PHP 4.4.0 Released
[11-Jul-2005] The PHP Development Team would like to announce the immediate release of PHP 4.4.0. This is a maintenance release that addresses a serious memory corruption problem within PHP concerning references. If references were used in a wrong way, PHP would often create memory corruptions which would not always surface and be visible. The increased middle digit was required because the fix that corrected the problem with references changed PHP's internal API. PHP 4.4.0 does not have any new features, and is solely a bugfix release.

** Please wait for upgraded Zend Optimizer release if you use it before upgrading - the current version (2.5.10) does not run with 4.4

RHEL 3 packages:


These packages can also be installed via yum by adding the following to your yum.conf file in /etc

[cheeta]
name=Cheetaweb RPM Library $releasever - Updates
baseurl=http://mirror.cheetaweb.com/redhat/$releasever/$basearch/RPMS.cheeta

php-4.4.0-1.0.rhel3.ct.i386.rpm
php-devel-4.4.0-1.0.rhel3.ct.i386.rpm
php-domxml-4.4.0-1.0.rhel3.ct.i386.rpm
php-imap-4.4.0-1.0.rhel3.ct.i386.rpm
php-ldap-4.4.0-1.0.rhel3.ct.i386.rpm
php-mbstring-4.4.0-1.0.rhel3.ct.i386.rpm
php-mcrypt-4.4.0-1.0.rhel3.ct.i386.rpm
php-mhash-4.4.0-1.0.rhel3.ct.i386.rpm
php-mysql-4.4.0-1.0.rhel3.ct.i386.rpm
php-ncurses-4.4.0-1.0.rhel3.ct.i386.rpm
php-odbc-4.4.0-1.0.rhel3.ct.i386.rpm
php-pear-4.4.0-1.0.rhel3.ct.i386.rpm
php-pgsql-4.4.0-1.0.rhel3.ct.i386.rpm
php-snmp-4.4.0-1.0.rhel3.ct.i386.rpm
php-xmlrpc-4.4.0-1.0.rhel3.ct.i386.rpm
php-xslt-4.4.0-1.0.rhel3.ct.i386.rpm

Fedora Core 1 and 2

These can be installed via yum by adding the following to your yum.conf file.

[cheeta]
name=Cheetaweb RPM Library $releasever - Updates
baseurl=http://mirror.cheetaweb.com/fedora/$releasever/$basearch/RPMS.cheeta


Or, you can download them off http://mirror.cheetaweb.com

needs imagemagick...

[root@###php]# rpm -Uvh *.rpm
error: Failed dependencies:
php = 4.3.11-1.1.rhel3.ct is needed by (installed) php-imagick-4.3.11-1.1.rhel3.ct

that wasn't in your list...

thanks in advance!
--Kevin

I don't package imagick any more - just rpm -e it if you don't use the extension.

Great work Geoffrey.

Thanks for sharing

does it look like you'll have any opportunity to create rpm's for us fedora core folks? or are the same issues likely to obtain as with 4.3.11?

FC2 is posted at http://mirror.cheetaweb.com already, FC1 will come shortly.

oh wow! fantastic! fabulous! wonderful! marvelous! [insert whatever other superlative you want]!


thank you so much for that!

FC1/FC2 packages posted.

a general fyi - there's a zend optimizer version out that support 4.4.0.

http://downloads.zend.com/optimizer/2.5.10...c21-i386.tar.gz

they just haven't updated the website links yet.

Yea as he said. Its alpha though (as noted, 2.5.10a)

I get the following error:



I've looked on RPMFind and can't seem to find a working rpm that has that file in it. Does anyone know where I can download this package?

http://dag.wieers.com/packages

Its also on http://mirror.cheetaweb.com under the dirs.

Thanks gpan. However, now when I try to install that package, I get this error:



Any ideas?

If you go to http://dag.wieers.com/packages/js you'll find those.

Great work Gpan! Thanks a lot. . .

A little note for those who are just getting started here:
You'll want to grab the RPMs you need and put them into a new directory.

*Check which ones you need with:
rpm -qa | grep php-

*Install them with:
rpm -Uvh [insert RPM name or throw a "*" to install all]

*After installing on Ensim, you should run your maintenance to
*get high-security sites updated:

/usr/local/sbin/set_pre_maintenance
/usr/local/sbin/set_maintenance
/usr/local/sbin/set_post_maintenance

gpan, I notice you used 4.0.3+ in the description. Will the RHEL3 rpms work on RHEL4 (Ensim 4.0.4) as well?

