGROUND
             ├─13603 /usr/sbin/httpd -DFOREGROUND
             ├─13605 /usr/sbin/httpd -DFOREGROUND
             ├─13607 /usr/sbin/httpd -DFOREGROUND
             ├─13609 /usr/sbin/httpd -DFOREGROUND
             └─13611 /usr/sbin/httpd -DFOREGROUND

dec 22 15:35:56 mach5.hviaene.thuis systemd[1]: Starting The Apache HTTP Server...
dec 22 15:35:57 mach5.hviaene.thuis systemd[1]: Started The Apache HTTP Server.

then
$ cd Documenten
$ php -S localhost:8000 -t php
[Wed Dec 22 15:37:38 2021] PHP 8.0.14 Development Server (http://localhost:8000) started
pointed browser to localhost:8000/create-png.php and localhost:8000/sample.php , displaying expected square and message, giving feedback at the CLI:
[Wed Dec 22 15:38:07 2021] [::1]:37934 Accepted
[Wed Dec 22 15:38:07 2021] [::1]:37934 [200]: GET /create-png.php
[Wed Dec 22 15:38:07 2021] [::1]:37934 Closing
[Wed Dec 22 15:38:08 2021] [::1]:37936 Accepted
[Wed Dec 22 15:38:08 2021] [::1]:37936 [404]: GET /favicon.ico - No such file or directory
[Wed Dec 22 15:38:08 2021] [::1]:37936 Closing
[Wed Dec 22 15:39:17 2021] [::1]:37938 Accepted
[Wed Dec 22 15:39:17 2021] [::1]:37938 [200]: GET /sample.php
[Wed Dec 22 15:39:17 2021] [::1]:37938 Closing
So,all OK.

Whiteboard: (none) => MGA8-64-OK

Comment 20 Marc Krämer 2021-12-22 15:50:25 CET 
thx for your test!
I hope we'll get sorted out, why drakrpm AND QARepo have this bug! Mybe they consider a downloaded synth. file, even if the repo is disabled?
Comment 21 PC LX 2021-12-22 19:03:32 CET 
Installed and tested without issues.

Using php-fpm instead of mod_php. Using systemd socket activation.


Tested phpmyadmin, roundcubemail, wordpress, drupal and more. Tested HTTP 1.1, HTTP 2, TLS and CLI. Tested xdebug.


System: Mageia 8, x86_64, Intel CPU.


$ uname -a
Linux marte 5.10.75-desktop-1.mga8 #1 SMP Wed Oct 20 10:23:35 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
$ rpm -qa | grep php.*8\\.0 | sort
$ uname -a
Linux marte 5.15.10-desktop-1.mga8 #1 SMP Fri Dec 17 12:38:08 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
$ rpm -qa | grep php.*8\\.0 | sort
apache-mod_php-8.0.14-1.mga8
php-bz2-8.0.14-1.mga8
php-cli-8.0.14-1.mga8
php-ctype-8.0.14-1.mga8
php-curl-8.0.14-1.mga8
php-dom-8.0.14-1.mga8
php-exif-8.0.14-1.mga8
php-fileinfo-8.0.14-1.mga8
php-filter-8.0.14-1.mga8
php-fpm-8.0.14-1.mga8
php-ftp-8.0.14-1.mga8
php-gd-8.0.14-1.mga8
php-gettext-8.0.14-1.mga8
php-iconv-8.0.14-1.mga8
php-imap-8.0.14-1.mga8
php-ini-8.0.14-1.mga8
php-intl-8.0.14-1.mga8
php-ldap-8.0.14-1.mga8
php-mbstring-8.0.14-1.mga8
php-mysqli-8.0.14-1.mga8
php-mysqlnd-8.0.14-1.mga8
php-openssl-8.0.14-1.mga8
php-pdo-8.0.14-1.mga8
php-pdo_mysql-8.0.14-1.mga8
php-pdo_sqlite-8.0.14-1.mga8
php-posix-8.0.14-1.mga8
php-session-8.0.14-1.mga8
php-sockets-8.0.14-1.mga8
php-sysvsem-8.0.14-1.mga8
php-sysvshm-8.0.14-1.mga8
php-tokenizer-8.0.14-1.mga8
php-xmlreader-8.0.14-1.mga8
php-xmlwriter-8.0.14-1.mga8
php-zip-8.0.14-1.mga8
php-zlib-8.0.14-1.mga8
$ systemctl status httpd.socket php-fpm.socket httpd.service php-fpm.service
● httpd.socket - httpd server activation socket
     Loaded: loaded (/usr/local/lib/systemd/system/httpd.socket; enabled; vendor preset: disabled)
     Active: active (running) since Wed 2021-12-22 11:23:51 WET; 6h ago
   Triggers: ● httpd.service
     Listen: [::]:80 (Stream)
             [::]:443 (Stream)
      Tasks: 0 (limit: 4690)
     Memory: 12.0K
        CPU: 1ms
     CGroup: /system.slice/httpd.socket

