Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 427024 - Stabilise dev-lang/php:5.4 and associated extensions
Summary: Stabilise dev-lang/php:5.4 and associated extensions
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Keywording and Stabilization (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: PHP Bugs
URL:
Whiteboard:
Keywords: STABLEREQ
Depends on: CVE-2012-2688
Blocks: 432994
  Show dependency tree
 
Reported: 2012-07-17 19:12 UTC by Ole Markus With (RETIRED)
Modified: 2013-01-01 18:15 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Ole Markus With (RETIRED) gentoo-dev 2012-07-17 19:12:02 UTC
Preparing the following packages for stabilisation.

PHP
=dev-lang/php-5.4.4 ~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86

And the associated 5.4-compatible extensions:
=dev-php/igbinary-1.1.1-r1 ~amd64 ~x86
=dev-php/pecl-dbx-1.1.2 ~amd64 ~x86
=dev-php/pecl-cairo-0.3.1 ~amd64 ~x86
=dev-php/xdebug-2.2.0 ~amd64 ~x86
=dev-php/pecl-uploadprogress-1.0.3.1 ~amd64 ~x86
=dev-php/pecl-mongo-1.2.9 ~amd64 ~x86
=dev-php/pecl-oauth-1.2.2-r1 ~amd64 ~x86
=dev-php/pecl-http-1.7.4 ~amd64 ~x86
=dev-php/pecl-memcached-2.0.1 ~amd64 ~x86
=dev-php/pecl-yaml-1.1.0 ~amd64 ~x86
=dev-php/pecl-gearman-1.0.2 ~amd64 ~x86
=dev-php/pecl-memcache-3.0.6-r1 ~amd64 ~x86
=dev-php/pecl-ssh2-0.11.3-r1 ~amd64 ~x86
=dev-php/xcache-2.0.0 ~amd64 ~x86
=dev-php/pecl-mailparse-2.1.6 ~amd64 ~x86
=dev-php/pecl-haru-1.0.3 ~amd64 ~x86
=dev-php/pecl-geoip-1.0.8-r1 ~amd64 ~x86
Comment 1 Ole Markus With (RETIRED) gentoo-dev 2012-07-19 18:48:40 UTC
Hi arches,

This version of PHP has not been in the tree for 30 days, but given that PHP comes with security fixes every fourth week or so, we are not likely to have a 30-days-old version without known security issues, so I think this is a better compromise. Difference between 5.4.4 and 5.4.3 is fairly minimal anyway

Could you please stabilise the following packages?
Comment 2 Jeroen Roovers (RETIRED) gentoo-dev 2012-07-20 15:11:01 UTC
(In reply to comment #0)
> And the associated 5.4-compatible extensions:

Some of these are marked for arches other than amd64 and x86. Could you get a complete list so that we don't have to duplicate the work individually?

> =dev-php/igbinary-1.1.1-r1 ~amd64 ~x86
> =dev-php/pecl-dbx-1.1.2 ~amd64 ~x86
> =dev-php/pecl-cairo-0.3.1 ~amd64 ~x86
> =dev-php/xdebug-2.2.0 ~amd64 ~x86
> =dev-php/pecl-uploadprogress-1.0.3.1 ~amd64 ~x86
> =dev-php/pecl-mongo-1.2.9 ~amd64 ~x86
> =dev-php/pecl-oauth-1.2.2-r1 ~amd64 ~x86
> =dev-php/pecl-http-1.7.4 ~amd64 ~x86
> =dev-php/pecl-memcached-2.0.1 ~amd64 ~x86
> =dev-php/pecl-yaml-1.1.0 ~amd64 ~x86
> =dev-php/pecl-gearman-1.0.2 ~amd64 ~x86
> =dev-php/pecl-memcache-3.0.6-r1 ~amd64 ~x86
> =dev-php/pecl-ssh2-0.11.3-r1 ~amd64 ~x86
> =dev-php/xcache-2.0.0 ~amd64 ~x86
> =dev-php/pecl-mailparse-2.1.6 ~amd64 ~x86
> =dev-php/pecl-haru-1.0.3 ~amd64 ~x86
> =dev-php/pecl-geoip-1.0.8-r1 ~amd64 ~x86
Comment 3 Ole Markus With (RETIRED) gentoo-dev 2012-07-20 15:22:39 UTC
Terribly sorry about that. This should be the correct list of arches per package.

