Re: [Security-Discuss] Strange problem after latest php update (MDKSA-2005:152)

On Mon, 29 Aug 2005, Gianluca Faieta wrote:

> > I'm currently investigating another issue with the updates, and will look
> > at this too.
> 
> Ok, fine.
> 
> > Are you using:
> >
> > apache1 or apche2?
> > php-cgi or mod_php?
> 
> I'm using apache2 with mod_php. I haven't tried but suspect that 
> php-cgi should
> work without problems (php-cli works).
> 
> I also digged in the error_log and found that apache segfaults when I 
> try to run
> the faulty script (the one with define).
> 
> 
>   [Mon Aug 29 15:41:20 2005] [notice] child pid 11419 exit signal Segmentation
> fault (11)
>   [Mon Aug 29 15:41:22 2005] [notice] child pid 11421 exit signal Segmentation
> fault (11)
>   [Mon Aug 29 15:41:23 2005] [notice] child pid 11346 exit signal Segmentation
> fault (11)
> 
> 
> I think a big part of the problem is in Apache2, as php-cli runs fine; maybe
> Apache2 does not like the system pcre. Or simply, Apache2 needs to be rebuilt
> against the new pcre ... don't know, just thinking aloud.
> 


Same symptom with the other report (apache2/mod_php/squirrelmail)
Works fine with apache1. It does seem to be apache2/system pcre related.

Rolling back to 4.5.100mdk cures both issues. 

I believe I see the issue now. My initial audit showed the apache's to be 
built with the system pcre. Now it appears the last update of apache2 
wasn't, due to bad buildrequires. Rebuilding it now and will verify/push 
this ASAP if it cures the problem.

Thanks for the reports all!

-- 
Stew Benedict
Mandriva
Mandrakesoft becomes Mandriva

____________________________________________________
Want to buy your Pack or Services from Mandriva? 
Go to http://store.mandriva.com
Join the Club : http://www.mandrivaclub.com
____________________________________________________