Hi,
To come back to this thread: THe version that CentOS Testing is providing is a version from 2008:
php-5.2.6-2.el5s2.i386.rpm 16-Sep-2008 01:20 1.2M
http://dev.centos.org/centos/5/testing/i386/
The latest version from Red Hat is: http://ftp.redhat.com/pub/redhat/linux/enterprise/5Server/en/RHWAS/SRPMS/php...
Is it possible the CentOS Testing PHP (and perhaps others) packages aren't up to date and people using the CentOS Testing repo have an outdated and vulnerable PHP version running?
Kind regards,
Michiel
On 01/22/2010 02:32 PM, Michiel van Es wrote:
php-5.2.6-2.el5s2.i386.rpm 16-Sep-2008 01:20 1.2M
http://dev.centos.org/centos/5/testing/i386/RPMS/php-5.2.9-2.el5.centos.i386...
use yum :)
the 5.2.10 rpm was actually queued up to move into the plus repo, this conversation came up earlier today as well. And its worth resolving really.
for now, I'll push the 5.2.10 out into the testing repo though
Karanbir Singh a écrit :
On 01/22/2010 02:32 PM, Michiel van Es wrote:
php-5.2.6-2.el5s2.i386.rpm 16-Sep-2008 01:20 1.2M
http://dev.centos.org/centos/5/testing/i386/RPMS/php-5.2.9-2.el5.centos.i386...
use yum :)
the 5.2.10 rpm was actually queued up to move into the plus repo, this conversation came up earlier today as well. And its worth resolving really.
And what about the php-extras src.rpm ? shoud it be sync with php-5.2.10 and also go in the plus repo ?
for now, I'll push the 5.2.10 out into the testing repo though
On 01/22/2010 03:14 PM, Jean-Marc LIGER wrote:
And what about the php-extras src.rpm ? shoud it be sync with php-5.2.10 and also go in the plus repo ?
Is there a problem with it right now that would need a rebuild to work around ?
Le 22/01/10 16:31, Karanbir Singh a écrit :
On 01/22/2010 03:14 PM, Jean-Marc LIGER wrote:
And what about the php-extras src.rpm ? shoud it be sync with php-5.2.10 and also go in the plus repo ?
Is there a problem with it right now that would need a rebuild to work around ?
It has been built with php-devel 5.1.6 not 5.2.10.
Do you think a rebuild isn't necessary ?
On 01/22/2010 04:52 PM, Jean-Marc LIGER wrote:
It has been built with php-devel 5.1.6 not 5.2.10. Do you think a rebuild isn't necessary ?
I dont really care. I dont use php, or have any interest in there. But if there is a specific issue, then we can look at fixing it. Things that I think or dont think about are harldy relevant to the scope of things going on here.
Also, there is no php-extras in the WAS.
Or, are you considering, and completely failing to communicate, a parallel php-5.2.x stack.
Le 22/01/10 17:59, Karanbir Singh a écrit :
On 01/22/2010 04:52 PM, Jean-Marc LIGER wrote:
It has been built with php-devel 5.1.6 not 5.2.10. Do you think a rebuild isn't necessary ?
I dont really care. I dont use php, or have any interest in there. But if there is a specific issue, then we can look at fixing it. Things that I think or dont think about are harldy relevant to the scope of things going on here.
Also, there is no php-extras in the WAS.
Or, are you considering, and completely failing to communicate, a parallel php-5.2.x stack.
Exactly, there has already been some similar demands on the list about this.
Well communicate is the more difficult thing to do, thanks for having guess my purpose.
On 22/01/10 17:26, Jean-Marc LIGER wrote:
Or, are you considering, and completely failing to communicate, a parallel php-5.2.x stack.
Exactly, there has already been some similar demands on the list about this.
I feel that ends up expanding the scope of what needs doing quite a bit. I know this case came up before as well, and the feeling at the time was that we could make a complete php-stack along with php extras and pecl modules available. However, in the interest of pushing the php-5.2.x package into c5plus, it might be worth getting that done, and then look at expanding the scope of what else and other addons that might be brought in as well.
The other thing is that while a lot of people were asking for this, few people actually offered to help with any maintenance - I would hope that the situation has changed a bit!
