Debian Bug report logs - #758185
php5-common: installation fails with . in $PATH

version graph

Package: php5-common; Maintainer for php5-common is (unknown);

Reported by: Zlatko Calusic <zcalusic@bitsync.net>

Date: Fri, 15 Aug 2014 08:33:02 UTC

Severity: normal

Found in version php5/5.6.0~rc4+dfsg-1

Fixed in version php5/5.6.0~rc4+dfsg-2

Done: Ondřej Surý <ondrej@debian.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#758185; Package php5-common. (Fri, 15 Aug 2014 08:33:06 GMT) (full text, mbox, link).


Acknowledgement sent to Zlatko Calusic <zcalusic@bitsync.net>:
New Bug report received and forwarded. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>. (Fri, 15 Aug 2014 08:33:06 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Zlatko Calusic <zcalusic@bitsync.net>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: php5-common: installation fails with . in $PATH
Date: Fri, 15 Aug 2014 10:26:16 +0200
Package: php5-common
Version: 5.6.0~rc4+dfsg-1
Severity: normal

During installation:

Setting up php5-common (5.6.0~rc4+dfsg-1) ...
find: The current directory is included in the PATH environment variable, which is insecure in combination with the -execdir action of find.  Please remove the current directory from your $PATH (that is, remove "." or leading or trailing colons)
dpkg: error processing package php5-common (--configure):
 subprocess installed post-installation script returned error exit status 1

And then all other php5 packages can't be upgraded, either. I'd say
$PATH should be sanitized somewhere, I'm fond of . in $PATH on my
personal desktop.

-- Package-specific info:
==== Additional PHP 5 information ====

++++ PHP 5 SAPI (php5query -S): ++++
cgi
cli
fpm

++++ PHP 5 Extensions (php5query -M -v): ++++
pgsql (Enabled for cgi by maintainer script)
pgsql (Enabled for cli by maintainer script)
pgsql (Enabled for fpm by maintainer script)
pdo_mysql (Enabled for cgi by maintainer script)
pdo_mysql (Enabled for cli by maintainer script)
pdo_mysql (Enabled for fpm by maintainer script)
mysql (Enabled for cgi by maintainer script)
mysql (Enabled for cli by maintainer script)
mysql (Enabled for fpm by maintainer script)
mysqli (Enabled for cgi by maintainer script)
mysqli (Enabled for cli by maintainer script)
mysqli (Enabled for fpm by maintainer script)
pdo_pgsql (Enabled for cgi by maintainer script)
pdo_pgsql (Enabled for cli by maintainer script)
pdo_pgsql (Enabled for fpm by maintainer script)
No module matches xdebug (Disabled for cgi by local administrator)
No module matches xdebug (Disabled for cli by local administrator)
No module matches xdebug (Disabled for fpm by local administrator)
curl (Enabled for cgi by maintainer script)
curl (Enabled for cli by maintainer script)
curl (Enabled for fpm by maintainer script)
gd (Enabled for cgi by maintainer script)
gd (Enabled for cli by maintainer script)
gd (Enabled for fpm by maintainer script)
json (Enabled for cgi by maintainer script)
json (Enabled for cli by maintainer script)
json (Enabled for fpm by maintainer script)
pdo (Enabled for cgi by maintainer script)
pdo (Enabled for cli by maintainer script)
pdo (Enabled for fpm by maintainer script)
opcache (Enabled for cgi by maintainer script)
opcache (Enabled for cli by maintainer script)
opcache (Enabled for fpm by maintainer script)
readline (Enabled for cgi by maintainer script)
readline (Enabled for cli by maintainer script)
readline (Enabled for fpm by maintainer script)

++++ Configuration files: ++++
**** /etc/php5/mods-available/pdo.ini ****
extension=pdo.so

**** /etc/php5/mods-available/opcache.ini ****
zend_extension=opcache.so


-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0+ (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=C, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages php5-common depends on:
ii  libc6   2.19-9
ii  lsof    4.86+dfsg-1
ii  psmisc  22.21-2
ii  sed     4.2.2-4
ii  ucf     3.0030

php5-common recommends no packages.

Versions of packages php5-common suggests:
pn  php5-user-cache  <none>

Versions of packages php5-cli depends on:
ii  libbz2-1.0        1.0.6-7
ii  libc6             2.19-9
ii  libcomerr2        1.42.11-2
ii  libdb5.3          5.3.28-5
ii  libedit2          3.1-20140620-2
ii  libgssapi-krb5-2  1.12.1+dfsg-7
ii  libk5crypto3      1.12.1+dfsg-7
ii  libkrb5-3         1.12.1+dfsg-7
ii  libmagic1         1:5.19-1
ii  libonig2          5.9.5-2
ii  libpcre3          1:8.35-3
ii  libqdbm14         1.8.78-5
ii  libssl1.0.0       1.0.1i-2
ii  libxml2           2.9.1+dfsg1-4
ii  mime-support      3.56
ii  php5-json         1.3.6-1
ii  tzdata            2014f-1
ii  ucf               3.0030
ii  zlib1g            1:1.2.8.dfsg-1

