PHP 5.0.3 is a maintenance release that in addition to non-critical bug fixes address several very serious security issues. All Users of PHP 5 are strongly encouraged to upgrade to one of these releases as soon as possible.

There is a parallel thread for 4.3.10 updates on this forum.

Installation is with RPM. Please let me know if there are any questions:

Red Hat Enterprise Linux 3

php-5.0.3-1.0.rhel3.ct.i386.rpm - bbe5caa25008c3321b0144e51c3eb20e
php-debuginfo-5.0.3-1.0.rhel3.ct.i386.rpm - 4d602a554441563c206f68f9f1122841
php-devel-5.0.3-1.0.rhel3.ct.i386.rpm - 2394346ebc1304946cf795a6098fb338
php-imagick-5.0.3-1.0.rhel3.ct.i386.rpm - ccf306b563975ff016ba9b318cc1c809
php-imap-5.0.3-1.0.rhel3.ct.i386.rpm - 4f8e78659d754183b7ab27214d7d7f2e
php-ldap-5.0.3-1.0.rhel3.ct.i386.rpm - f403c8e476be134f8d95fdbaabf3fc8c
php-mbstring-5.0.3-1.0.rhel3.ct.i386.rpm - 2cf7d3834ca5a12a40b257c3bfb3b1ba
php-mcrypt-5.0.3-1.0.rhel3.ct.i386.rpm - 4bf7db3119132e1c8473e55c560dee93
php-mhash-5.0.3-1.0.rhel3.ct.i386.rpm - f863c4964804e15781d76ced88e5797f
php-mysql-5.0.3-1.0.rhel3.ct.i386.rpm - 978d46ce77df9eb160624a2560553012
php-odbc-5.0.3-1.0.rhel3.ct.i386.rpm - 2a988d00f965e316fb8db95a23710f06
php-pgsql-5.0.3-1.0.rhel3.ct.i386.rpm - 302cb865f4c952dcf5f9a9d26f653f03
php-snmp-5.0.3-1.0.rhel3.ct.i386.rpm - 8fd0b0d1fb9a604b36d5d142b6927185
php-xmlrpc-5.0.3-1.0.rhel3.ct.i386.rpm - e0853bd048b1e2db751b640de4997301
php-xsl-5.0.3-1.0.rhel3.ct.i386.rpm - c2dbb3088c9950befcd1ea4306904c0e


Fedora Core 1

php-5.0.3-1.0.rhfc1.ct.i386.rpm - c4cbf782c7c10e0b9f9124b042035087
php-devel-5.0.3-1.0.rhfc1.ct.i386.rpm - 1b84b16349d8e4ba34faf88613a1b72e
php-imagick-5.0.3-1.0.rhfc1.ct.i386.rpm - 80a2091c905e67fd6c109f5e7327f17d
php-imap-5.0.3-1.0.rhfc1.ct.i386.rpm - cb8ba77016036a33c4a37957ffa9df99
php-ldap-5.0.3-1.0.rhfc1.ct.i386.rpm - b1098b05d00bacabe6bb6782aa149ea9
php-mbstring-5.0.3-1.0.rhfc1.ct.i386.rpm - d419728961a504797b74deb5cc13074d
php-mcrypt-5.0.3-1.0.rhfc1.ct.i386.rpm - 9f6dd4ac2192d6afecab921035e229be
php-mhash-5.0.3-1.0.rhfc1.ct.i386.rpm - 560b5da3a3f77280aa406b16c451f1c1
php-mysql-5.0.3-1.0.rhfc1.ct.i386.rpm - 511e0729b0e094399da8da934847b702
php-odbc-5.0.3-1.0.rhfc1.ct.i386.rpm - c559de2590542fb4b95ac6c2a4d3d494
php-pgsql-5.0.3-1.0.rhfc1.ct.i386.rpm - 90b06be49b70b47e51a097315b3ccab4
php-snmp-5.0.3-1.0.rhfc1.ct.i386.rpm - 11b036456f84b7a9a34f2ee9416c520e
php-xmlrpc-5.0.3-1.0.rhfc1.ct.i386.rpm - d5f369c4b7eeae03639a3ca8d27e5a17
php-xsl-5.0.3-1.0.rhfc1.ct.i386.rpm - cf2edb320a1ddf1b49a57ab5d3b0a39b

RHEL3?

dear gpan..

please please provide us rpms for RHEL

THX A LOT MASTER GPAN!

we will refer...