=dev-php/igbinary-1.1.1-r1 amd64 x86
=dev-php/pecl-dbx-1.1.2 amd64 ppc ppc64 x86
=dev-php/pecl-cairo-0.3.1 amd64 x86
=dev-php/xdebug-2.2.0 alpha amd64 hppa ia64 ppc ppc64 sparc x86
=dev-php/pecl-uploadprogress-1.0.3.1 amd64 x86
=dev-php/pecl-mongo-1.2.9 amd64 x86
=dev-php/pecl-oauth-1.2.2-r1 amd64 x86
=dev-php/pecl-http-1.7.4 amd64 x86
=dev-php/pecl-memcached-2.0.1 amd64 x86
=dev-php/pecl-yaml-1.1.0 amd64 x86
=dev-php/pecl-gearman-1.0.2 amd64 x86
=dev-php/pecl-memcache-3.0.6-r1 amd64 hppa ppc64 x86
=dev-php/pecl-ssh2-0.11.3-r1 amd64 x86
=dev-php/xcache-2.0.0 amd64 x86
=dev-php/pecl-mailparse-2.1.6 amd64 ppc ppc64 x86
=dev-php/pecl-haru-1.0.3 amd64 x86
=dev-php/pecl-geoip-1.0.8-r1 amd64 x86
Comment 4 Markus Meier gentoo-dev 2012-07-21 15:32:26 UTC
arm/s390/sh have nothing to do here.
Comment 5 Markus Meier gentoo-dev 2012-07-21 15:42:08 UTC
(In reply to comment #4)
> arm/s390/sh have nothing to do here.

except of dev-lang/php itself...
Comment 6 Markus Meier gentoo-dev 2012-08-02 20:43:16 UTC
arm stable
Comment 7 Jeroen Roovers (RETIRED) gentoo-dev 2012-08-03 01:20:36 UTC
(In reply to comment #3)
> =dev-php/xdebug-2.2.0 alpha amd64 hppa ia64 ppc ppc64 sparc x86

=dev-php/xdebug-client-2.2.0

Maybe that one, too?
Comment 8 Agostino Sarubbo gentoo-dev 2012-08-03 11:14:22 UTC
Please stop to stabilize here. 5.4.4 is a vulnerable version
Comment 9 Jeroen Roovers (RETIRED) gentoo-dev 2012-08-03 11:28:55 UTC
(In reply to comment #7)
> (In reply to comment #3)
> > =dev-php/xdebug-2.2.0 alpha amd64 hppa ia64 ppc ppc64 sparc x86
> 
> =dev-php/xdebug-client-2.2.0
> 
> Maybe that one, too?

Oh, there's bug #422057.

(In reply to comment #8)
> Please stop to stabilize here. 5.4.4 is a vulnerable version

Don't expect people to read all comments. Removing CC'd arch teams.
Comment 10 Jeroen Roovers (RETIRED) gentoo-dev 2012-08-03 11:38:56 UTC
ARM is stable now, so there is a security problem with 5.4 on a stable arch now.
Comment 11 Ole Markus With (RETIRED) gentoo-dev 2012-08-04 18:55:20 UTC
For anyone waiting for this. Since 5.4.6 is entering RC, we already have known security issues with 5.4.5, so I will wait for 5.4.6 to become stable before continuing. Since the difference between 5.4.4 and 5.4.6 is strictly bug and security fixes, it should not be an issue to continue a few days after this release.
Comment 12 Ole Markus With (RETIRED) gentoo-dev 2012-08-20 08:06:11 UTC
Hi arches,

Lets give do another stabilisation attempt. This is the revised list of the packages you should stabilise and their respective keywords:


=dev-lang/php-5.4.6 alpha amd64 hppa ia64 ppc ppc64 s390 sh sparc x86

=dev-php/igbinary-1.1.1-r1 amd64 x86
=dev-php/pecl-dbx-1.1.2 amd64 ppc ppc64 x86
=dev-php/pecl-cairo-0.3.1 amd64 x86
=dev-php/xdebug-2.2.0 alpha amd64 hppa ia64 ppc ppc64 sparc x86
=dev-php/pecl-uploadprogress-1.0.3.1 amd64 x86
=dev-php/pecl-mongo-1.2.9 amd64 x86
=dev-php/pecl-oauth-1.2.2-r1 amd64 x86
=dev-php/pecl-http-1.7.4 amd64 x86
=dev-php/pecl-memcached-2.0.1 amd64 x86
=dev-php/pecl-yaml-1.1.0 amd64 x86
=dev-php/pecl-gearman-1.0.2 amd64 x86
=dev-php/pecl-ssh2-0.11.3-r1 amd64 x86
=dev-php/xcache-2.0.0 amd64 x86
=dev-php/pecl-mailparse-2.1.6 amd64 ppc ppc64 x86
=dev-php/pecl-haru-1.0.3 amd64 x86
=dev-php/pecl-geoip-1.0.8-r1 amd64 x86
=dev-php/pecl-crack-0.4-r2 amd64 ppc ppc64 x86


Thanks!
Comment 13 Agostino Sarubbo gentoo-dev 2012-08-20 12:22:54 UTC
dev-php/pecl-gearman/pecl-gearman-1.0.2.ebuild: amd64(hardened/linux/amd64) ['>=sys-cluster/gearmand-0.21']

Please update your list
Comment 14 Ole Markus With (RETIRED) gentoo-dev 2012-08-20 12:31:07 UTC
(In reply to comment #13)
> dev-php/pecl-gearman/pecl-gearman-1.0.2.ebuild: amd64(hardened/linux/amd64)
> ['>=sys-cluster/gearmand-0.21']
> 
> Please update your list

Sorry about that. I'll remove all candidates without any existing stable version for this round. Should things simpler. For the extension, only testing that it compiles against php 5.4 is required.