Versions of packages php5-cli recommends:
iu  php5-readline  5.6.0~rc4+dfsg-1

Versions of packages php5-cli suggests:
iu  php-pear  5.6.0~rc4+dfsg-1

Versions of packages php5-cgi depends on:
ii  libbz2-1.0        1.0.6-7
ii  libc6             2.19-9
ii  libcomerr2        1.42.11-2
ii  libdb5.3          5.3.28-5
ii  libgssapi-krb5-2  1.12.1+dfsg-7
ii  libk5crypto3      1.12.1+dfsg-7
ii  libkrb5-3         1.12.1+dfsg-7
ii  libmagic1         1:5.19-1
ii  libonig2          5.9.5-2
ii  libpcre3          1:8.35-3
ii  libqdbm14         1.8.78-5
ii  libssl1.0.0       1.0.1i-2
ii  libxml2           2.9.1+dfsg1-4
ii  mime-support      3.56
iu  php5-cli          5.6.0~rc4+dfsg-1
ii  php5-json         1.3.6-1
ii  tzdata            2014f-1
ii  ucf               3.0030
ii  zlib1g            1:1.2.8.dfsg-1

Versions of packages php5-cgi suggests:
iu  php-pear  5.6.0~rc4+dfsg-1

Versions of packages php5-fpm depends on:
ii  dpkg                 1.17.11
ii  init-system-helpers  1.20
ii  libbz2-1.0           1.0.6-7
ii  libc6                2.19-9
ii  libcomerr2           1.42.11-2
ii  libdb5.3             5.3.28-5
ii  libgssapi-krb5-2     1.12.1+dfsg-7
ii  libk5crypto3         1.12.1+dfsg-7
ii  libkrb5-3            1.12.1+dfsg-7
ii  libmagic1            1:5.19-1
ii  libonig2             5.9.5-2
ii  libpcre3             1:8.35-3
ii  libqdbm14            1.8.78-5
ii  libssl1.0.0          1.0.1i-2
ii  libsystemd-daemon0   208-7
ii  libxml2              2.9.1+dfsg1-4
ii  mime-support         3.56
iu  php5-cli             5.6.0~rc4+dfsg-1
ii  php5-json            1.3.6-1
ii  tzdata               2014f-1
ii  ucf                  3.0030
ii  zlib1g               1:1.2.8.dfsg-1

Versions of packages php5-fpm suggests:
iu  php-pear  5.6.0~rc4+dfsg-1

-- no debconf information




Information forwarded to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#758185; Package php5-common. (Fri, 15 Aug 2014 09:00:05 GMT) (full text, mbox, link).


Acknowledgement sent to Ondřej Surý <ondrej@sury.org>:
Extra info received and forwarded to list. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>. (Fri, 15 Aug 2014 09:00:05 GMT) (full text, mbox, link).


Message #10 received at 758185@bugs.debian.org (full text, mbox, reply):

From: Ondřej Surý <ondrej@sury.org>
To: Zlatko Calusic <zcalusic@bitsync.net>, Debian Bug Tracking System <758185@bugs.debian.org>
Subject: Re: [php-maint] Bug#758185: php5-common: installation fails with . in $PATH
Date: Fri, 15 Aug 2014 10:57:19 +0200
Hi Zlatko,

I will fix that in git, but having "." in $PATH (especially for root
user)
is a very bad bad practice and really should be avoided due security
reasons.

Imagine someone dropping a malware binary in /tmp ...

