Bug 32645 - PHP Update to latest 8.2.14
Summary: PHP Update to latest 8.2.14
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: 9
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact:
URL:
Whiteboard: MGA9-64-OK
Keywords: advisory, validated_update
Depends on:
Blocks:
 
Reported: 2023-12-21 12:16 CET by Marc Krämer
Modified: 2023-12-29 18:17 CET (History)
5 users (show)

See Also:
Source RPM: php
CVE:
Status comment:


Attachments

Description Marc Krämer 2023-12-21 12:16:27 CET
https://www.php.net/ChangeLog-8.php#8.2.14
Comment 1 Marc Krämer 2023-12-21 12:20:50 CET
Updated php package fix some errors:

- Core:
  . Fixed oss-fuzz #54325 (Use-after-free of name in var-var with malicious
    error handler). 
  . Fixed oss-fuzz #64209 (In-place modification of filename in
    php_message_handler_for_zend).
  . Fixed bug GH-12758 / GH-12768 (Invalid opline in OOM handlers within
    ZEND_FUNC_GET_ARGS and ZEND_BIND_STATIC).
  . Fix various missing NULL checks.
  . Fixed bug GH-12835 (Leak of call->extra_named_params on internal __call).

- Date:
  . Fixed improbably integer overflow while parsing really large (or small)
    Unix timestamps.

- DOM:
  . Fixed bug GH-12616 (DOM: Removing XMLNS namespace node results in invalid
    default: prefix).

- FPM:
  . Fixed bug GH-12705 (Segmentation fault in fpm_status_export_to_zval).

- FTP:
  . Fixed bug GH-9348 (FTP & SSL session reuse).

- Intl:
  . Fixed bug GH-12635 (Test bug69398.phpt fails with ICU 74.1).

- LibXML:
  . Fixed bug GH-12702 (libxml2 2.12.0 issue building from src).
  . Fixed test failures for libxml2 2.12.0.

- MySQLnd:
  . Avoid using uninitialised struct.
  . Fixed bug GH-12791 (Possible dereference of NULL in MySQLnd debug code).

- Opcache:
  . Fixed JIT bug (Function JIT emits "Uninitialized string offset" warning
    at the same time as invalid offset Error).
  . Fixed JIT bug (JIT emits "Attempt to assign property of non-object"
    warning at the same time as Error is being thrown).

- OpenSSL:
  . Fixed bug #50713 (openssl_pkcs7_verify() may ignore untrusted CAs).

- PCRE:
  . Fixed bug GH-12628 (The gh11374 test fails on Alpinelinux).

- PDO PGSQL:
  . Fixed the default value of $fetchMode in PDO::pgsqlGetNotify()

- PGSQL:
  . Fixed bug GH-12763 wrong argument type for pg_untrace.

- PHPDBG:
  . Fixed bug GH-12675 (MEMORY_LEAK in phpdbg_prompt.c).

- SOAP:
  . Fixed bug GH-12838 ([SOAP] Temporary WSDL cache files not being deleted).

- SPL:
  . Fixed bug GH-12721 (SplFileInfo::getFilename() segfault in combination
    with GlobIterator and no directory separator).

- SQLite3:
  . Fixed bug GH-12633 (sqlite3_defensive.phpt fails with sqlite 3.44.0).

- Standard:
  . Fix memory leak in syslog device handling.
  . Fixed bug GH-12621 (browscap segmentation fault when configured in the
    vhost). 
  . Fixed bug GH-12655 (proc_open() does not take into account references
    in the descriptor array).

- Streams:
  . Fixed bug #79945 (Stream wrappers in imagecreatefrompng causes segfault).

- Zip:
  . Fixed bug GH-12661 (Inconsistency in ZipArchive::addGlob remove_path Option
    Behavior).