I feel stupid asking, but I need to downgrade to 4.3.11 as one customer (large customer) has expression engine 1.2.1 running still, which is incompatible with 4.4.0. They can't upgrade their site for another few days, so I need to downgrade from 4.4.0 to 4.3.11 for the time being.

Bare with me, its been 2 days working on my server for various things so I am tired:

I tried rpm -Uvh *.rpm in a folder with gpan's 4.3.11 rpms. didn't work.


and rpm -e ... the various 4.4.0 rpm's from gpan, didn't work.


This should be easy I know, but I can't see the answer right now. Any one know the solution?

Thanks

Did upgrade, everything works fine but with one warning:

and rpm -e ... the various 4.4.0 rpm's from gpan, didn't work.

rpm -e --nodeps php-pear

Then rpm -Uvh the 4.3.11 packages.

PHP Warning: Unknown(): Unable to load dynamic library
'/usr/lib/php4/xslt.so' - /usr/lib/libsablot.so.0: undefined symbol:
readline in Unknown on line 0

Use the sablotron rpm's on my site, not the ones from DAG, they are broken there.

Thanks gpan, this worked fine. Here is new situation:

Hi

Can I get the src.rpm for rhel3? Your rpms are fine, just that I also patch php with hardened-php.net and Im having troubles creating my own rpm (I get an api version mismatch in every module)...

thanks!
ernesto

Anyone know when the new Zend is going to be released?

I used the a beta version from the site, which is now corrected on the downloads 'I think" but it still has no 4.4.x folder under the Zend directory.

anyone knows where i can find these rpm or which of those rpm do i need to upgrade php to 4.4


webppliance-mod_php-4.0.3-22.rhel.3ES
php-imap-4.3.2-25.ent
php-odbc-4.3.2-25.ent
phpMyAdmin-2.6.0-ensimrhel3ES.4.0.3.1
php-mysql-4.3.2-25.ent
php-ldap-4.3.2-25.ent
webppliance-mod_php-frontend-4.0.3-22.rhel.3ES
php-pgsql-4.3.2-25.ent
php-4.3.2-25.ent

Upgrade - don't uninstall any of those - you'll break ensim.

Hello,

I've downloaded GPAN's Rpms for ES4 and tried to install them on a fresh Ensim 4.0.4/ES4 server. However I run into some failed dependency issues. Since I don't want to bust the Ensim webppliance I would like to ask you if somebody gained experience with PHP 4.4 on ES4 ?

Please let me know - I'd appreciate any help/pointer.

Michael

[root@server tmp]# rpm - Uvh *.rpm
error: Failed dependencies:
libmcrypt is needed by php-mcrypt-4.4.0-1.0.rhel4.ct.i386
libmcrypt.so.4 is needed by php-mcrypt-4.4.0-1.0.rhel4.ct.i386
libmhash is needed by php-mhash-4.4.0-1.0.rhel4.ct.i386
libmhash.so.2 is needed by php-mhash-4.4.0-1.0.rhel4.ct.i386
libjs.so.1 is needed by php-xslt-4.4.0-1.0.rhel4.ct.i386
libsablot.so.0 is needed by php-xslt-4.4.0-1.0.rhel4.ct.i386
sablotron > 1.0 is needed by php-xslt-4.4.0-1.0.rhel4.ct.i386

[root@server tmp]# rpm -Uvh php-4.4.0-1.0.rhel4.ct.i386.rpm
error: Failed dependencies:
php = 4.3.9-3.1 is needed by (installed) php-ldap-4.3.9-3.1.i386
php = 4.3.9-3.1 is needed by (installed) php-pear-4.3.9-3.1.i386
php = 4.3.9-3.1 is needed by (installed) php-imap-4.3.9-3.1.i386
php = 4.3.9-3.1 is needed by (installed) php-mysql-4.3.9-3.1.i386
php = 4.3.9-3.1 is needed by (installed) php-mbstring-4.3.9-3.1.i386
php = 4.3.9-3.1 is needed by (installed) php-pgsql-4.3.9-3.1.i386

If you do a

rpm -qa | grep php

You will see which php packages you currently have installed. Additional packages, such as php-mcrypt have dependencies which you will need to download, or you can just delete that extension package from your dir before running rpm -Uvh *.rpm.

(I would recommend the latter, unless you need mcrypt, mhash, and xslt packages)

Hi gpan,

got it - thanks a lot !!!! The PHP 4.4.0 upgrade on ES4 was successfull. You asked us before to use the sablotron rpm's on your site. Where can they be found - unfortunalety I failed to find them.

