Bug #7162

Security error during a PHP install

Details

Submitted	2006-03-20 07:47 UTC
From	pear-david at tulloh dot id dot au
Status	Duplicate
Package	PHP_Archive
PHP Version	5_1 CVS-2006-03-20
OS	Debian Linux
Roadmaps	(Not assigned)

Comments

[2006-03-20 07:47 UTC] pear-david at tulloh dot id dot au

Description:
------------
A clean PHP install failed when trying to install Pear due to a PHP_Archive error. Config lines & log provided.

Test script:
---------------
./configure \
'--disable-all' \
'--disable-cgi' \
'--enable-cli' \
'--enable-debug' \
'--with-apxs2=/usr/bin/apxs2' \
'--with-pear' \
'--prefix=/usr'\
'--with-config-file-path=/etc/php5' \
'--enable-session' \
'--enable-libxml' \
'--enable-xml' \
'--enable-spl' \
'--enable-hash' \
'--with-layout=GNU' \
'--with-exec-dir=/usr/lib/php5/libexec' \
'--with-regex=php' \
'--with-libxml-dir=/usr' \
'--with-zlib' \
'--with-zlib-dir=/usr' \
'--with-gettext' \
'--with-pcre-regex' \
'--with-pgsql' \
--without-pgsql

Actual result:
--------------
Installing PHP SAPI module: apache2handler
/usr/share/apache2/build/instdso.sh SH_LIBTOOL='/usr/bin/libtool' libphp5.la /usr/lib/apache2/modules
/usr/bin/libtool --mode=install cp libphp5.la /usr/lib/apache2/modules/
cp .libs/libphp5.so /usr/lib/apache2/modules/libphp5.so
cp .libs/libphp5.lai /usr/lib/apache2/modules/libphp5.la
libtool: install: warning: remember to run `libtool --finish /home/lod/foreign-source/php-src/libs'
chmod 644 /usr/lib/apache2/modules/libphp5.so
[activating module `php5' in /etc/apache2/httpd.conf]
Installing PHP CLI binary: /usr/bin/
Installing PHP CLI man page: /usr/man/man1/
Installing build environment: /usr/lib/php/build/
Installing header files: /usr/include/php/
Installing helper programs: /usr/bin/
program: phpize
program: php-config
Installing man pages: /usr/man/man1/
page: phpize.1
page: php-config.1
Installing PEAR environment: /usr/share/pear/
--02:44:42-- http://pear.php.net/install-pear-nozlib.phar
=> `pear/install-pear-nozlib.phar'
Resolving pear.php.net... 216.92.131.66
Connecting to pear.php.net[216.92.131.66]:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 3,166,860 [text/plain]

100%[============================================================>] 3,166,860 25.69K/s ETA 00:00

02:47:54 (16.24 KB/s) - `pear/install-pear-nozlib.phar' saved [3166860/3166860]

SECURITY ERROR: PHP_Archive::mapPhar can only be called from within the phar that initiates it

[2006-03-20 07:49 UTC] pear-david at tulloh dot id dot au

Duplicate of bug 7110
http://pear.php.net/bugs/bug.php?id=7110