Ondrej

On Fri, Aug 15, 2014, at 10:26, Zlatko Calusic wrote:
> Package: php5-common
> Version: 5.6.0~rc4+dfsg-1
> Severity: normal
> 
> During installation:
> 
> Setting up php5-common (5.6.0~rc4+dfsg-1) ...
> find: The current directory is included in the PATH environment variable,
> which is insecure in combination with the -execdir action of find. 
> Please remove the current directory from your $PATH (that is, remove "."
> or leading or trailing colons)
> dpkg: error processing package php5-common (--configure):
>  subprocess installed post-installation script returned error exit status
>  1
> 
> And then all other php5 packages can't be upgraded, either. I'd say
> $PATH should be sanitized somewhere, I'm fond of . in $PATH on my
> personal desktop.
> 
> -- Package-specific info:
> ==== Additional PHP 5 information ====
> 
> ++++ PHP 5 SAPI (php5query -S): ++++
> cgi
> cli
> fpm
> 
> ++++ PHP 5 Extensions (php5query -M -v): ++++
> pgsql (Enabled for cgi by maintainer script)
> pgsql (Enabled for cli by maintainer script)
> pgsql (Enabled for fpm by maintainer script)
> pdo_mysql (Enabled for cgi by maintainer script)
> pdo_mysql (Enabled for cli by maintainer script)
> pdo_mysql (Enabled for fpm by maintainer script)
> mysql (Enabled for cgi by maintainer script)
> mysql (Enabled for cli by maintainer script)
> mysql (Enabled for fpm by maintainer script)
> mysqli (Enabled for cgi by maintainer script)
> mysqli (Enabled for cli by maintainer script)
> mysqli (Enabled for fpm by maintainer script)
> pdo_pgsql (Enabled for cgi by maintainer script)
> pdo_pgsql (Enabled for cli by maintainer script)
> pdo_pgsql (Enabled for fpm by maintainer script)
> No module matches xdebug (Disabled for cgi by local administrator)
> No module matches xdebug (Disabled for cli by local administrator)
> No module matches xdebug (Disabled for fpm by local administrator)
> curl (Enabled for cgi by maintainer script)
> curl (Enabled for cli by maintainer script)
> curl (Enabled for fpm by maintainer script)
> gd (Enabled for cgi by maintainer script)
> gd (Enabled for cli by maintainer script)
> gd (Enabled for fpm by maintainer script)
> json (Enabled for cgi by maintainer script)
> json (Enabled for cli by maintainer script)
> json (Enabled for fpm by maintainer script)
> pdo (Enabled for cgi by maintainer script)
> pdo (Enabled for cli by maintainer script)
> pdo (Enabled for fpm by maintainer script)
> opcache (Enabled for cgi by maintainer script)
> opcache (Enabled for cli by maintainer script)
> opcache (Enabled for fpm by maintainer script)
> readline (Enabled for cgi by maintainer script)
> readline (Enabled for cli by maintainer script)
> readline (Enabled for fpm by maintainer script)
> 
> ++++ Configuration files: ++++
> **** /etc/php5/mods-available/pdo.ini ****
> extension=pdo.so
> 
> **** /etc/php5/mods-available/opcache.ini ****
> zend_extension=opcache.so
> 
> 
> -- System Information:
> Debian Release: jessie/sid
>   APT prefers unstable
>   APT policy: (500, 'unstable')
> Architecture: amd64 (x86_64)
> 
> Kernel: Linux 3.16.0+ (SMP w/2 CPU cores; PREEMPT)
> Locale: LANG=C, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/bash
> 
> Versions of packages php5-common depends on:
> ii  libc6   2.19-9
> ii  lsof    4.86+dfsg-1
> ii  psmisc  22.21-2
> ii  sed     4.2.2-4
> ii  ucf     3.0030
> 
> php5-common recommends no packages.
> 
> Versions of packages php5-common suggests:
> pn  php5-user-cache  <none>
> 
> Versions of packages php5-cli depends on:
> ii  libbz2-1.0        1.0.6-7
> ii  libc6             2.19-9
> ii  libcomerr2        1.42.11-2
> ii  libdb5.3          5.3.28-5
> ii  libedit2          3.1-20140620-2
> ii  libgssapi-krb5-2  1.12.1+dfsg-7
> ii  libk5crypto3      1.12.1+dfsg-7
> ii  libkrb5-3         1.12.1+dfsg-7
> ii  libmagic1         1:5.19-1
> ii  libonig2          5.9.5-2
> ii  libpcre3          1:8.35-3
> ii  libqdbm14         1.8.78-5
> ii  libssl1.0.0       1.0.1i-2
> ii  libxml2           2.9.1+dfsg1-4
> ii  mime-support      3.56
> ii  php5-json         1.3.6-1
> ii  tzdata            2014f-1
> ii  ucf               3.0030
> ii  zlib1g            1:1.2.8.dfsg-1
> 
> Versions of packages php5-cli recommends:
> iu  php5-readline  5.6.0~rc4+dfsg-1
> 
> Versions of packages php5-cli suggests:
> iu  php-pear  5.6.0~rc4+dfsg-1
> 
> Versions of packages php5-cgi depends on:
> ii  libbz2-1.0        1.0.6-7
> ii  libc6             2.19-9
> ii  libcomerr2        1.42.11-2
> ii  libdb5.3          5.3.28-5
> ii  libgssapi-krb5-2  1.12.1+dfsg-7
> ii  libk5crypto3      1.12.1+dfsg-7
> ii  libkrb5-3         1.12.1+dfsg-7
> ii  libmagic1         1:5.19-1
> ii  libonig2          5.9.5-2
> ii  libpcre3          1:8.35-3
> ii  libqdbm14         1.8.78-5
> ii  libssl1.0.0       1.0.1i-2
> ii  libxml2           2.9.1+dfsg1-4
> ii  mime-support      3.56
> iu  php5-cli          5.6.0~rc4+dfsg-1
> ii  php5-json         1.3.6-1
> ii  tzdata            2014f-1
> ii  ucf               3.0030
> ii  zlib1g            1:1.2.8.dfsg-1
> 
> Versions of packages php5-cgi suggests:
> iu  php-pear  5.6.0~rc4+dfsg-1
> 
> Versions of packages php5-fpm depends on:
> ii  dpkg                 1.17.11
> ii  init-system-helpers  1.20
> ii  libbz2-1.0           1.0.6-7
> ii  libc6                2.19-9
> ii  libcomerr2           1.42.11-2
> ii  libdb5.3             5.3.28-5
> ii  libgssapi-krb5-2     1.12.1+dfsg-7
> ii  libk5crypto3         1.12.1+dfsg-7
> ii  libkrb5-3            1.12.1+dfsg-7
> ii  libmagic1            1:5.19-1
> ii  libonig2             5.9.5-2
> ii  libpcre3             1:8.35-3
> ii  libqdbm14            1.8.78-5
> ii  libssl1.0.0          1.0.1i-2
> ii  libsystemd-daemon0   208-7
> ii  libxml2              2.9.1+dfsg1-4
> ii  mime-support         3.56
> iu  php5-cli             5.6.0~rc4+dfsg-1
> ii  php5-json            1.3.6-1
> ii  tzdata               2014f-1
> ii  ucf                  3.0030
> ii  zlib1g               1:1.2.8.dfsg-1
> 
> Versions of packages php5-fpm suggests:
> iu  php-pear  5.6.0~rc4+dfsg-1
> 
> -- no debconf information
> 
> _______________________________________________
> pkg-php-maint mailing list
> pkg-php-maint@lists.alioth.debian.org
> http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-php-maint


-- 
Ondřej Surý <ondrej@sury.org>
Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server



Information forwarded to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#758185; Package php5-common. (Fri, 15 Aug 2014 10:51:15 GMT) (full text, mbox, link).


