[MacPorts] #25789: php5 5.3.3 update
#25789: php5 5.3.3 update -------------------------------------+-------------------------------------- Reporter: ryandesign@… | Owner: ryandesign@… Type: update | Status: new Priority: Normal | Milestone: Component: ports | Version: 1.9.1 Keywords: | Port: php5 php5-curl php5-calendar php5-dba php5-ftp php5-exif php5-gd php5-gettext php5-gmp php5-iconv php5-imap php5-mbstring php5-mcrypt php5-mssql php5-mysql php5-odbc php5-pcntl php5-posix php5-openssl php5-pspell php5-oracle php5-postgresql php5-snmp php5-soap php5-sqlite php5-tidy php5-sockets php5-wddx php5-zip php5-xmlrpc php5-xsl -------------------------------------+-------------------------------------- Here's a patch to updated php5 and all the bundled extension ports to 5.3.3. I'm not committing it yet because php5-mysql fails to build both [http://bugs.php.net/bug.php?id=52417 with mysqlnd] and [http://bugs.php.net/bug.php?id=52413 with the mysql5 libraries]. We also probably need an updated [http://www.hardened- php.net/suhosin/download.html suhosin patch]. -- Ticket URL: <http://trac.macports.org/ticket/25789> MacPorts <http://www.macports.org/> Ports system for Mac OS
#25789: php5 5.3.3 update -------------------------------------+-------------------------------------- Reporter: ryandesign@… | Owner: ryandesign@… Type: update | Status: new Priority: Normal | Milestone: Component: ports | Version: 1.9.1 Keywords: | Port: php5 php5-curl php5-calendar php5-dba php5-ftp php5-exif php5-gd php5-gettext php5-gmp php5-iconv php5-imap php5-mbstring php5-mcrypt php5-mssql php5-mysql php5-odbc php5-pcntl php5-posix php5-openssl php5-pspell php5-oracle php5-postgresql php5-snmp php5-soap php5-sqlite php5-tidy php5-sockets php5-wddx php5-zip php5-xmlrpc php5-xsl -------------------------------------+-------------------------------------- Changes (by wsiegrist@…): * cc: wsiegrist@… (added) Comment: Is there a problem with running v5.3.2 of the mysql extension with v5.3.3 of PHP? I need 5.3.3 to fix CVE-2010-2225, and php5-mysql 5.3.2 appears to work. Assuming the version mismatch is okay, could you update the port to fix the security problems and save php5-mysql for later when your php.net ticket is fixed? -- Ticket URL: <http://trac.macports.org/ticket/25789#comment:1> MacPorts <http://www.macports.org/> Ports system for Mac OS
#25789: php5 5.3.3 update -------------------------------------+-------------------------------------- Reporter: ryandesign@… | Owner: ryandesign@… Type: update | Status: new Priority: Normal | Milestone: Component: ports | Version: 1.9.1 Keywords: | Port: php5 php5-curl php5-calendar php5-dba php5-ftp php5-exif php5-gd php5-gettext php5-gmp php5-iconv php5-imap php5-mbstring php5-mcrypt php5-mssql php5-mysql php5-odbc php5-pcntl php5-posix php5-openssl php5-pspell php5-oracle php5-postgresql php5-snmp php5-soap php5-sqlite php5-tidy php5-sockets php5-wddx php5-zip php5-xmlrpc php5-xsl -------------------------------------+-------------------------------------- Comment(by ryandesign@…): The php5extension portgroup will actively prevent you from attempting to install a bundled extension port unless that port's version number matches the version number reported by php-config. This was added to the portgroup in r61501 / #22808 because it seemed inadvisable to allow mixing version numbers. Potentially I could see about adding an exemption for just this case for now. -- Ticket URL: <http://trac.macports.org/ticket/25789#comment:2> MacPorts <http://www.macports.org/> Ports system for Mac OS
#25789: php5 5.3.3 update -------------------------------------+-------------------------------------- Reporter: ryandesign@… | Owner: ryandesign@… Type: update | Status: new Priority: Normal | Milestone: Component: ports | Version: 1.9.1 Keywords: | Port: php5 php5-curl php5-calendar php5-dba php5-ftp php5-exif php5-gd php5-gettext php5-gmp php5-iconv php5-imap php5-mbstring php5-mcrypt php5-mssql php5-mysql php5-odbc php5-pcntl php5-posix php5-openssl php5-pspell php5-oracle php5-postgresql php5-snmp php5-soap php5-sqlite php5-tidy php5-sockets php5-wddx php5-zip php5-xmlrpc php5-xsl -------------------------------------+-------------------------------------- Comment(by wsiegrist@…): But it does not prevent you from upgrading php and some extensions, but not others, thus leaving you with mismatched versions. I agree that mixing versions is not a good practice, but if it works in this one case and allows for a security fix, it might be worth some sort of exception. Either way, I solved my problem by using a local port tree until all of php5 catches up, so I'm okay with waiting. -- Ticket URL: <http://trac.macports.org/ticket/25789#comment:3> MacPorts <http://www.macports.org/> Ports system for Mac OS