References:
https://www.php.net/ChangeLog-8.php#8.2.14
========================

Updated packages in core/updates_testing:
========================
phpdbg-8.2.14-1.mga9
php-cgi-8.2.14-1.mga9
php-cli-8.2.14-1.mga9
php-fpm-8.2.14-1.mga9
php-intl-debuginfo-8.2.14-1.mga9
php-debuginfo-8.2.14-1.mga9
php-opcache-debuginfo-8.2.14-1.mga9
php-soap-debuginfo-8.2.14-1.mga9
php-mbstring-debuginfo-8.2.14-1.mga9
php-mbstring-8.2.14-1.mga9
php-phar-debuginfo-8.2.14-1.mga9
php-opcache-8.2.14-1.mga9
php-dom-debuginfo-8.2.14-1.mga9
php-openssl-debuginfo-8.2.14-1.mga9
php-intl-8.2.14-1.mga9
php-mysqlnd-debuginfo-8.2.14-1.mga9
php-mysqli-debuginfo-8.2.14-1.mga9
php-pgsql-debuginfo-8.2.14-1.mga9
php-fileinfo-8.2.14-1.mga9
php-pdo-debuginfo-8.2.14-1.mga9
php-curl-debuginfo-8.2.14-1.mga9
php-soap-8.2.14-1.mga9
php-fileinfo-debuginfo-8.2.14-1.mga9
apache-mod_php-8.2.14-1.mga9
php-session-debuginfo-8.2.14-1.mga9
php-sockets-debuginfo-8.2.14-1.mga9
php-phar-8.2.14-1.mga9
php-mysqlnd-8.2.14-1.mga9
php-zip-debuginfo-8.2.14-1.mga9
php-sodium-debuginfo-8.2.14-1.mga9
php-gd-debuginfo-8.2.14-1.mga9
php-ini-8.2.14-1.mga9
php-ldap-debuginfo-8.2.14-1.mga9
php-imap-debuginfo-8.2.14-1.mga9
php-dba-debuginfo-8.2.14-1.mga9
php-openssl-8.2.14-1.mga9
php-dom-8.2.14-1.mga9
php-snmp-debuginfo-8.2.14-1.mga9
php-gmp-debuginfo-8.2.14-1.mga9
php-sqlite3-debuginfo-8.2.14-1.mga9
php-tidy-debuginfo-8.2.14-1.mga9
php-mysqli-8.2.14-1.mga9
php-pgsql-8.2.14-1.mga9
php-exif-debuginfo-8.2.14-1.mga9
php-odbc-debuginfo-8.2.14-1.mga9
php-ftp-debuginfo-8.2.14-1.mga9
php-pdo-8.2.14-1.mga9
php-filter-debuginfo-8.2.14-1.mga9
php-bcmath-debuginfo-8.2.14-1.mga9
php-curl-8.2.14-1.mga9
php-doc-8.2.14-1.mga9.noarch.rpm
php-session-8.2.14-1.mga9
php-pcntl-debuginfo-8.2.14-1.mga9
php-gd-8.2.14-1.mga9
php-xmlreader-debuginfo-8.2.14-1.mga9
php-iconv-debuginfo-8.2.14-1.mga9
php-sodium-8.2.14-1.mga9
php-posix-debuginfo-8.2.14-1.mga9
php-sockets-8.2.14-1.mga9
php-imap-8.2.14-1.mga9
php-pdo_pgsql-debuginfo-8.2.14-1.mga9
php-zlib-debuginfo-8.2.14-1.mga9
php-pdo_mysql-debuginfo-8.2.14-1.mga9
php-ldap-8.2.14-1.mga9
php-exif-8.2.14-1.mga9
php-zip-8.2.14-1.mga9
php-pdo_firebird-debuginfo-8.2.14-1.mga9
php-xsl-debuginfo-8.2.14-1.mga9
php-pdo_sqlite-debuginfo-8.2.14-1.mga9
php-xmlwriter-debuginfo-8.2.14-1.mga9
php-readline-debuginfo-8.2.14-1.mga9
php-tokenizer-debuginfo-8.2.14-1.mga9
php-gmp-8.2.14-1.mga9
php-odbc-8.2.14-1.mga9
php-pdo_dblib-debuginfo-8.2.14-1.mga9
php-ftp-8.2.14-1.mga9
php-sqlite3-8.2.14-1.mga9
php-dba-8.2.14-1.mga9
php-calendar-debuginfo-8.2.14-1.mga9
php-pdo_odbc-debuginfo-8.2.14-1.mga9
php-snmp-8.2.14-1.mga9
php-tidy-8.2.14-1.mga9
php-zlib-8.2.14-1.mga9
php-bz2-debuginfo-8.2.14-1.mga9
php-iconv-8.2.14-1.mga9
php-filter-8.2.14-1.mga9
php-enchant-debuginfo-8.2.14-1.mga9
php-xmlreader-8.2.14-1.mga9
php-pcntl-8.2.14-1.mga9
php-pdo_pgsql-8.2.14-1.mga9
php-xmlwriter-8.2.14-1.mga9
php-pdo_firebird-8.2.14-1.mga9
php-bcmath-8.2.14-1.mga9
php-ctype-debuginfo-8.2.14-1.mga9
php-posix-8.2.14-1.mga9
php-sysvmsg-debuginfo-8.2.14-1.mga9
php-pdo_sqlite-8.2.14-1.mga9
php-calendar-8.2.14-1.mga9
php-xsl-8.2.14-1.mga9
php-readline-8.2.14-1.mga9
php-gettext-debuginfo-8.2.14-1.mga9
php-pdo_mysql-8.2.14-1.mga9
php-pdo_dblib-8.2.14-1.mga9
php-tokenizer-8.2.14-1.mga9
php-pdo_odbc-8.2.14-1.mga9
php-sysvshm-debuginfo-8.2.14-1.mga9
php-shmop-debuginfo-8.2.14-1.mga9
php-bz2-8.2.14-1.mga9
php-sysvshm-8.2.14-1.mga9
php-sysvsem-debuginfo-8.2.14-1.mga9
php-enchant-8.2.14-1.mga9
php-sysvmsg-8.2.14-1.mga9
php-shmop-8.2.14-1.mga9
php-sysvsem-8.2.14-1.mga9
php-ctype-8.2.14-1.mga9
php-gettext-8.2.14-1.mga9
php-fpm-apache-8.2.14-1.mga9
php-fpm-nginx-8.2.14-1.mga9
php-fpm-debuginfo-8.2.14-1.mga9
apache-mod_php-debuginfo-8.2.14-1.mga9
phpdbg-debuginfo-8.2.14-1.mga9
php-cgi-debuginfo-8.2.14-1.mga9
php-cli-debuginfo-8.2.14-1.mga9
php-debugsource-8.2.14-1.mga9
php-devel-8.2.14-1.mga9

