Control: severity -1 wishlist Hmm, I think something like this:
https://github.com/CachyOS/CachyOS-PKGBUILDS/pull/420/files Disable RTLD_DEEPBIND on all PHP SAPIs except for apache by danog · Pull Request #420 · CachyOS/CachyOS-PKGBUILDS github.com makes more sense to me. Anyway, downgrading the severity to wishlist. This is a bug that's not really about what we have in Debian. Ondrej -- Ondřej Surý (He/Him) [email protected] > On 5. 12. 2024, at 12:22, Christian Göttsche <[email protected]> wrote: > > Source: php8.4 > Severity: normal > Tags: patch upstream > > Dear Maintainer, > > running php with a custom system wide memory allocator, like hardened > malloc[1], leads to crashes due to the used dlopen(3) flag > RTLD_DEEPBIND (upstream issue #10670). > Thus I like to propose the patch from #11094, which by default does > not change anything but adds a configuration setting > `zend.dlopen_deepbind` to support custom allocators. > > Best regards, > Christian Göttsche > > > [1]: https://github.com/GrapheneOS/hardened_malloc/ > [2]: https://github.com/php/php-src/issues/10670 > [3]: https://github.com/php/php-src/pull/11094 > <0048-Add-zend.dlopen_deepbind-php.ini-directive.patch>