#25789: php5 5.3.3 update -------------------------------------+-------------------------------------- Reporter: ryandesign@… | Owner: ryandesign@… Type: update | Status: new Priority: Normal | Milestone: Component: ports | Version: 1.9.1 Keywords: | Port: php5 php5-curl php5-calendar php5-dba php5-ftp php5-exif php5-gd php5-gettext php5-gmp php5-iconv php5-imap php5-mbstring php5-mcrypt php5-mssql php5-mysql php5-odbc php5-pcntl php5-posix php5-openssl php5-pspell php5-oracle php5-postgresql php5-snmp php5-soap php5-sqlite php5-tidy php5-sockets php5-wddx php5-zip php5-xmlrpc php5-xsl -------------------------------------+-------------------------------------- Comment(by ryandesign@…): My main concern was that people using the php52 port should not be able to install the php5 extension ports, which are for PHP 5.3. Relaxed the version check in r70327 to only match the PHP branch, not the specific version. -- Ticket URL: <http://trac.macports.org/ticket/25789#comment:4> MacPorts <http://www.macports.org/> Ports system for Mac OS
#25789: php5 5.3.3 update -------------------------------------+-------------------------------------- Reporter: ryandesign@… | Owner: ryandesign@… Type: update | Status: new Priority: Normal | Milestone: Component: ports | Version: 1.9.1 Keywords: | Port: php5 php5-curl php5-calendar php5-dba php5-ftp php5-exif php5-gd php5-gettext php5-gmp php5-iconv php5-imap php5-mbstring php5-mcrypt php5-mssql php5-mysql php5-odbc php5-pcntl php5-posix php5-openssl php5-pspell php5-oracle php5-postgresql php5-snmp php5-soap php5-sqlite php5-tidy php5-sockets php5-wddx php5-zip php5-xmlrpc php5-xsl -------------------------------------+-------------------------------------- Comment(by ryandesign@…): Updated all except php5-mysql in r70353. -- Ticket URL: <http://trac.macports.org/ticket/25789#comment:5> MacPorts <http://www.macports.org/> Ports system for Mac OS
#25789: php5 5.3.3 update -------------------------------------+-------------------------------------- Reporter: ryandesign@… | Owner: ryandesign@… Type: update | Status: new Priority: Normal | Milestone: Component: ports | Version: 1.9.1 Keywords: | Port: php5 php5-curl php5-calendar php5-dba php5-ftp php5-exif php5-gd php5-gettext php5-gmp php5-iconv php5-imap php5-mbstring php5-mcrypt php5-mssql php5-mysql php5-odbc php5-pcntl php5-posix php5-openssl php5-pspell php5-oracle php5-postgresql php5-snmp php5-soap php5-sqlite php5-tidy php5-sockets php5-wddx php5-zip php5-xmlrpc php5-xsl -------------------------------------+-------------------------------------- Comment(by spam@…): Ok, this seems to be the reason for this problem: #26000 Is there a solution. Or should we go back to php5.3.2? -- Ticket URL: <http://trac.macports.org/ticket/25789#comment:6> MacPorts <http://www.macports.org/> Ports system for Mac OS
#25789: php5 5.3.3 update -------------------------------------+-------------------------------------- Reporter: ryandesign@… | Owner: ryandesign@… Type: update | Status: new Priority: Normal | Milestone: Component: ports | Version: 1.9.1 Keywords: | Port: php5 php5-curl php5-calendar php5-dba php5-ftp php5-exif php5-gd php5-gettext php5-gmp php5-iconv php5-imap php5-mbstring php5-mcrypt php5-mssql php5-mysql php5-odbc php5-pcntl php5-posix php5-openssl php5-pspell php5-oracle php5-postgresql php5-snmp php5-soap php5-sqlite php5-tidy php5-sockets php5-wddx php5-zip php5-xmlrpc php5-xsl -------------------------------------+-------------------------------------- Comment(by ryandesign@…): Replying to [comment:6 spam@…]:
Ok, this seems to be the reason for this problem: #26000 Fantastic. :( Is there a solution. I will ask upstream, in the bug reports mentioned in the description of this ticket. Or should we go back to php5.3.2? If upstream has no solution that's what we'll do.