SRPM:
php-8.2.14-1.mga9.src.rpm

Assignee: mageia => qa-bugs

Comment 2 Marja Van Waes 2023-12-21 21:06:22 CET
Advisory from comment 1 added to SVN. Please remove the "advisory" keyword if it needs to be changed. It also helps when obsolete advisories are tagged as "obsolete"

CC: (none) => marja11
Keywords: (none) => advisory

PC LX 2023-12-21 23:34:17 CET

CC: (none) => mageia

Comment 3 katnatek 2023-12-22 05:05:17 CET
LC_ALL=C urpmi --auto --auto-update
medium "QA Testing (64-bit)" is up-to-date
medium "Core Release" is up-to-date
medium "Core Updates" is up-to-date
medium "Nonfree Release" is up-to-date
medium "Nonfree Updates" is up-to-date
medium "Tainted Release" is up-to-date
medium "Tainted Updates" is up-to-date
medium "Core 32bit Release" is up-to-date
medium "Core 32bit Updates" is up-to-date
medium "Nonfree 32bit Release" is up-to-date
medium "Nonfree 32bit Updates" is up-to-date
medium "Tainted 32bit Release" is up-to-date
medium "Tainted 32bit Updates" is up-to-date

installing php-zlib-8.2.14-1.mga9.x86_64.rpm php-sysvshm-8.2.14-1.mga9.x86_64.rpm php-sysvsem-8.2.14-1.mga9.x86_64.rpm php-fpm-apache-8.2.14-1.mga9.x86_64.rpm php-ini-8.2.14-1.mga9.x86_64.rpm php-openssl-8.2.14-1.mga9.x86_64.rpm php-session-8.2.14-1.mga9.x86_64.rpm php-fpm-8.2.14-1.mga9.x86_64.rpm php-cli-8.2.14-1.mga9.x86_64.rpm from //home/katnatek/qa-testing/x86_64
Preparing...                     ###################################################################################      1/9: php-sysvshm           ###################################################################################      2/9: php-sysvsem           ###################################################################################      3/9: php-openssl           ###################################################################################
      4/9: php-session           ###################################################################################
      5/9: php-fpm-apache        ###################################################################################
      6/9: php-fpm               ###################################################################################
      7/9: php-ini               ###################################################################################
      8/9: php-zlib              ###################################################################################
      9/9: php-cli               ###################################################################################
      1/9: removing php-cli-3:8.2.13-1.mga9.x86_64
                                 ###################################################################################
      2/9: removing php-sysvsem-3:8.2.13-1.mga9.x86_64
                                 ###################################################################################
      3/9: removing php-session-3:8.2.13-1.mga9.x86_64
                                 ###################################################################################
      4/9: removing php-fpm-apache-3:8.2.13-1.mga9.x86_64
                                 ###################################################################################
      5/9: removing php-fpm-3:8.2.13-1.mga9.x86_64
                                 ###################################################################################
      6/9: removing php-sysvshm-3:8.2.13-1.mga9.x86_64
                                 ###################################################################################
      7/9: removing php-ini-3:8.2.13-1.mga9.x86_64
                                 ###################################################################################
      8/9: removing php-zlib-3:8.2.13-1.mga9.x86_64
                                 ###################################################################################
      9/9: removing php-openssl-3:8.2.13-1.mga9.x86_64
                                 ###################################################################################

Test a php script works
Comment 4 PC LX 2023-12-22 11:54:15 CET
Installed and tested without issues.