New list:

=dev-lang/php-5.4.6 alpha amd64 hppa ia64 ppc ppc64 s390 sh sparc x86

=dev-php/xdebug-2.2.0 alpha amd64 hppa ia64 ppc ppc64 sparc x86
=dev-php/pecl-http-1.7.4 amd64 x86
=dev-php/pecl-memcached-2.0.1 amd64 x86
=dev-php/pecl-ssh2-0.11.3-r1 amd64 x86
=dev-php/xcache-2.0.0 amd64 x86
=dev-php/pecl-mailparse-2.1.6 amd64 ppc ppc64 x86
=dev-php/pecl-crack-0.4-r2 amd64 ppc ppc64 x86
Comment 15 Agostino Sarubbo gentoo-dev 2012-08-22 11:29:40 UTC
amd64 stable
Comment 16 Michael Weber (RETIRED) gentoo-dev 2012-08-24 05:01:11 UTC
ppc stable.
Comment 17 Manuel Rüger (RETIRED) gentoo-dev 2012-08-24 13:51:18 UTC
Is it possible to mark virtual/httpd-php-5.4, too? I think that was missing from the list.
Comment 18 Jeroen Roovers (RETIRED) gentoo-dev 2012-08-24 14:21:01 UTC
Stable for HPPA.
Comment 19 Kevin Bonner 2012-09-10 20:00:06 UTC
Is this the correct place to ask for "php5-4" to be added to USE_PHP in php-ext-source-r2 eclass or should I file a new bug for that?

-Kevin
Comment 20 Ole Markus With (RETIRED) gentoo-dev 2012-09-10 20:05:26 UTC
(In reply to comment #19)
> Is this the correct place to ask for "php5-4" to be added to USE_PHP in
> php-ext-source-r2 eclass or should I file a new bug for that?

A new bug would be the correct approach (or ask on IRC). And USE_PHP is an eclass-variable, which is set to php5.3 because all extensions support 5.3. Not all support 5.4, so changing that variable in the eclass would be incorrect. It should be overridden in ebuilds supporting 5.4.
Comment 21 Anthony Basile gentoo-dev 2012-09-28 11:37:51 UTC
(In reply to comment #14)
> (In reply to comment #13)
> > dev-php/pecl-gearman/pecl-gearman-1.0.2.ebuild: amd64(hardened/linux/amd64)
> > ['>=sys-cluster/gearmand-0.21']
> > 
> > Please update your list
> 
> Sorry about that. I'll remove all candidates without any existing stable
> version for this round. Should things simpler. For the extension, only
> testing that it compiles against php 5.4 is required.
> 
> New list:
> 
> =dev-lang/php-5.4.6 alpha amd64 hppa ia64 ppc ppc64 s390 sh sparc x86
> 
> =dev-php/xdebug-2.2.0 alpha amd64 hppa ia64 ppc ppc64 sparc x86
> =dev-php/pecl-http-1.7.4 amd64 x86
> =dev-php/pecl-memcached-2.0.1 amd64 x86
> =dev-php/pecl-ssh2-0.11.3-r1 amd64 x86
> =dev-php/xcache-2.0.0 amd64 x86
> =dev-php/pecl-mailparse-2.1.6 amd64 ppc ppc64 x86
> =dev-php/pecl-crack-0.4-r2 amd64 ppc ppc64 x86


Can you please look at this list again for ppc64, because:

 =dev-php/xdebug-2.2.0
 =dev-php/pecl-mailparse-2.1.6
 =dev-php/pecl-crack-0.4-r2

are pulling in php-5.3 no matter what I do.  eg USE="-php-5.3 php-5.4" etc.
The only one that's fine is dev-php/xdebug-client-2.2.0.

BTW, I already marked php-5.4.6 stable on sept 6.
Comment 22 Markus Meier gentoo-dev 2012-10-21 09:17:14 UTC
x86 stable
Comment 23 Agostino Sarubbo gentoo-dev 2012-12-09 17:16:28 UTC
ppc64 stable
Comment 24 Agostino Sarubbo gentoo-dev 2012-12-18 12:20:20 UTC
ia64 stable
Comment 25 Agostino Sarubbo gentoo-dev 2012-12-30 13:58:53 UTC
sparc stable
Comment 26 Agostino Sarubbo gentoo-dev 2012-12-30 20:24:23 UTC
alpha stable
Comment 27 Raúl Porcel (RETIRED) gentoo-dev 2013-01-01 18:15:20 UTC
s390/sh stable