Acknowledgement sent to Zlatko Calusic <zcalusic@bitsync.net>:
Extra info received and forwarded to list. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>. (Fri, 15 Aug 2014 10:51:15 GMT) (full text, mbox, link).


Message #15 received at 758185@bugs.debian.org (full text, mbox, reply):

From: Zlatko Calusic <zcalusic@bitsync.net>
To: Ondřej Surý <ondrej@sury.org>, Debian Bug Tracking System <758185@bugs.debian.org>
Subject: Re: [php-maint] Bug#758185: php5-common: installation fails with . in $PATH
Date: Fri, 15 Aug 2014 12:39:12 +0200
On 15.08.2014 10:57, Ondřej Surý wrote:
> Hi Zlatko,
>
> I will fix that in git, but having "." in $PATH (especially for root
> user)
> is a very bad bad practice and really should be avoided due security
> reasons.
>

No, it's not. It's a bad practice ONLY if some requirements are met, 
which has not been the case here, for a long time.

> Imagine someone dropping a malware binary in /tmp ...

That someone already has a root password, so it's easier for him to use 
it than to drop malware and wait for me to step on it. ;)

The point being of course, dot in the PATH is dangerous ONLY if you are 
on a multiuser machine where there are people with shell access who you 
can't trust. I haven't seen such machine in decades, and of course I'll 
remember to remove the all-dangerous dot from the PATH then. In the 
meantime, my boxes are so much friendlier with the dot included. :)

Thanks for quick response!

-- 
Zlatko




Information forwarded to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#758185; Package php5-common. (Fri, 15 Aug 2014 13:21:09 GMT) (full text, mbox, link).


Acknowledgement sent to Lior Kaplan <kaplan@debian.org>:
Extra info received and forwarded to list. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>. (Fri, 15 Aug 2014 13:21:09 GMT) (full text, mbox, link).


Message #20 received at 758185@bugs.debian.org (full text, mbox, reply):

From: Lior Kaplan <kaplan@debian.org>
To: Zlatko Calusic <zcalusic@bitsync.net>, 758185@bugs.debian.org
Cc: Ondřej Surý <ondrej@sury.org>
Subject: Re: [php-maint] Bug#758185: Bug#758185: php5-common: installation fails with . in $PATH
Date: Fri, 15 Aug 2014 16:19:29 +0300
[Message part 1 (text/plain, inline)]
On Fri, Aug 15, 2014 at 1:39 PM, Zlatko Calusic <zcalusic@bitsync.net>
wrote:

> On 15.08.2014 10:57, Ondřej Surý wrote:
>
>> Hi Zlatko,
>>
>> I will fix that in git, but having "." in $PATH (especially for root
>> user)
>> is a very bad bad practice and really should be avoided due security
>> reasons.
>>
>>
> No, it's not. It's a bad practice ONLY if some requirements are met, which
> has not been the case here, for a long time.
>
>
>  Imagine someone dropping a malware binary in /tmp ...
>>
>
> That someone already has a root password, so it's easier for him to use it
> than to drop malware and wait for me to step on it. ;)
>
> The point being of course, dot in the PATH is dangerous ONLY if you are on
> a multiuser machine where there are people with shell access who you can't
> trust. I haven't seen such machine in decades, and of course I'll remember
> to remove the all-dangerous dot from the PATH then. In the meantime, my
> boxes are so much friendlier with the dot included. :)
>

Shared hosting machines? (without visualization)

We need the default setting to be secured for all users. If someone wants
to make his setting more friendly - he's welcome, but not the default. The
fact the you haven't seen such a settings doesn't tell us much of our
users' machines.

We shouldn't fail the installation because of that, but the warning should
probably still appear.

Kaplan
[Message part 2 (text/html, inline)]

Information forwarded to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#758185; Package php5-common. (Fri, 15 Aug 2014 13:39:09 GMT) (full text, mbox, link).


Acknowledgement sent to Ondřej Surý <ondrej@sury.org>:
Extra info received and forwarded to list. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>. (Fri, 15 Aug 2014 13:39:09 GMT) (full text, mbox, link).


Message #25 received at 758185@bugs.debian.org (full text, mbox, reply):

From: Ondřej Surý <ondrej@sury.org>
To: Zlatko Calusic <zcalusic@bitsync.net>, Debian Bug Tracking System <758185@bugs.debian.org>
Subject: Re: [php-maint] Bug#758185: Bug#758185: php5-common: installation fails with . in $PATH
Date: Fri, 15 Aug 2014 15:35:39 +0200
On Fri, Aug 15, 2014, at 12:39, Zlatko Calusic wrote:
> That someone already has a root password, so it's easier for him to use 
> it than to drop malware and wait for me to step on it. ;)
> 
> The point being of course, dot in the PATH is dangerous ONLY if you are 
> on a multiuser machine where there are people with shell access who you 
> can't trust. I haven't seen such machine in decades, and of course I'll 
> remember to remove the all-dangerous dot from the PATH then. In the 
> meantime, my boxes are so much friendlier with the dot included. :)

Any website running PHP (and it looks like you do run PHP) can drop
a file to /tmp (or any other writeable directory).  But that's your
choice.

O.
-- 
Ondřej Surý <ondrej@sury.org>
Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server



Reply sent to Ondřej Surý <ondrej@debian.org>:
You have taken responsibility. (Mon, 18 Aug 2014 12:21:10 GMT) (full text, mbox, link).


Notification sent to Zlatko Calusic <zcalusic@bitsync.net>:
Bug acknowledged by developer. (Mon, 18 Aug 2014 12:21:10 GMT) (full text, mbox, link).