Using php-fpm instead of mod_php.

Tested phpmyadmin, drupal, wordpress, mediawiki, roundcubemail, nextcloud, etc.
Tested xdebug with netbeans.
Tested for a half hour to see if everything is working, it is. Will post an update if I come across any issues.


System: Mageia 9, x86_64, Apache httpd, Intel(R) Core(TM) i5-4590 CPU @ 3.30GHz.



# uname -a
Linux marte 6.5.13-desktop-6.mga9 #1 SMP PREEMPT_DYNAMIC Sun Dec 17 22:42:25 UTC 2023 x86_64 GNU/Linux
# rpm -qa | grep php.*8.2.14 | sort
apache-mod_php-8.2.14-1.mga9
php-bcmath-8.2.14-1.mga9
php-bz2-8.2.14-1.mga9
php-cli-8.2.14-1.mga9
php-ctype-8.2.14-1.mga9
php-curl-8.2.14-1.mga9
php-dom-8.2.14-1.mga9
php-exif-8.2.14-1.mga9
php-fileinfo-8.2.14-1.mga9
php-filter-8.2.14-1.mga9
php-fpm-8.2.14-1.mga9
php-gd-8.2.14-1.mga9
php-gmp-8.2.14-1.mga9
php-iconv-8.2.14-1.mga9
php-imap-8.2.14-1.mga9
php-ini-8.2.14-1.mga9
php-intl-8.2.14-1.mga9
php-ldap-8.2.14-1.mga9
php-mbstring-8.2.14-1.mga9
php-mysqli-8.2.14-1.mga9
php-mysqlnd-8.2.14-1.mga9
php-opcache-8.2.14-1.mga9
php-openssl-8.2.14-1.mga9
php-pcntl-8.2.14-1.mga9
php-pdo-8.2.14-1.mga9
php-pdo_mysql-8.2.14-1.mga9
php-pdo_sqlite-8.2.14-1.mga9
php-phar-8.2.14-1.mga9
php-posix-8.2.14-1.mga9
php-session-8.2.14-1.mga9
php-sockets-8.2.14-1.mga9
php-sodium-8.2.14-1.mga9
php-sqlite3-8.2.14-1.mga9
php-sysvsem-8.2.14-1.mga9
php-sysvshm-8.2.14-1.mga9
php-tokenizer-8.2.14-1.mga9
php-xmlreader-8.2.14-1.mga9
php-xmlwriter-8.2.14-1.mga9
php-zip-8.2.14-1.mga9
php-zlib-8.2.14-1.mga9
# systemctl status httpd.service php-fpm.service
● httpd.service - The Apache HTTP Server
     Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; preset: disabled)
     Active: active (running) since Fri 2023-12-22 09:36:30 WET; 14min ago
    Process: 1148532 ExecReload=/usr/sbin/httpd $OPTIONS -k graceful (code=exited, status=0/SUCCESS)
   Main PID: 1148321 (httpd)
     Status: "Total requests: 2612; Idle/Busy workers 100/0;Requests/sec: 3.01; Bytes served/sec: 151KB/sec"
      Tasks: 66 (limit: 19041)
     Memory: 123.8M
        CPU: 4.410s
     CGroup: /system.slice/httpd.service
             ├─1148321 /usr/sbin/httpd -DFOREGROUND
             ├─1148654 /usr/sbin/httpd -DFOREGROUND
             └─1148657 /usr/sbin/httpd -DFOREGROUND

dez 22 09:36:30 marte systemd[1]: Starting httpd.service...
dez 22 09:36:30 marte systemd[1]: Started httpd.service.
dez 22 09:36:30 marte systemd[1]: Reloading httpd.service...
dez 22 09:36:30 marte systemd[1]: Reloaded httpd.service.