Thanks,
Michael !

hello gpan!

i'd first like to say THANKS for all of the patches/updates you release!

secondly: do you plan on releasing a 4.4.1 soon? (due to the recent exploits)

thank you again

Probably later today on some OS's

Any update on release of 4.4.1 for RedHat 3ES?

Thanks gpan
These rpm's did the trick to update the server.

2 questions for you or anyone that can answer.

I just updated mysql to 4.0.26 and then updated php to your 4.4.0 rpms. Needless to say I did not have 1 single error

But there are 2 items that did not get updated.

1. MySQL Client API version is still at version 3.23.58. How to I go about getting that updated. All the threads I search for here at ev1 says to recompile php, but doesn't really show how to do this. Any thoughts on this and a super quick how to?

2. When listing the php versions...I have 1 item that is still on the old 4.3.2 php.
php-httpd13-4.3.2-8ensim1
Any idea what this is used for, if I need it, and if I do is there an update rpm for it? (didn't see any listed on your site)

Running rhel3 and ensim4.

Cheers.

Anyone have any problems with mhash in this php build?

While phpinfo shows mhash as enabled, one of our customers uploaded a test script and mhash simply returns all zero's ...

I tried this same test script on some php 4.3.9 servers and the test script returns all zero's there also...

... any ideas would be really appreciated right now as this customer is desperate to use mhash for some card processing, but wont move until the test script works correctly and returns the correct value.

mhash is quite broken in general - I'm still waiting to see if there's any interest on the PHP / Zend side to actually troubleshoot why extension based mhash segfaults in most versions of PHP lately, including 5.1.1

Any update on 4.4.1 for EL3?

Hi

Sorry but in fact this thread seems to be dead.. I have compiled php 4.4.1 for my servers, the rpm also includes the hardening patch from www.hardened-php.net

here you have the rpm for rhel3 and centos3

Here the rpm for rhel4/centos4

The packages has been tested on my servers, I have several servers using rhel and centos (3 and 4) and they work perfectly. You can use yum to install them or manually install them, just put the following at the end of your /etc/yum.conf (or /etc/yum.repo.d/ecualinux.repo in case you have a rhel4 or centos 4):

The thread is not dead. I just have spent more time on getting 5.1 to work nowdays.

Thanks guys .. I do plan on upgrading to 5 or 5.1 .. whenever it's stable enough with Ensim.

When using your link in yum:

# packages from EcuaLinux
[ecualinux]
name=EcuaLinux RPM Repository for RHEL
baseurl=http://packages.ecualinux.com/rhel/$releasever


I get the following error:

[root@srv02 root]# yum check-update
Gathering header information file(s) from server(s)
Server: Red Hat Linux 3ES - i386 - Base
Server: Cheetaweb RPM Library 3ES - Updates
Server: EcuaLinux RPM Repository for RHEL
retrygrab() failed for:
http://packages.ecualinux.com/rhel/3ES/hea...ers/header.info
Executing failover method
failover: out of servers to try
Error getting file http://packages.ecualinux.com/rhel/3ES/hea...ers/header.info
[Errno 4] IOError: HTTP Error 404: Not Found
[root@srv02 root]#

dumb of me, I forgot to change the owner for that directory. Please try again, it is visible now.

thanks
epe

interesting little thing here:



But when I check yum check-update, this is what I get:

php-ncurses and php-pearl are not packaged separatedly on my rpms, therefore the error.

You could rpm -e php-pearl php-ncurses before trying to yum update

And just in case, please save a copy of php-ncurses and php-pearl rpm's to reinstall them in case something goes wrong.

regards
epe

One more thing, after using the httpd update, I notice something new:



Anyway to fix that OpenNA?

Where are you getting this message? /var/log/httpd ? or while browsing to your site?.

Hum, ok I used the src.rpm from openna to recompile my own httpd server.

I think upgrading httpd is not mandatory to use php-4.4.1, but you did it.. ok no prob.

BTW: I preffer to remove any information related to my OS in Apache, by changing:
/etc/httpd/conf/httpd.conf you could search for:


And change it to:


It will tell apache to only show the product name (apache) and remove any information related to the OS and version (openna, 2.0.54, etc, etc).

Nice you were able to use php-4.4.1, and remember, these rpms were recompiled using hardened-php.net patch, so your php will be somehow hardened against some common problems, but it will also be a little more restrictive in some aspects. It doesn't hurt mostly.

Epe

Anyway to get 4.4.1 without the hardening patch? It messes with one of my SW packages.

How is hphp affecting you? I mean, what kind of errors are you getting?

till now, I have been able to fix any messing and keep using hphp. Usually by disabling or incrementing some variables hphp has. Please check your /etc/php.ini.rpmnew or better, your phpinfo() will help you with some names of the variables hphp uses.