Message #30 received at 758185-close@bugs.debian.org (full text, mbox, reply):

From: Ondřej Surý <ondrej@debian.org>
To: 758185-close@bugs.debian.org
Subject: Bug#758185: fixed in php5 5.6.0~rc4+dfsg-2
Date: Mon, 18 Aug 2014 12:20:14 +0000
Source: php5
Source-Version: 5.6.0~rc4+dfsg-2

We believe that the bug you reported is fixed in the latest version of
php5, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 758185@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Ondřej Surý <ondrej@debian.org> (supplier of updated php5 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Mon, 18 Aug 2014 12:16:56 +0200
Source: php5
Binary: php5 php5-common libapache2-mod-php5 libapache2-mod-php5filter php5-cgi php5-cli php5-phpdbg php5-fpm libphp5-embed php5-dev php5-dbg php-pear php5-curl php5-enchant php5-gd php5-gmp php5-imap php5-interbase php5-intl php5-ldap php5-mcrypt php5-readline php5-mysql php5-mysqlnd php5-odbc php5-pgsql php5-pspell php5-recode php5-snmp php5-sqlite php5-sybase php5-tidy php5-xmlrpc php5-xsl
Architecture: source all amd64
Version: 5.6.0~rc4+dfsg-2
Distribution: unstable
Urgency: medium
Maintainer: Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 libapache2-mod-php5 - server-side, HTML-embedded scripting language (Apache 2 module)
 libapache2-mod-php5filter - server-side, HTML-embedded scripting language (apache 2 filter mo
 libphp5-embed - HTML-embedded scripting language (Embedded SAPI library)
 php-pear   - PEAR - PHP Extension and Application Repository
 php5       - server-side, HTML-embedded scripting language (metapackage)
 php5-cgi   - server-side, HTML-embedded scripting language (CGI binary)
 php5-cli   - command-line interpreter for the php5 scripting language
 php5-common - Common files for packages built from the php5 source
 php5-curl  - CURL module for php5
 php5-dbg   - Debug symbols for PHP5
 php5-dev   - Files for PHP5 module development
 php5-enchant - Enchant module for php5
 php5-fpm   - server-side, HTML-embedded scripting language (FPM-CGI binary)
 php5-gd    - GD module for php5
 php5-gmp   - GMP module for php5
 php5-imap  - IMAP module for php5
 php5-interbase - interbase/firebird module for php5
 php5-intl  - internationalisation module for php5
 php5-ldap  - LDAP module for php5
 php5-mcrypt - MCrypt module for php5
 php5-mysql - MySQL module for php5
 php5-mysqlnd - MySQL module for php5 (Native Driver)
 php5-odbc  - ODBC module for php5
 php5-pgsql - PostgreSQL module for php5
 php5-phpdbg - server-side, HTML-embedded scripting language (PHPDBG binary)
 php5-pspell - pspell module for php5
 php5-readline - Readline module for php5
 php5-recode - recode module for php5
 php5-snmp  - SNMP module for php5
 php5-sqlite - SQLite module for php5
 php5-sybase - Sybase / MS SQL Server module for php5
 php5-tidy  - tidy module for php5
 php5-xmlrpc - XML-RPC module for php5
 php5-xsl   - XSL module for php5
Closes: 758185
Changes:
 php5 (5.6.0~rc4+dfsg-2) unstable; urgency=medium
 .
   * Sanitize $PATH in php5-common postinst script (Closes: #758185)
   * Update the sessionclean script to only check for SAPI processes
     (Courtesy of Steve Kamerman)
   * Other various minor improvements in the session cleanup script
Checksums-Sha1:
 ec156680f562682e9c1291a0ef55a64e585faf78 5044 php5_5.6.0~rc4+dfsg-2.dsc
 6a51c57ab21129796852d99c8003ee7c6bfa9e73 117376 php5_5.6.0~rc4+dfsg-2.debian.tar.xz
 a2c748771167e87a8e9c89f4df29336f9b10f453 1312 php5_5.6.0~rc4+dfsg-2_all.deb