● php-fpm.service - The PHP FastCGI Process Manager
     Loaded: loaded (/usr/lib/systemd/system/php-fpm.service; enabled; preset: disabled)
     Active: active (running) since Fri 2023-12-22 09:36:51 WET; 14min ago
   Main PID: 1163821 (php-fpm)
     Status: "Processes active: 0, idle: 1, Requests: 1061, slow: 0, Traffic: 0.2req/sec"
      Tasks: 1 (limit: 19041)
     Memory: 448.1M
        CPU: 46.942s
     CGroup: /system.slice/php-fpm.service
             └─1163821 "php-fpm: master process (/etc/php-fpm.conf)"

dez 22 09:36:51 marte systemd[1]: Starting php-fpm.service...
dez 22 09:36:51 marte systemd[1]: Started php-fpm.service.
Comment 5 Brian Rockwell 2023-12-24 23:40:31 CET
MGA9-64, Xfce, Nextcloud, Intel 

Used as nextcloud server

The following 44 packages are going to be installed:

- apache-mod_php-8.2.14-1.mga9.x86_64
- php-bcmath-8.2.14-1.mga9.x86_64
- php-bz2-8.2.14-1.mga9.x86_64
- php-calendar-8.2.14-1.mga9.x86_64
- php-cgi-8.2.14-1.mga9.x86_64
- php-cli-8.2.14-1.mga9.x86_64
- php-ctype-8.2.14-1.mga9.x86_64
- php-curl-8.2.14-1.mga9.x86_64
- php-dom-8.2.14-1.mga9.x86_64
- php-exif-8.2.14-1.mga9.x86_64
- php-fileinfo-8.2.14-1.mga9.x86_64
- php-filter-8.2.14-1.mga9.x86_64
- php-ftp-8.2.14-1.mga9.x86_64
- php-gd-8.2.14-1.mga9.x86_64
- php-gettext-8.2.14-1.mga9.x86_64
- php-gmp-8.2.14-1.mga9.x86_64
- php-iconv-8.2.14-1.mga9.x86_64
- php-ini-8.2.14-1.mga9.x86_64
- php-intl-8.2.14-1.mga9.x86_64
- php-mbstring-8.2.14-1.mga9.x86_64
- php-mysqli-8.2.14-1.mga9.x86_64
- php-mysqlnd-8.2.14-1.mga9.x86_64
- php-openssl-8.2.14-1.mga9.x86_64
- php-pcntl-8.2.14-1.mga9.x86_64
- php-pdo-8.2.14-1.mga9.x86_64
- php-pdo_mysql-8.2.14-1.mga9.x86_64
- php-phar-8.2.14-1.mga9.x86_64
- php-posix-8.2.14-1.mga9.x86_64
- php-readline-8.2.14-1.mga9.x86_64
- php-session-8.2.14-1.mga9.x86_64
- php-shmop-8.2.14-1.mga9.x86_64
- php-snmp-8.2.14-1.mga9.x86_64
- php-soap-8.2.14-1.mga9.x86_64
- php-sockets-8.2.14-1.mga9.x86_64
- php-sodium-8.2.14-1.mga9.x86_64
- php-sysvmsg-8.2.14-1.mga9.x86_64
- php-sysvsem-8.2.14-1.mga9.x86_64
- php-sysvshm-8.2.14-1.mga9.x86_64
- php-tokenizer-8.2.14-1.mga9.x86_64
- php-xmlreader-8.2.14-1.mga9.x86_64
- php-xmlwriter-8.2.14-1.mga9.x86_64
- php-xsl-8.2.14-1.mga9.x86_64
- php-zip-8.2.14-1.mga9.x86_64
- php-zlib-8.2.14-1.mga9.x86_64

-- rebooted


nextcloud is working as expected

Whiteboard: (none) => MGA9-64-OK
CC: (none) => brtians1

Comment 6 PC LX 2023-12-25 03:23:16 CET
(In reply to Brian Rockwell from comment #5)
> MGA9-64, Xfce, Nextcloud, Intel 
> 
> Used as nextcloud server
> 
> The following 44 packages are going to be installed:
> <SNIP>
> -- rebooted

Just a quick advice. Reboot is not needed. Restarting apache when using apache-mod_php (systemctl restart httpd.service) or restarting php-fpm (systemctl restart php-fpm.service) when using FastCGI is enough to get the PHP updates running.
Comment 7 Thomas Andrews 2023-12-26 15:24:08 CET
Validating.

Keywords: (none) => validated_update
CC: (none) => andrewsfarm, sysadmin-bugs

Comment 8 Mageia Robot 2023-12-29 18:17:49 CET
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGAA-2023-0155.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.