>Number:         32000
>Category:       pkg
>Synopsis:       PHP 4.1.1 is unstable
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Nov 04 10:30:00 +0000 2005
>Originator:     Martti Kuparinen
>Release:        NetBSD 3.0_BETA
>Organization:
>Environment:
System: NetBSD mail.mydomain.com 3.0_BETA NetBSD 3.0_BETA (MAIL) #0: Tue Oct 18 07:16:14 EEST 2005 root@mail.mydomain.com:/usr/src/sys/arch/i386/compile/MAIL i386
Architecture: i386
Machine: i386
>Description:

I'm having big problems with php-4.4.1:

ROOT www:~> tail -f /var/log/httpd/error.log
[Fri Nov 04 12:07:15 2005] [notice] child pid 17206 exit signal Segmentation fault (11)
[Fri Nov 04 12:07:15 2005] [notice] child pid 17626 exit signal Segmentation fault (11)
[Fri Nov 04 12:07:15 2005] [notice] child pid 14403 exit signal Segmentation fault (11)
[Fri Nov 04 12:07:49 2005] [error] [client 193.234.219.2] PHP Fatal error:  Maximum execution time of 30 seconds exceeded in /usr/pkg/share/squirrelmail/src/read_body.php on line 98, referer: https://www.mydomain.com/squirrelmail/src/right_main.php
    
ROOT www:~> pkg_info | grep -e php -e apache
php-4.4.1nb1        HTML-embedded scripting language
ap-php-4.4.1nb2     Apache (apache2) module for PHP4
apache-2.0.55nb2    Apache HTTP (Web) server, version 2
php-gettext-4.4.1   PHP extension for gettext support
ROOT www:~> 

>How-To-Repeat:

Install PHP 4.1.1 and squirrelmail and try to open any of the mails
in your inbox.

>Fix:

Downgrade PHP to 4.4.0nb2 (but this is vulnerable) according to
audit-packages.

ROOT www:~> pkg_info | grep -e php -e apache
php-4.4.0nb2        HTML-embedded scripting language
ap-php-4.4.0nb2     Apache (apache2) module for PHP4
apache-2.0.55nb2    Apache HTTP (Web) server, version 2
php-gettext-4.4.0   PHP extension for gettext support
ROOT www:~>