 3c4b0e83bc7665026984d04f3efdb2482d9054c9 268748 php-pear_5.6.0~rc4+dfsg-2_all.deb
 83576e6b6defd81f237afc93fc09485e016231a3 537088 php5-common_5.6.0~rc4+dfsg-2_amd64.deb
 683af77d38f1ade99f69501ae0518dc12f949153 2204488 libapache2-mod-php5_5.6.0~rc4+dfsg-2_amd64.deb
 672f7a385ff3b81b2b6746feb7cfcda6f457bf5d 2198614 libapache2-mod-php5filter_5.6.0~rc4+dfsg-2_amd64.deb
 bb028fac80e5fa16d37ba91eb52f8999af72d29a 4261784 php5-cgi_5.6.0~rc4+dfsg-2_amd64.deb
 49908e3fd639bddd2938086363fa082905fb932b 2165530 php5-cli_5.6.0~rc4+dfsg-2_amd64.deb
 24b787044fe3891c13e89bdb6f108452be0f9200 2182168 php5-phpdbg_5.6.0~rc4+dfsg-2_amd64.deb
 0b86a63a33d6d531b6b7adc8d3d7fc4123123e20 2184270 php5-fpm_5.6.0~rc4+dfsg-2_amd64.deb
 0f2c01cb34f88f0841c57504014d34e90e60efc1 2199648 libphp5-embed_5.6.0~rc4+dfsg-2_amd64.deb
 d2af1b6df902c8cf3d81ddaa3cc1464765562490 354676 php5-dev_5.6.0~rc4+dfsg-2_amd64.deb
 fca3e7f9605d465fb448ca5beb8091addccec8f5 44887248 php5-dbg_5.6.0~rc4+dfsg-2_amd64.deb
 30e43406c31eda93b7071ecd565ad6ed60a09e72 27706 php5-curl_5.6.0~rc4+dfsg-2_amd64.deb
 9079aa174a314ce21c860ea8cba0011fc1dfa22e 9414 php5-enchant_5.6.0~rc4+dfsg-2_amd64.deb
 ad07c94927e97ffd089eeff6636c5fefa196e492 28780 php5-gd_5.6.0~rc4+dfsg-2_amd64.deb
 c2f8560f6c2dbd98c02c7f640b516cea97c60c91 20058 php5-gmp_5.6.0~rc4+dfsg-2_amd64.deb
 677bfd0e0103dd18f8b0c6a042ea7a9487e54f40 31016 php5-imap_5.6.0~rc4+dfsg-2_amd64.deb
 8a5251fca8923763780b70df82d9aad7bbf3ee9a 42672 php5-interbase_5.6.0~rc4+dfsg-2_amd64.deb
 55220e2d54a0cf2d15b52163afd9e5ec1e5b9e1f 111664 php5-intl_5.6.0~rc4+dfsg-2_amd64.deb
 69dbc207d61b7bdd0a03e944039f476c08ef7d13 21916 php5-ldap_5.6.0~rc4+dfsg-2_amd64.deb
 8c8e98d37f741e0b9e99b6f9173f8c9cafa8a70e 15278 php5-mcrypt_5.6.0~rc4+dfsg-2_amd64.deb
 31a74f749bd4c06fd4cbfcc6dbe67bcb5068ed2e 12536 php5-readline_5.6.0~rc4+dfsg-2_amd64.deb
 b9217839e5e91736a8df1f556a205f7f9b75c659 64944 php5-mysql_5.6.0~rc4+dfsg-2_amd64.deb
 dafef8e3374217255e8781cdcb4e2b96b6b7ded3 141204 php5-mysqlnd_5.6.0~rc4+dfsg-2_amd64.deb
 4dfe675caa4407fb27ef7f03632c09d3117af3d9 31976 php5-odbc_5.6.0~rc4+dfsg-2_amd64.deb
 22f672f1d040e3aed26cdd06710644ac0980c0e3 57060 php5-pgsql_5.6.0~rc4+dfsg-2_amd64.deb
 7140849eeae5f45f99edb6e07539e5374e248c2a 8374 php5-pspell_5.6.0~rc4+dfsg-2_amd64.deb
 6095e1e014911428650a33c6244855fbdefbb5d6 5730 php5-recode_5.6.0~rc4+dfsg-2_amd64.deb
 98636605b7723b1e2020304eaf6e205b4bd13be7 19696 php5-snmp_5.6.0~rc4+dfsg-2_amd64.deb
 e632c6ec566fd00a61d580feee309189f96af6f3 24508 php5-sqlite_5.6.0~rc4+dfsg-2_amd64.deb
 ae2c2042e24556fc6f7452de456f3976dc0e96d1 24470 php5-sybase_5.6.0~rc4+dfsg-2_amd64.deb
 71d9f88819d6155c5718adccd02eb01e7020c273 16880 php5-tidy_5.6.0~rc4+dfsg-2_amd64.deb
 ec7086300abdfdf481448b5344425ee11f13ce2d 35736 php5-xmlrpc_5.6.0~rc4+dfsg-2_amd64.deb
 06dcf6abc7c7103520e0413ac0a7a7b42b82919c 14100 php5-xsl_5.6.0~rc4+dfsg-2_amd64.deb
Checksums-Sha256:
 5c6b6d3e62ecb502c956c211cfb8cb764e81a0f6a404dd4b0be0a3172bca56bc 5044 php5_5.6.0~rc4+dfsg-2.dsc
 083ae42e854a462df8a6e03eb06208b1ae45770d88774b97f8298ac6fec266aa 117376 php5_5.6.0~rc4+dfsg-2.debian.tar.xz
 891757870f50575f60e8220511c30802c34daaecbf1f7e9dea8126190c81cfc1 1312 php5_5.6.0~rc4+dfsg-2_all.deb
 a5f05af1be789678cbd03a1bbb1e3193fb38d49ccafb376f6c6f1e7f4a83190d 268748 php-pear_5.6.0~rc4+dfsg-2_all.deb
 a9d7abf534f97715b1b0d4380345d39e7fc79972ad683cc6c5bd5e40038c3ab6 537088 php5-common_5.6.0~rc4+dfsg-2_amd64.deb
 2d7451022582328bdfc3dd8032c67348bfdf12b2be31595586c783b34a9639c8 2204488 libapache2-mod-php5_5.6.0~rc4+dfsg-2_amd64.deb
