PDA

View Full Version : Failed: Debian Etch - PHP5 - Suhosin patching.


justdave
14th May 2007, 02:38
Anyone have an idea on this?

My PHP version is: PHP Version 5.2.0-8+etch3

When using dpkg-buildpackage I get this:
->119-CVE-2007-1889-MOPB-44.patch:
patching file Zend/zend_alloc.c
Hunk #1 FAILED at 383.
Hunk #2 succeeded at 1156 (offset 70 lines).
Hunk #3 succeeded at 1259 (offset 75 lines).
Hunk #4 succeeded at 1270 (offset 75 lines).
Hunk #5 succeeded at 1291 (offset 75 lines).
Hunk #6 succeeded at 1486 (offset 87 lines).
Hunk #7 succeeded at 1583 (offset 97 lines).
Hunk #8 succeeded at 1592 (offset 97 lines).
Hunk #9 succeeded at 1606 (offset 97 lines).
1 out of 9 hunks FAILED -- saving rejects to file Zend/zend_alloc.c.rej
make: *** [patch-stamp] Error 1

The only thing that jumps out at me in relation to this how to:
http://www.howtoforge.com/suhosin_php_debian_etch_ubuntu

Is that the how to uses PHP Version 5.2.0-8+etch1. Any help is much appreciated. Thanks! :)

falko
14th May 2007, 18:37
Did you use this patch? http://www.hardened-php.net/suhosin/_media/suhosin-patch-5.2.0-0.9.6.2.patch.gz?id=download&cache=cache

justdave
14th May 2007, 20:23
Yes that is the one I used. (same as in the How-To I believe)

Was that not right?

justdave
14th May 2007, 20:24
Oh and happy belated birthday! (seen you in the listings yesterday)

falko
15th May 2007, 15:15
Yes that is the one I used. (same as in the How-To I believe)

Was that not right?
That's the right patch. Seems that 5.2.0-8+etch3 cannot be patched then with this patch... :(

Oh and happy belated birthday! (seen you in the listings yesterday)Thanks a lot! :)

justdave
15th May 2007, 16:21
That's what I was afraid of. I wonder if the Suhosin devs would want to update a patch for etch3? (I'll go ask)


Cheers :)

falko
16th May 2007, 17:17
(I'll go ask)

Please let us know what they answer. :)

justdave
26th May 2007, 02:26
Unfortunately I haven't heard anything back yet. But I have since upgraded with Etch 4 for PHP so any fixes they may have done for Etch 3 might not apply. :(