Many thanks for the patched rpm's, the upgrade was flawless as usual.

This will secure many machines with the php vunerability, and i highly recommend this upgrade path.


Regards

I see a few people installing PHP 5.0.x on RHEL 3.

Has anybody had problems with PHP 5 on RHEL 3 and Ensim 4.0.2?

Alex

... some powertools will not run anymore...

but else... everything is fine with 5.0.3 !

Sweet!

Thanks Gpan! Now I'm running PHP 5.0.3 with MySQL 4.1.8. That is awesome and worked like a charm.

Thank you Gpan. Verifying php 5.0.3 with MySQL 4.1.8 too. Great work

Hello!

Curently runign mysql 418 ensim 402 and php 4.3.2

When I run

[root@secure1 php]# rpm -Uvh *
error: Failed dependencies:
libmcrypt is needed by php-mcrypt-5.0.3-1.0.rhel3.ct
libmcrypt.so.4 is needed by php-mcrypt-5.0.3-1.0.rhel3.ct
libmhash is needed by php-mhash-5.0.3-1.0.rhel3.ct
libmhash.so.2 is needed by php-mhash-5.0.3-1.0.rhel3.ct
Ideas?


Thanks!

You should install only already existing rpms, that's upgrading what you already have installed

You can get the needed files for these dependencies from http://sourceforge.net/projects/mcrypt

If you want mcrypt and mhash extensions in PHP, I think Gpan built the PHP mcrypt and mhash extensions using the following rpms:

http://dag.wieers.com/packages/libmcrypt/l....rhel3.i386.rpm
http://dag.wieers.com/packages/libmcrypt/l....rhel3.i386.rpm

http://dag.wieers.com/packages/libmhash/li...l3.dag.i386.rpm
http://dag.wieers.com/packages/libmhash/li...l3.dag.i386.rpm

Install these if you have RHEL3 and it will solve your dependencies with mhash and mcrypt.

Alex

I did what alexf153 suggested...

Did that and upgrade seeemed to work ok. Also I set appliance to maint mode etc

PHP Info Shows 503 But any php5 pages do not show up at all..

Also

This is the error I get when I try to get php version

[root@secure1 php5]# php -v
PHP Warning: PHP Startup: Unable to load dynamic library '/usr/lib/php4/imagick.so' - /usr/lib/php4/imagick.so: cannot open shared object file: No such file or directory in Unknown on line 0
PHP Warning: PHP Startup: Unable to load dynamic library '/usr/lib/php4/imap.so' - /usr/lib/php4/imap.so: cannot open shared object file: No such file or directory in Unknown on line 0
PHP Warning: PHP Startup: Unable to load dynamic library '/usr/lib/php4/ldap.so' - /usr/lib/php4/ldap.so: cannot open shared object file: No such file or directory in Unknown on line 0
PHP Warning: PHP Startup: Unable to load dynamic library '/usr/lib/php4/mbstring.so' - /usr/lib/php4/mbstring.so: cannot open shared object file: No such file or directory in Unknown on line 0
PHP Warning: PHP Startup: Unable to load dynamic library '/usr/lib/php4/mcrypt.so' - /usr/lib/php4/mcrypt.so: cannot open shared object file: No such file or directory in Unknown on line 0
PHP Warning: PHP Startup: Unable to load dynamic library '/usr/lib/php4/mhash.so' - /usr/lib/php4/mhash.so: cannot open shared object file: No such file or directory in Unknown on line 0
PHP Warning: PHP Startup: Unable to load dynamic library '/usr/lib/php4/mysql.so' - /usr/lib/php4/mysql.so: cannot open shared object file: No such file or directory in Unknown on line 0
PHP Warning: PHP Startup: Unable to load dynamic library '/usr/lib/php4/odbc.so' - /usr/lib/php4/odbc.so: cannot open shared object file: No such file or directory in Unknown on line 0
PHP Warning: PHP Startup: Unable to load dynamic library '/usr/lib/php4/pgsql.so' - /usr/lib/php4/pgsql.so: cannot open shared object file: No such file or directory in Unknown on line 0
PHP Warning: PHP Startup: Unable to load dynamic library '/usr/lib/php4/snmp.so' - /usr/lib/php4/snmp.so: cannot open shared object file: No such file or directory in Unknown on line 0
PHP Warning: PHP Startup: Unable to load dynamic library '/usr/lib/php4/xmlrpc.so' - /usr/lib/php4/xmlrpc.so: cannot open shared object file: No such file or directory in Unknown on line 0
PHP Warning: PHP Startup: Unable to load dynamic library '/usr/lib/php4/xsl.so' - /usr/lib/php4/xsl.so: cannot open shared object file: No such file or directory in Unknown on line 0
PHP 5.0.3 (cgi) (built: Dec 26 2004 13:08:06)
Copyright © 1997-2004 The PHP Group