dez 22 11:23:51 marte systemd[1]: Listening on httpd server activation socket.

● php-fpm.socket - php-fpm Server Socket
     Loaded: loaded (/usr/local/lib/systemd/system/php-fpm.socket; enabled; vendor preset: disabled)
     Active: inactive (dead) since Wed 2021-12-22 17:57:09 WET; 5min ago
   Triggers: ● php-fpm.service
     Listen: /var/lib/php-fpm/php-fpm.sock (Stream)

dez 22 17:57:03 marte systemd[1]: Listening on php-fpm Server Socket.
dez 22 17:57:09 marte systemd[1]: php-fpm.socket: Succeeded.
dez 22 17:57:09 marte systemd[1]: Closed php-fpm Server Socket.

● httpd.service - The Apache HTTP Server
     Loaded: loaded (/usr/lib/systemd/system/httpd.service; disabled; vendor preset: disabled)
     Active: active (running) since Wed 2021-12-22 17:55:45 WET; 6min ago
TriggeredBy: ● httpd.socket
   Main PID: 16044 (httpd)
     Status: "Total requests: 4; Idle/Busy workers 100/0;Requests/sec: 0.0103; Bytes served/sec: 273 B/sec"
      Tasks: 54 (limit: 4690)
     Memory: 29.9M
        CPU: 170ms
     CGroup: /system.slice/httpd.service
             ├─16044 /usr/sbin/httpd -DFOREGROUND
             ├─16054 /usr/sbin/httpd -DFOREGROUND
             └─16055 /usr/sbin/httpd -DFOREGROUND

dez 22 17:55:45 marte systemd[1]: Starting The Apache HTTP Server...
dez 22 17:55:45 marte systemd[1]: Started The Apache HTTP Server.

● php-fpm.service - The PHP FastCGI Process Manager
     Loaded: loaded (/usr/lib/systemd/system/php-fpm.service; disabled; vendor preset: disabled)
     Active: active (running) since Wed 2021-12-22 17:57:10 WET; 5min ago
TriggeredBy: ● php-fpm.socket
   Main PID: 16352 (php-fpm)
     Status: "Processes active: 0, idle: 2, Requests: 1, slow: 0, Traffic: 0req/sec"
      Tasks: 3 (limit: 4690)
     Memory: 39.2M
        CPU: 194ms
     CGroup: /system.slice/php-fpm.service
             ├─16352 php-fpm: master process (/etc/php-fpm.conf)
             ├─16354 php-fpm: pool www
             └─16355 php-fpm: pool www

CC: (none) => mageia

Comment 22 David Walser 2021-12-22 23:15:39 CET 
(In reply to Marc Krämer from comment #4)
> @David: gd is just a warning. No need to fix.

Tell that to the guy who reported it upstream to PHP, LOL.  He sounded pissed.

But yeah, we can just ship the next upstream libgd version when it's released.

Otherwise, this is working fine with my normal battery of CGI tests.

Keywords: (none) => validated_update
CC: (none) => sysadmin-bugs

Dave Hodgins 2021-12-23 20:16:55 CET

Keywords: (none) => advisory
CC: (none) => davidwhodgins

Comment 23 Mageia Robot 2021-12-23 22:03:02 CET 
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2021-0581.html

Resolution: (none) => FIXED
Status: NEW => RESOLVED
Note You need to log in before you can comment on or make changes to this bug.