Le 25/01/10 20:26, Karanbir Singh a écrit :
On 22/01/10 17:26, Jean-Marc LIGER wrote:
Or, are you considering, and completely failing to communicate, a parallel php-5.2.x stack.
Exactly, there has already been some similar demands on the list about this.
I feel that ends up expanding the scope of what needs doing quite a bit. I know this case came up before as well, and the feeling at the time was that we could make a complete php-stack along with php extras and pecl modules available. However, in the interest of pushing the php-5.2.x package into c5plus, it might be worth getting that done, and then look at expanding the scope of what else and other addons that might be brought in as well.
The other thing is that while a lot of people were asking for this, few people actually offered to help with any maintenance - I would hope that the situation has changed a bit!
I already offered some help for the web stack part, perhaps I also failed to communicate about it, but my help is offered again. So the next question is what should I do to be helpfull ?
JML
On Fri, Jan 22, 2010 at 11:59 AM, Karanbir Singh mail-lists@karan.org wrote:
On 01/22/2010 04:52 PM, Jean-Marc LIGER wrote:
It has been built with php-devel 5.1.6 not 5.2.10. Do you think a rebuild isn't necessary ?
I dont really care. I dont use php, or have any interest in there. But if there is a specific issue, then we can look at fixing it. Things that I think or dont think about are harldy relevant to the scope of things going on here.
Also, there is no php-extras in the WAS.
Or, are you considering, and completely failing to communicate, a parallel php-5.2.x stack.
-- Karanbir Singh London, UK | http://www.karan.org/ | twitter.com/kbsingh ICQ: 2522219 | Yahoo IM: z00dax | Gtalk: z00dax GnuPG Key : http://www.karan.org/publickey.asc _______________________________________________ CentOS-devel mailing list CentOS-devel@centos.org http://lists.centos.org/mailman/listinfo/centos-devel
Using the php-extras 5.1.6 version with php 5.2.10 isn't going to work. It will produce warning messages every time you execute php. php-extras includes mcrypt, which is good to have for phpMyAdmin. The CentOS testing repo has a SRPM for php-extras, which was based off php-extras in the CentOS extras repo. I version bumped this to 5.2.10 and have been running it on my box without issue.
Ryan
Am 22.01.2010 um 17:59 schrieb Karanbir Singh:
On 01/22/2010 04:52 PM, Jean-Marc LIGER wrote:
It has been built with php-devel 5.1.6 not 5.2.10. Do you think a rebuild isn't necessary ?
I dont really care. I dont use php, or have any interest in there. But if there is a specific issue, then we can look at fixing it. Things that I think or dont think about are harldy relevant to the scope of things going on here.
Also, there is no php-extras in the WAS.
Or, are you considering, and completely failing to communicate, a parallel php-5.2.x stack.
JFYI:
[extras-repo] The specific 5.1.6 extras packages are
$ curl -s http://mirror.centos.org/centos-5/5/extras/x86_64/RPMS/ | grep "-5.1" | cut -d" -f8 php-dbase-5.1.6-15.el5.centos.1.x86_64.rpm php-mcrypt-5.1.6-15.el5.centos.1.x86_64.rpm php-mhash-5.1.6-15.el5.centos.1.x86_64.rpm php-mssql-5.1.6-15.el5.centos.1.x86_64.rpm php-readline-5.1.6-15.el5.centos.1.x86_64.rpm php-tidy-5.1.6-15.el5.centos.1.x86_64.rpm
[testing-repo] these packages are currently rebuild against 5.2.9 and provided in testing
$ curl -s http://dev.centos.org/centos/5/testing/x86_64/RPMS/ | grep php | cut -d" -f8 | grep -E "dbase|mcrypt|mhash|mssql|readline|tidy" php-dbase-5.2.9-2.el5.centos.3.x86_64.rpm php-mcrypt-5.2.9-2.el5.centos.3.x86_64.rpm php-mhash-5.2.9-2.el5.centos.3.x86_64.rpm php-mssql-5.2.9-2.el5.centos.3.x86_64.rpm php-readline-5.2.9-2.el5.centos.3.x86_64.rpm php-tidy-5.2.9-2.el5.centos.3.x86_64.rpm
just for consistency a 5.2.10-rebuild should be provided - what do you think?