Is there an easy way to downgrade if I cant fix this easily?

Also

I did use all the rpms?

php-5.0.3-1.0.rhel3.ct.i386.rpm
php-debuginfo-5.0.3-1.0.rhel3.ct.i386.rpm
php-devel-5.0.3-1.0.rhel3.ct.i386.rpm
php-imagick-5.0.3-1.0.rhel3.ct.i386.rpm
php-imap-5.0.3-1.0.rhel3.ct.i386.rpm
php-ldap-5.0.3-1.0.rhel3.ct.i386.rpm
php-mbstring-5.0.3-1.0.rhel3.ct.i386.rpm
php-mcrypt-5.0.3-1.0.rhel3.ct.i386.rpm
php-mhash-5.0.3-1.0.rhel3.ct.i386.rpm
php-mysql-5.0.3-1.0.rhel3.ct.i386.rpm
php-odbc-5.0.3-1.0.rhel3.ct.i386.rpm
php-pgsql-5.0.3-1.0.rhel3.ct.i386.rpm
php-snmp-5.0.3-1.0.rhel3.ct.i386.rpm
php-xmlrpc-5.0.3-1.0.rhel3.ct.i386.rpm
php-xsl-5.0.3-1.0.rhel3.ct.i386.rpm

Oh I thought this was interesting too...

[root@secure1 php5]# rpm -e *
error: package php-5.0.3-1.0.rhel3.ct.i386.rpm is not installed
error: package php-debuginfo-5.0.3-1.0.rhel3.ct.i386.rpm is not installed
error: package php-devel-5.0.3-1.0.rhel3.ct.i386.rpm is not installed
error: package php-imagick-5.0.3-1.0.rhel3.ct.i386.rpm is not installed
error: package php-imap-5.0.3-1.0.rhel3.ct.i386.rpm is not installed
error: package php-ldap-5.0.3-1.0.rhel3.ct.i386.rpm is not installed
error: package php-mbstring-5.0.3-1.0.rhel3.ct.i386.rpm is not installed
error: package php-mcrypt-5.0.3-1.0.rhel3.ct.i386.rpm is not installed
error: package php-mhash-5.0.3-1.0.rhel3.ct.i386.rpm is not installed
error: package php-mysql-5.0.3-1.0.rhel3.ct.i386.rpm is not installed
error: package php-odbc-5.0.3-1.0.rhel3.ct.i386.rpm is not installed
error: package php-pgsql-5.0.3-1.0.rhel3.ct.i386.rpm is not installed
error: package php-snmp-5.0.3-1.0.rhel3.ct.i386.rpm is not installed
error: package php-xmlrpc-5.0.3-1.0.rhel3.ct.i386.rpm is not installed
error: package php-xsl-5.0.3-1.0.rhel3.ct.i386.rpm is not installed
[root@secure1 php5]# rpm -Uvh *
Preparing... ########################################### [100%]
package php-debuginfo-5.0.3-1.0.rhel3.ct is already installed
package php-5.0.3-1.0.rhel3.ct is already installed
package php-devel-5.0.3-1.0.rhel3.ct is already installed
package php-imagick-5.0.3-1.0.rhel3.ct is already installed
package php-imap-5.0.3-1.0.rhel3.ct is already installed
package php-ldap-5.0.3-1.0.rhel3.ct is already installed
package php-mbstring-5.0.3-1.0.rhel3.ct is already installed
package php-mcrypt-5.0.3-1.0.rhel3.ct is already installed
package php-mhash-5.0.3-1.0.rhel3.ct is already installed
package php-mysql-5.0.3-1.0.rhel3.ct is already installed
package php-odbc-5.0.3-1.0.rhel3.ct is already installed
package php-pgsql-5.0.3-1.0.rhel3.ct is already installed
package php-snmp-5.0.3-1.0.rhel3.ct is already installed
package php-xmlrpc-5.0.3-1.0.rhel3.ct is already installed
package php-xsl-5.0.3-1.0.rhel3.ct is already installed