 d5de81c8cbc0e903c264d55eef1904be76533e9dca39de1f4cf3c0f8b7498f4f 2198614 libapache2-mod-php5filter_5.6.0~rc4+dfsg-2_amd64.deb
 a7fc7356e8bd3783f97de5ac7aa63890018bb402fdeea0ece74cb6e3c6fbdd42 4261784 php5-cgi_5.6.0~rc4+dfsg-2_amd64.deb
 bfd0ed7e5ea62f91cdb0d694d6ae10cc84fd21d70546b3808140a215ee68bc9c 2165530 php5-cli_5.6.0~rc4+dfsg-2_amd64.deb
 2e5ee9be9b6f991a48c389adaa02b3111222cc6ca0cf826c8617285a62bb3cd8 2182168 php5-phpdbg_5.6.0~rc4+dfsg-2_amd64.deb
 758377e2fd8d982709a2e5a61a1ac2e8e2b631fe7da303712522f3d9a99cb9e4 2184270 php5-fpm_5.6.0~rc4+dfsg-2_amd64.deb
 0b0dbccc02800095a3aad97e87107707846fba8116c17f486fa72d57bd363843 2199648 libphp5-embed_5.6.0~rc4+dfsg-2_amd64.deb
 80ff2b967bf1faa928300de56f7f5874f74e81892a4b4c6c8e58ed1bad6e1645 354676 php5-dev_5.6.0~rc4+dfsg-2_amd64.deb
 a37956b5724c06332f88fb8983af30beae72b28dbe4d14817f5992fd708bfb3a 44887248 php5-dbg_5.6.0~rc4+dfsg-2_amd64.deb
 7b67a2c7c88cf124130ae7a420350b6f61ae5a390fd404113620e62698add644 27706 php5-curl_5.6.0~rc4+dfsg-2_amd64.deb
 a5758f591d0db8f1b6dbee06569197417160e564ee8682b9e84a156098f939d8 9414 php5-enchant_5.6.0~rc4+dfsg-2_amd64.deb
 5256829a421933e2670d54ee77068587b58adddeb69aab607e2a8f4a4f8a4e16 28780 php5-gd_5.6.0~rc4+dfsg-2_amd64.deb
 78de2d35ba4e82a5c946fb2fc381e2b8b0998911ab2967b457501ebeda8c21b5 20058 php5-gmp_5.6.0~rc4+dfsg-2_amd64.deb
 29c3b6965bf774c5c91ec456a6eaf57ef8bcc9d6eb7fe0a4df00f63fa4e2f8e7 31016 php5-imap_5.6.0~rc4+dfsg-2_amd64.deb
 b797f334addec8510f693db48e8d73d70ab7c2ed756df76956fe436c768734bd 42672 php5-interbase_5.6.0~rc4+dfsg-2_amd64.deb
 5821ce791d0ef132b56ac557cb3ae624ae5d07c2a430ac98943127170a6619f1 111664 php5-intl_5.6.0~rc4+dfsg-2_amd64.deb
 e04c3d613a827dd18881e53f05221818d3503f1d50ed36651eea63b944d5ef9c 21916 php5-ldap_5.6.0~rc4+dfsg-2_amd64.deb
 da0639cba0ed3b9fb2681fd9ee07f69fda38364f32813fe0809800c529ac5977 15278 php5-mcrypt_5.6.0~rc4+dfsg-2_amd64.deb
 0e06b20685cf16e89f43c3e72860c9f426757205a6fbf70105248e4317e4afae 12536 php5-readline_5.6.0~rc4+dfsg-2_amd64.deb
 f610e4920a067696f82b16627b2ce53048fee68ba6865b706429cf8e3f410a96 64944 php5-mysql_5.6.0~rc4+dfsg-2_amd64.deb
 4199efd33f9d6944cda1735d5a3c90c558714fd771e8b33d367963b8a3249f5d 141204 php5-mysqlnd_5.6.0~rc4+dfsg-2_amd64.deb
 ae1714e5f561955fc7bd8adb959fae3cf40b39ead75369cbd04d1c1812028969 31976 php5-odbc_5.6.0~rc4+dfsg-2_amd64.deb
 056d2a5183284e8ddab2e951d83672d2449c1f1d2fa80034f5389c8e55d69c94 57060 php5-pgsql_5.6.0~rc4+dfsg-2_amd64.deb
 fc9037f486661758a597ec0b22dcb3a0874a8765851bd9fd30f3b9d95766d958 8374 php5-pspell_5.6.0~rc4+dfsg-2_amd64.deb
 f693a47601d4be72050da9bd7aed270bfa1d8e69543208d9262421534783cbd7 5730 php5-recode_5.6.0~rc4+dfsg-2_amd64.deb
 2197dcfde782da97946c9dc20cf219432b84c1bed35beeb439b78ee538635948 19696 php5-snmp_5.6.0~rc4+dfsg-2_amd64.deb
 28599ea0d4b433bf6a6f078918fc0b3211baf8783d51c885b6a652a2cf560849 24508 php5-sqlite_5.6.0~rc4+dfsg-2_amd64.deb
 128fe2c185030c8043d2d4337450297c0f360258864782f840bc512737bdf7c5 24470 php5-sybase_5.6.0~rc4+dfsg-2_amd64.deb
 83e73c778aa08216d587dfe094b03495635a61c6f852d655553899c7ea2f3ecb 16880 php5-tidy_5.6.0~rc4+dfsg-2_amd64.deb
 baf8b78cd8d6e5273c7e0509066d6115c64b0d5bdd18eabe3892ca8039b917e6 35736 php5-xmlrpc_5.6.0~rc4+dfsg-2_amd64.deb
 86e0e620f2f732b6904bb56f1d2b67e7e316fe795d9e7fd16d3c9603a44b485f 14100 php5-xsl_5.6.0~rc4+dfsg-2_amd64.deb
Files:
 29608236625829377c17d1f0c7e4bd5b 1312 php optional php5_5.6.0~rc4+dfsg-2_all.deb