Regards
PM
Am 22.01.2010 um 20:51 schrieb Paulo Martinez:
JFYI:
[extras-repo] The specific 5.1.6 extras packages are
$ curl -s http://mirror.centos.org/centos-5/5/extras/x86_64/RPMS/ | grep "-5.1" | cut -d" -f8 php-dbase-5.1.6-15.el5.centos.1.x86_64.rpm php-mcrypt-5.1.6-15.el5.centos.1.x86_64.rpm php-mhash-5.1.6-15.el5.centos.1.x86_64.rpm php-mssql-5.1.6-15.el5.centos.1.x86_64.rpm php-readline-5.1.6-15.el5.centos.1.x86_64.rpm php-tidy-5.1.6-15.el5.centos.1.x86_64.rpm
[testing-repo] these packages are currently rebuild against 5.2.9 and provided in testing
$ curl -s http://dev.centos.org/centos/5/testing/x86_64/RPMS/ | grep php | cut -d" -f8 | grep -E "dbase|mcrypt|mhash|mssql|readline|tidy" php-dbase-5.2.9-2.el5.centos.3.x86_64.rpm php-mcrypt-5.2.9-2.el5.centos.3.x86_64.rpm php-mhash-5.2.9-2.el5.centos.3.x86_64.rpm php-mssql-5.2.9-2.el5.centos.3.x86_64.rpm php-readline-5.2.9-2.el5.centos.3.x86_64.rpm php-tidy-5.2.9-2.el5.centos.3.x86_64.rpm
just for consistency a 5.2.10-rebuild should be provided - what do you think?
By the way - i tested this packages and found out that php- readline-5.2.9 didn't get loaded
$ cat /var/log/httpd/error_log
[Fri Jan 22 21:57:48 2010] [notice] caught SIGTERM, shutting down [Fri Jan 22 21:58:06 2010] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec) [Fri Jan 22 21:58:06 2010] [notice] Digest: generating secret for digest authentication ... [Fri Jan 22 21:58:06 2010] [notice] Digest: done PHP Warning: PHP Startup: Unable to load dynamic library '/usr/lib64/ php/modules/readline.so' - /usr/lib64/php/modules/readline.so: undefined symbol: rl_pending_input in Unknown on line 0 [Fri Jan 22 21:58:06 2010] [notice] Apache configured -- resuming normal operations
$ rpm -q php-readline php-readline-5.2.9-2.el5.centos.3
Best Regards
PM
On 01/22/2010 03:41 PM, Karanbir Singh wrote:
On 01/22/2010 02:32 PM, Michiel van Es wrote:
php-5.2.6-2.el5s2.i386.rpm 16-Sep-2008 01:20 1.2M
http://dev.centos.org/centos/5/testing/i386/RPMS/php-5.2.9-2.el5.centos.i386...
use yum :)
I use yum but it says the 5,2.6 version is the one being provided: 7/715 : php-5.2.6-2.el5s2-0.i386
the 5.2.10 rpm was actually queued up to move into the plus repo, this conversation came up earlier today as well. And its worth resolving really.
for now, I'll push the 5.2.10 out into the testing repo though
Thanks :) Then I can keep my systems up to date who are using the Testing repo :)
Regards,
Michiel
On 01/22/2010 03:22 PM, Michiel van Es wrote:
use yum :)
I use yum but it says the 5,2.6 version is the one being provided: 7/715 : php-5.2.6-2.el5s2-0.i386
root@lucifer yum.repos.d]# yum --enablerepo=c5-testing list php-5*.`uname -m` -d0
Available Packages php.x86_64 5.2.9-2.el5.centos c5-testing
something is broken on your side.
On 01/22/2010 04:28 PM, Karanbir Singh wrote:
On 01/22/2010 03:22 PM, Michiel van Es wrote:
use yum :)
I use yum but it says the 5,2.6 version is the one being provided: 7/715 : php-5.2.6-2.el5s2-0.i386
root@lucifer yum.repos.d]# yum --enablerepo=c5-testing list php-5*.`uname -m` -d0
Available Packages php.x86_64 5.2.9-2.el5.centos c5-testing
something is broken on your side.
hmm perhaps yum cache..I see that since todaythe package are just updated and the 5.2.6 is removed..
-
Jean-Marc LIGER -
Karanbir Singh -
Michiel van Es -
Paulo Martinez -
Ryan Wagoner