Check your PHP 5 ini file and see where it's loading its extensions from. It shouldn't be loading it from the PHP4 extension directory. It should be loading it from /usr/lib/php5/. Again check your /etc/php.ini file and look for the line that has:

extension_dir = /usr/lib/php4

and change it to:

extension_dir = /usr/lib/php5


Alex

Worked like a dream! Thanks

What in particular no longer works (certain powertools, etc) after upgrading to 5.0.3?

I have also noticed that we are getting alot of mysql connect errors on many sites UNLESS the sites are put into 3.1 compatability mode.

Is there a way around this?

Is there any way to change the securty setting in mass? You cant open multple windows in Ensim web panel. If you get the details of many sitesin new windows they load but after you save the first one you get a drawing tool when you try to save the second.

You can change it via EditVirtDomain -c apache,jail=0 site/domain

So it is a confirmed "non feature" then? :-) Not your fault I am sure.

Just wnted ot besure I want the only one since I have been the only one to pot about it.

mysql should work - though I've never tested it in high security personally - you may want to check the extension include path though.

After this upgrade i bet there is no more PHP4. Is there a way to install both?
Maybe i wasn't aware that PHP4 scripts works under PHP5?

Thanks to Gpan for his rpm for php4.3.10 anyway. Worked like a charm under Ensim 3.7 on FC1.

Just wondering why these RPM's are specific to ensim only? Will they work on any system, for example a plain RHEL?

They work fine on RHEL.

without ensim?

Yes. They aren't ensim dependant.

After this upgrade i bet there is no more PHP4. Is there a way to install both?
Maybe i wasn't aware that PHP4 scripts works under PHP5?

Thanks to Gpan for his rpm for php4.3.10 anyway. Worked like a charm under Ensim 3.7 on FC1.

Can you answer this please Gpan ?

excellent, thx

OK I installed the PHP 5.0.3 RPM's and all went well, but when I restarted apache, the following error occured:

Starting httpd: Syntax error on line 6 of /etc/httpd/conf.d/php.conf:
Cannot load /etc/httpd/modules/libphp5.so into server: /etc/httpd/modules/libphp5.so: undefined symbol: xmlBufferCreateStatic

Something to do with one of the xml packages? Am I missing something?

bump!

I wanted to know if anyone else is having the following problem with their RHEL php install?

[root@server root]# php -v
PHP Warning: PHP Startup: Unable to load dynamic library '/usr/lib/php5/imagick.so' - /usr/X11R6/lib/libdps.so.1: undefined symbol: XtMalloc in Unknown on line 0
PHP 5.0.3 (cgi) (built: Dec 26 2004 13:08:06)
Copyright © 1997-2004 The PHP Group
Zend Engine v2.0.3, Copyright © 1998-2004 Zend Technologies
with Zend Extension Manager v1.0.6, Copyright © 2003-2004, by Zend Technologies
with Zend Optimizer v2.5.7, Copyright © 1998-2004, by Zend Technologies



Attached is the packages I have installed on the system so anyhelp would be appreciated at this point. This is not stopping the server from running.

