[atomic-testing] PHP 5.2.11-3

[scott]

This is a test build with a backport of the Mail() function logging capabilities from 5.3. This includes

* Ability to add a header to messages sent with the mail() function
* Use of mail() function logged to a user defined file.

Functionality is now controlled via ini settings:

;Add X-PHP-Originaiting-Script: that will include uid of the script followed by the filename
mail.add_x_header = Off

; Log all mail() calls including the full path of the script, line #, to address and headers
mail.log =


To Upgrade:

yum --enablerepo=atomic-testing upgrade php

[krho]

Hi scott.

The messages are invalid. It seems that a lot of newlines are added before the X-PHP.. header is added.
Message body starts after the first blank line as you can see there are 2 blank lines, then X-PHP header and then the actual body follows.
However I cannot say if this bug is also present in the original php 5.3.x code.

Code: Select all

..cut..
Message-ID: <7268e6d03f42ea881d7975dea9c4584e@localhost>
X-Sender: n@example.com
User-Agent: xyz
Content-Type: multipart/alternative;
	boundary="=_7bafae61e5e5709c6227dcd03d659f01"


X-PHP-Originating-Script: 48:func.inc
..cut..

Regards,
Miha

[scott]

Thats definitely a problem, what distro/arch are you seeing that on?

[krho]

CentOS 5 i386

[krho]

scott I have another one and this one is as much annoying as the invalid message.

[29-Oct-2009 08:56:33] PHP Warning: mail() [<a href='function.mail'>function.mail</a>]: open_basedir restriction in effect. File(/var/log/php.mail.log) is not within the allowed path(s): (/var/www/roundcube:/tmp:/var/tmp:/var/log/roundcube) in /var/www/roundcube/program/steps/mail/func.inc on line 1373
[29-Oct-2009 08:56:33] PHP Warning: mail(/var/log/php.mail.log) [<a href='function.mail'>function.mail</a>]: failed to open stream: Operation not permitted in /var/www/roundcube/program/steps/mail/func.inc on line 1373

It seems that the open_basedir restriction applies for mail.log file. I believe that this log should be opened just like the error_log file. Where open_basedir restriction doesn't apply.

Regards,
Miha

[scott]

I think I read that this happens in 5.3 as well

[krho]

Scott which version did you backport? 5.3.0 or 5.3.1? In current 5.3.1 there is fix for a security issue in mail logging.

REgards,
Miha

[scott]

5.3.0

[Funboy]

Hi Scott,

I have been having trouble trying to find a missing dependency libt1.so.5 from atomic testing needed by package php-gd-5.2.11-3.el5.art.i386 any ideas how I could fix this?

Setting up Install Process
Package mysql-server-5.0.88-1.el5.art.x86_64 already installed and latest version
Package mysql-server-5.0.88-1.el5.art.i386 already installed and latest version
Package httpd-2.2.3-31.el5.centos.2.x86_64 already installed and latest version
Package php-5.2.11-3.el5.art.x86_64 already installed and latest version
Package php-gd-5.2.11-3.el5.art.x86_64 already installed and latest version
Package php-cli-5.2.11-3.el5.art.x86_64 already installed and latest version
Package php-mysql-5.2.11-3.el5.art.x86_64 already installed and latest version
Package gcc-4.1.2-46.el5_4.1.x86_64 already installed and latest version
Package 1:make-3.81-3.el5.x86_64 already installed and latest version
Package wget-1.11.4-2.el5_4.1.x86_64 already installed and latest version
Resolving Dependencies
--> Running transaction check
---> Package php.i386 0:5.2.11-3.el5.art set to be updated
--> Processing Dependency: libbz2.so.1 for package: php
--> Processing Dependency: libgmp.so.3 for package: php
--> Processing Dependency: libpcre.so.0 for package: php
---> Package php-cli.i386 0:5.2.11-3.el5.art set to be updated
---> Package php-gd.i386 0:5.2.11-3.el5.art set to be updated
--> Processing Dependency: libt1.so.5 for package: php-gd
---> Package php-mysql.i386 0:5.2.11-3.el5.art set to be updated
--> Running transaction check
---> Package bzip2-libs.i386 0:1.0.3-4.el5_2 set to be updated
---> Package gmp.i386 0:4.1.4-10.el5 set to be updated
---> Package pcre.i386 0:6.6-2.el5_1.7 set to be updated
---> Package php-gd.i386 0:5.2.11-3.el5.art set to be updated
--> Processing Dependency: libt1.so.5 for package: php-gd
--> Finished Dependency Resolution
php-gd-5.2.11-3.el5.art.i386 from atomic-testing has depsolving problems
--> Missing Dependency: libt1.so.5 is needed by package php-gd-5.2.11-3.el5.art.i386 (atomic-testing)
Error: Missing Dependency: libt1.so.5 is needed by package php-gd-5.2.11-3.el5.art.i386 (atomic-testing)

[krho]

Hi scott,

it seems that double newline was indeed a bug in PHP. This is now probably fixed in php 5.3.2 RC2.
http://bugs.php.net/bug.php?id=50907

Regards,
Miha