Also a big help is www.hardened-php.net

And yes, sometimes things gets wilder, people love to include URL in the variable names, and that usually fails with hphp.

I can TRY to compile php 4.4.1 without the hardening patch, but to be honest I wont test it, it is, you will use it without a previous testing... and I preffer not to do so... why dont you try to disable some features in hphp in order to get it working with your scripts?

regards
epe

Hmmmmm :confused:

ok, there you should try to force the deletion rpm -e --force --nodeps php-XYZ

But please, be very cautious because once deleted you should immediately upgrade your php to 4.4.1 and run set_pre_maintenance, set_maintenance, set_post_maintenance

I strongly sugges, as a precaution, to get php-pearl and php-ncurses rpm's just in case something goes wrong, you could reinstall them.

Dear ElfinStrider,

when you say "*Check which ones you need", do you mean upgrade only the RPMs available in Gpan's list?

I am wishing to upgrade to PHP5.1 using Gpan's package, and I HAVE THESE currently installed.

php-domxml-4.3.10-1.1.rhel3.ct
php-mhash-4.3.10-1.1.rhel3.ct
php-ldap-4.3.10-1.1.rhel3.ct
php-odbc-4.3.10-1.1.rhel3.ct
php-xslt-4.3.10-1.1.rhel3.ct
php-mysql-4.3.10-1.1.rhel3.ct
php-4.3.10-1.1.rhel3.ct
php-mbstring-4.3.10-1.1.rhel3.ct
php-pgsql-4.3.10-1.1.rhel3.ct
php-debuginfo-4.3.10-1.1.rhel3.ct
php-imagick-4.3.10-1.1.rhel3.ct
php-xmlrpc-4.3.10-1.1.rhel3.ct
php-mcrypt-4.3.10-1.1.rhel3.ct
php-imap-4.3.10-1.1.rhel3.ct
php-snmp-4.3.10-1.1.rhel3.ct
webppliance-mod_php-frontend-4.0.3-22.rhel.3ES
php-devel-4.3.10-1.1.rhel3.ct
webppliance-mod_php-4.0.3-22.rhel.3ES

The RPMs in bold are NOT included with GPAN's package.
More precisely, this is the list that is INSTALLED BUT NOT PRESENT IN NEW GPAN PACKAGE

php-domxml-4.3.10-1.1.rhel3.ct
php-mhash-4.3.10-1.1.rhel3.ct
php-xslt-4.3.10-1.1.rhel3.ct
php-debuginfo-4.3.10-1.1.rhel3.ct
php-imagick-4.3.10-1.1.rhel3.ct
webppliance-mod_php-frontend-4.0.3-22.rhel.3ES
webppliance-mod_php-4.0.3-22.rhel.3ES


The question is: what should I do here to upgrade to PHP 5.1?

1) Should I remove these, then upgrade the rest based on the RPMs provided by Gpan?

php-domxml-4.3.10-1.1.rhel3.ct
php-mhash-4.3.10-1.1.rhel3.ct
php-xslt-4.3.10-1.1.rhel3.ct
php-debuginfo-4.3.10-1.1.rhel3.ct
php-imagick-4.3.10-1.1.rhel3.ct
webppliance-mod_php-frontend-4.0.3-22.rhel.3ES
webppliance-mod_php-4.0.3-22.rhel.3ES

2) or should I upgrade only the RPMs already installed and leave the above untouched?

3) Where can I get the PHP 5.1 rpms that would allow me to upgrade this list to 5.1?

php-domxml-4.3.10-1.1.rhel3.ct
php-mhash-4.3.10-1.1.rhel3.ct
php-xslt-4.3.10-1.1.rhel3.ct
php-debuginfo-4.3.10-1.1.rhel3.ct
php-imagick-4.3.10-1.1.rhel3.ct
webppliance-mod_php-frontend-4.0.3-22.rhel.3ES
webppliance-mod_php-4.0.3-22.rhel.3ES

4) Would the 5.1 RPMs Gpan provided be able to co-exist with these?


Your advice will be welcome. Urgent!

I am on Ensim 4.0.3-22.rhel.3ES

Thanks.

These should be removed. none others.

php-domxml-4.3.10-1.1.rhel3.ct
php-mhash-4.3.10-1.1.rhel3.ct
php-xslt-4.3.10-1.1.rhel3.ct
php-debuginfo-4.3.10-1.1.rhel3.ct
php-imagick-4.3.10-1.1.rhel3.ct