 43bc263a4159b22d5043e607d17365a5 268748 php optional php-pear_5.6.0~rc4+dfsg-2_all.deb
 fa0e39f5cdaa30734483933483d39d28 537088 php optional php5-common_5.6.0~rc4+dfsg-2_amd64.deb
 37b2c7809dca13b77203c362bde2bbbd 2204488 httpd optional libapache2-mod-php5_5.6.0~rc4+dfsg-2_amd64.deb
 c6590a7a0edd49e9e745285431d453f2 2198614 httpd extra libapache2-mod-php5filter_5.6.0~rc4+dfsg-2_amd64.deb
 ca99beaa6eb5cb07939c27ea41dd45e7 4261784 php optional php5-cgi_5.6.0~rc4+dfsg-2_amd64.deb
 05f148839b7fbc9528c9f6c6c58a5ca6 2165530 php optional php5-cli_5.6.0~rc4+dfsg-2_amd64.deb
 7b4e70ad7cec94f7c7af2dc649bcc5fe 2182168 php optional php5-phpdbg_5.6.0~rc4+dfsg-2_amd64.deb
 da9d4352aa87fed5f761ba09e3a1f6da 2184270 php optional php5-fpm_5.6.0~rc4+dfsg-2_amd64.deb
 4ea368a57d39a5d033141e849e3c25d2 2199648 php optional libphp5-embed_5.6.0~rc4+dfsg-2_amd64.deb
 976918553adc98cfdbcb0fe71b6114dd 354676 php optional php5-dev_5.6.0~rc4+dfsg-2_amd64.deb
 dbf60ae5b7f085598c61a63dfabdcf21 44887248 debug extra php5-dbg_5.6.0~rc4+dfsg-2_amd64.deb
 ae1609c86cc7729c5abf8d5957e7fa32 27706 php optional php5-curl_5.6.0~rc4+dfsg-2_amd64.deb
 0bd95331fdad0c4aa6a8d5a792b30806 9414 php optional php5-enchant_5.6.0~rc4+dfsg-2_amd64.deb
 aabaac04fc2a51f4d75dddd6faf264b3 28780 php optional php5-gd_5.6.0~rc4+dfsg-2_amd64.deb
 a5450700f9ca553c4c46af418761bb79 20058 php optional php5-gmp_5.6.0~rc4+dfsg-2_amd64.deb
 a53089e34e22e069473436d2e96cf6dc 31016 php optional php5-imap_5.6.0~rc4+dfsg-2_amd64.deb
 85352d78376bc977667f852026383581 42672 php optional php5-interbase_5.6.0~rc4+dfsg-2_amd64.deb
 1e3ff968002f2f92e696fa7182517879 111664 php optional php5-intl_5.6.0~rc4+dfsg-2_amd64.deb
 3aba708debbbb02231bff27f7f0482cc 21916 php optional php5-ldap_5.6.0~rc4+dfsg-2_amd64.deb
 45a68fa2e7597c18b6934816b6b86737 15278 php optional php5-mcrypt_5.6.0~rc4+dfsg-2_amd64.deb
 64dd2ba10c099692697814b89f6c9d69 12536 php optional php5-readline_5.6.0~rc4+dfsg-2_amd64.deb
 1ec457e73b38f0567714c56b1287de12 64944 php optional php5-mysql_5.6.0~rc4+dfsg-2_amd64.deb
 df46fa3cd1f60542b43aa2bce7f69fd8 141204 php extra php5-mysqlnd_5.6.0~rc4+dfsg-2_amd64.deb
 3495a1ab32b1a56b1094654fa786804b 31976 php optional php5-odbc_5.6.0~rc4+dfsg-2_amd64.deb
 cfe46bcfae2bd4628f2bca28feb141b3 57060 php optional php5-pgsql_5.6.0~rc4+dfsg-2_amd64.deb
 05d3cf2f7b60e4f2fbcba407edfdd87f 8374 php optional php5-pspell_5.6.0~rc4+dfsg-2_amd64.deb
 077175caddd1a11b4fa2e775fdf57e3d 5730 php optional php5-recode_5.6.0~rc4+dfsg-2_amd64.deb
 f768fb379fe405d45e654c94bc635be9 19696 php optional php5-snmp_5.6.0~rc4+dfsg-2_amd64.deb
 def4daa44b75845fac2dd78bf00626b4 24508 php optional php5-sqlite_5.6.0~rc4+dfsg-2_amd64.deb
 091de6091def85537a9c50e830eb0ed9 24470 php optional php5-sybase_5.6.0~rc4+dfsg-2_amd64.deb
 59febe47055ccf31ee529ade1b0e53c8 16880 php optional php5-tidy_5.6.0~rc4+dfsg-2_amd64.deb
 eea148218c606cde60c690be05c2d026 35736 php optional php5-xmlrpc_5.6.0~rc4+dfsg-2_amd64.deb
 e6831567d8d23d9008300bce109c6244 14100 php optional php5-xsl_5.6.0~rc4+dfsg-2_amd64.deb
 3c94b5aecd57168b92ea290951d132ef 5044 php optional php5_5.6.0~rc4+dfsg-2.dsc
 956494d657cf2c81d50582c0ab012a7b 117376 php optional php5_5.6.0~rc4+dfsg-2.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=HVON
-----END PGP SIGNATURE-----




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Tue, 16 Sep 2014 07:33:45 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Sun Jul 2 01:39:59 2023; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.