[root@server root]# rpm -qa|grep -i Image
ImageMagick-5.5.6-4



[root@server root]# rpm -qa |grep -i php-
php-pgsql-5.0.3-1.0.rhel3.ct
php-mbstring-5.0.3-1.0.rhel3.ct
php-imap-5.0.3-1.0.rhel3.ct
php-odbc-5.0.3-1.0.rhel3.ct
php-httpd13-4.3.2-8ensim1
php-ldap-5.0.3-1.0.rhel3.ct
php-devel-5.0.3-1.0.rhel3.ct
php-mhash-5.0.3-1.0.rhel3.ct
php-xsl-5.0.3-1.0.rhel3.ct
php-imagick-5.0.3-1.0.rhel3.ct
php-mysql-5.0.3-1.0.rhel3.ct
php-5.0.3-1.0.rhel3.ct
php-mcrypt-5.0.3-1.0.rhel3.ct
php-xmlrpc-5.0.3-1.0.rhel3.ct
webppliance-mod_php-4.0.2-6.rhel
webppliance-mod_php-frontend-4.0.2-6.rhel
php-debuginfo-5.0.3-1.0.rhel3.ct
php-snmp-5.0.3-1.0.rhel3.ct
[root@server root]#

I experience the same error. Haven't been able to figure out why that is.

I tried upgrading from 5.0.2.

so you installed 5.0.2 without any problems?
Anyone else have this problem?

5.0.2 installed without any problems.

so whats changed that causes this error?

Originally posted by joelmoss
OK I installed the PHP 5.0.3 RPM's and all went well, but when I restarted apache, the following error occured:

Starting httpd: Syntax error on line 6 of /etc/httpd/conf.d/php.conf:
Cannot load /etc/httpd/modules/libphp5.so into server: /etc/httpd/modules/libphp5.so: undefined symbol: xmlBufferCreateStatic


I have the same problem. Has anyone fixed this yet?

Do you have libxml rpm's installed?

I haven't installed libxml yet. Where could I get it from?

Thanks,!!

Redhat Enterprise linux with Ensim 4.

Its in the RHEL repository.

rpm -Uvh libxml-1.8.17-8.i386.rpm
Preparing... ########################################### [100%]
package libxml-1.8.17-9.1 (which is newer than libxml-1.8.17- is already installed

Do I need a version newer than 1.8.17-9.1?

Thanks,

Yep -

libxml-1.8.17-9.1
libxml2-2.5.10-7

It appears as if we need to have libxml 2.6.14... installed in order to solve the problem. However, when I try to install I get

rpm -Uvh libxml2-2.6.14-0.2.i386.rpm

error: Failed dependencies:
libxml2 = 2.5.10 is needed by (installed) libxml2-python-2.5.10-5
libxml2 = 2.5.10 is needed by (installed) libxml2-devel-2.5.10-5

You need to upgrade those two also.

Okay... I have apparently satisified all of PHP 5.03 requirements because I can now start the web server and my php pages are working fine. However, now Ensim is busted...

Here is what I have done so far.... I think:
-did rpm -i --force libxml2-2.6.14-0.2.i386.rpm
(because it would not let me upgrade due to dependencey)
-installed python requirements:

rpm -Uvh python2.3-2.3.4-3pydotorg.i386.rpm (required for)...next
rpm -Uvh libxml2-python-2.6.14-2.i386.rpm
rpm -Uvh libxml2-devel-2.6.14-0.2.i386.rpm

then I did a remove on: (not sure if I should have)
-rpm -e libxml2-2.5.10-5
-rpm -i --replacepkgs libxml2-2.6.14-0.2.i386.rpm

When I try to start the webppliance service I get....