-- Ticket URL: <http://trac.macports.org/ticket/25789#comment:7> MacPorts <http://www.macports.org/> Ports system for Mac OS
#25789: php5 5.3.3 update -------------------------------------+-------------------------------------- Reporter: ryandesign@… | Owner: ryandesign@… Type: update | Status: new Priority: Normal | Milestone: Component: ports | Version: 1.9.1 Keywords: | Port: php5 php5-curl php5-calendar php5-dba php5-ftp php5-exif php5-gd php5-gettext php5-gmp php5-iconv php5-imap php5-mbstring php5-mcrypt php5-mssql php5-mysql php5-odbc php5-pcntl php5-posix php5-openssl php5-pspell php5-oracle php5-postgresql php5-snmp php5-soap php5-sqlite php5-tidy php5-sockets php5-wddx php5-zip php5-xmlrpc php5-xsl -------------------------------------+-------------------------------------- Comment(by ryandesign@…): Upstream has fixed the [http://bugs.php.net/bug.php?id=52413 problem building mysqli with external mysql libraries] but not the [http://bugs.php.net/bug.php?id=52417 problem building mysqli with mysqlnd]. I updated php5-mysql to 5.3.3 in r70568 incorporating the upstream fix for using external mysql libraries and disabling mysqlnd entirely until upstream fixes that as well. -- Ticket URL: <http://trac.macports.org/ticket/25789#comment:10> MacPorts <http://www.macports.org/> Ports system for Mac OS
#25789: php5 5.3.3 update -------------------------------------+-------------------------------------- Reporter: ryandesign@… | Owner: ryandesign@… Type: update | Status: new Priority: Normal | Milestone: Component: ports | Version: 1.9.1 Keywords: | Port: php5 php5-curl php5-calendar php5-dba php5-ftp php5-exif php5-gd php5-gettext php5-gmp php5-iconv php5-imap php5-mbstring php5-mcrypt php5-mssql php5-mysql php5-odbc php5-pcntl php5-posix php5-openssl php5-pspell php5-oracle php5-postgresql php5-snmp php5-soap php5-sqlite php5-tidy php5-sockets php5-wddx php5-zip php5-xmlrpc php5-xsl -------------------------------------+-------------------------------------- Comment(by ryandesign@…): Replying to [comment:4 ryandesign@…]:
Relaxed the version check in r70327 to only match the PHP branch, not the specific version. Reverted this in r70652 since the php5 @5.3.3 + php5-mysql @5.3.2 combo exemplified the problems that can occur.
-- Ticket URL: <http://trac.macports.org/ticket/25789#comment:11> MacPorts <http://www.macports.org/> Ports system for Mac OS
#25789: php5 5.3.3 update --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ Reporter: ryandesign@… | Owner: ryandesign@… Type: update | Status: closed Priority: Normal | Milestone: Component: ports | Version: 1.9.1 Resolution: fixed | Keywords: Port: php5 php5-curl php5-calendar php5-dba php5-ftp php5-exif php5-gd php5-gettext php5-gmp php5-iconv php5-imap php5-mbstring php5-mcrypt php5-mssql php5-mysql php5-odbc php5-pcntl php5-posix php5-openssl php5-pspell php5-oracle php5-postgresql php5-snmp php5-soap php5-sqlite php5-tidy php5-sockets php5-wddx php5-zip php5-xmlrpc php5-xsl | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ Changes (by ryandesign@…): * status: new => closed * resolution: => fixed Comment: Replying to [comment:10 ryandesign@…]:
Upstream has fixed the [http://bugs.php.net/bug.php?id=52413 problem building mysqli with external mysql libraries] but not the [http://bugs.php.net/bug.php?id=52417 problem building mysqli with mysqlnd]. The mysqlnd problem is now fixed too. Applied upstream's patch to php5 in r70653 and reverted the removal of mysqlnd from php5-mysql in r70654.
-- Ticket URL: <http://trac.macports.org/ticket/25789#comment:12> MacPorts <http://www.macports.org/> Ports system for Mac OS
participants (1)
-
MacPorts