service webppliance restart
Traceback (most recent call last):
File "", line 2, in ?
File "virtualhosting/virthost.py", line 52, in ?
File "virtualhosting/modules/__init__.py", line 51, in ?
File "telnet/virthost_actions.py", line 6, in ?
File "virtualhosting/virthost.py", line 52, in ?
File "virtualhosting/modules/__init__.py", line 51, in ?
File "openssl/virthost_actions.py", line 8, in ?
File "apache/virthost_actions.py", line 33, in ?
File "siteinfo/virthost_actions.py", line 35, in ?
File "/home/build/qa/saber/4.0.0/14.rhel/lwp-rhel/arvind14.rhel/WebGui/base/services/vh3/virtualhosting/dbmodules.py", line 12, in ?
File "/home/build/qa/saber/4.0.0/14.rhel/lwp-rhel/arvind14.rhel/WebGui/common/DynamicImport.py", line 33, in loadModule
File "/home/build/qa/saber/4.0.0/14.rhel/lwp-rhel/arvind14.rhel/WebGui/common/DynamicImport.py", line 23, in my_import
File "/home/build/qa/saber/4.0.0/14.rhel/lwp-rhel/arvind14.rhel/WebGui/base/services/vh3/scriptsmgr/db.py", line 4, in ?
File "/home/build/qa/saber/4.0.0/14.rhel/lwp-rhel/arvind14.rhel/WebGui/base/services/vh3/scriptsmgr/deployables_lib.py", line 13, in ?
File "/usr/lib/python2.2/site-packages/libxml2.py", line 1, in ?
ImportError: No module named libxml2mod
Shutting down webppliance: [ OK ]
Starting webppliance: [FAILED]
Traceback (most recent call last):
File "", line 2, in ?
File "virtualhosting/virthost.py", line 52, in ?
File "virtualhosting/modules/__init__.py", line 51, in ?
File "telnet/virthost_actions.py", line 6, in ?
File "virtualhosting/virthost.py", line 52, in ?
File "virtualhosting/modules/__init__.py", line 51, in ?
File "openssl/virthost_actions.py", line 8, in ?
File "apache/virthost_actions.py", line 33, in ?
File "siteinfo/virthost_actions.py", line 35, in ?
File "/home/build/qa/saber/4.0.0/14.rhel/lwp-rhel/arvind14.rhel/WebGui/base/services/vh3/virtualhosting/dbmodules.py", line 12, in ?
File "/home/build/qa/saber/4.0.0/14.rhel/lwp-rhel/arvind14.rhel/WebGui/common/DynamicImport.py", line 33, in loadModule
File "/home/build/qa/saber/4.0.0/14.rhel/lwp-rhel/arvind14.rhel/WebGui/common/DynamicImport.py", line 23, in my_import
File "/home/build/qa/saber/4.0.0/14.rhel/lwp-rhel/arvind14.rhel/WebGui/base/services/vh3/scriptsmgr/db.py", line 4, in ?
File "/home/build/qa/saber/4.0.0/14.rhel/lwp-rhel/arvind14.rhel/WebGui/base/services/vh3/scriptsmgr/deployables_lib.py", line 13, in ?
File "/usr/lib/python2.2/site-packages/libxml2.py", line 1, in ?
ImportError: No module named libxml2mod

You installed the wrong libxml2 rpm's...
use the ones on ftp.ensim.com/apt/LWP

ftp.ensim.com/apt/LWP

This directory does not exist. Any other suggestions?

Edit: Fixed.

I've got this same problem. After upgrading my servers to php 5.0.3 .. they will not run in high security mode .. I had to set them to 3.1 compat just to get them working. Thats not good.

Is there a fix for this?

Any thoughts on this one gpan?

Hello gpan,

First off, for about the million'th time I presume.. thank you for the PHP rpm's...

Now off to the request is, if you'll ever release an updated RPM to support MySQLi funtions, or how could we go about doing it ?

Has I believe a lot of ppl should be using MySQL 4.1

Thank You
Nuno Souto