[php-maint] Bug#812788: php5: php security update breaks php-net-ldap2

[michael-dev at fami-braun.de]

Package: php5-common
Version: 5.6.17+dfsg-0+deb8u1
Severity: normal

Dear Maintainer,

   * What led up to the situation?

unattended upgrades upgraded php5 from 5.6.14+dfsg-0+deb8u1 to 5.6.17+dfsg-0+deb8u1 in jessie automatically.
php-net-ldap2 is version 2.0.12-1 from debian stable.

   * What exactly did you do (or not do) that was effective (or
     ineffective)?

Visiting a php based website that required Net::LDAP2.

   * What was the outcome of this action?

An empty website with PHP error:

PHP message: PHP Fatal error:  Access level to Net_LDAP2_RootDSE::__construct() must be public (as in class PEAR) in /usr/share/php/Net/LDAP2/RootDSE.php on line 0

   * What outcome did you expect instead?

I did not expect php5 stable updates to break a debian stable package.

Regards,
 M. Braun

-- Package-specific info:
==== Additional PHP 5 information ====

++++ PHP 5 SAPI (php5query -S): ++++
fpm
cli
cgi

++++ PHP 5 Extensions (php5query -M -v): ++++
memcached (Enabled for fpm by local administrator)
memcached (Enabled for cli by local administrator)
memcached (Enabled for cgi by local administrator)
json (Enabled for fpm by maintainer script)
json (Enabled for cli by maintainer script)
json (Enabled for cgi by maintainer script)
curl (Enabled for fpm by maintainer script)
curl (Enabled for cli by maintainer script)
curl (Enabled for cgi by maintainer script)
mcrypt (Enabled for fpm by maintainer script)
mcrypt (Enabled for cli by maintainer script)
mcrypt (Enabled for cgi by maintainer script)
svn (Enabled for fpm by maintainer script)
svn (Enabled for cli by maintainer script)
svn (Enabled for cgi by maintainer script)
pdo_pgsql (Enabled for fpm by maintainer script)
pdo_pgsql (Enabled for cli by maintainer script)
pdo_pgsql (Enabled for cgi by maintainer script)
opcache (Enabled for fpm by maintainer script)
opcache (Enabled for cli by maintainer script)
opcache (Enabled for cgi by maintainer script)
readline (Enabled for fpm by maintainer script)
readline (Enabled for cli by maintainer script)
readline (Enabled for cgi by maintainer script)
pgsql (Enabled for fpm by maintainer script)
pgsql (Enabled for cli by maintainer script)
pgsql (Enabled for cgi by maintainer script)
pdo (Enabled for fpm by maintainer script)
pdo (Enabled for cli by maintainer script)
pdo (Enabled for cgi by maintainer script)
tidy (Enabled for fpm by maintainer script)
tidy (Enabled for cli by maintainer script)
tidy (Enabled for cgi by maintainer script)
xdebug (Enabled for fpm by maintainer script)
xdebug (Enabled for cli by maintainer script)
xdebug (Enabled for cgi by maintainer script)
gd (Enabled for fpm by maintainer script)
gd (Enabled for cli by maintainer script)
gd (Enabled for cgi by maintainer script)
xmlrpc (Enabled for fpm by maintainer script)
xmlrpc (Enabled for cli by maintainer script)
xmlrpc (Enabled for cgi by maintainer script)
pdo_mysql (Enabled for fpm by maintainer script)
pdo_mysql (Enabled for cli by maintainer script)
pdo_mysql (Enabled for cgi by maintainer script)
imagick (Enabled for fpm by maintainer script)
imagick (Enabled for cli by maintainer script)
imagick (Enabled for cgi by maintainer script)
intl (Enabled for fpm by maintainer script)
intl (Enabled for cli by maintainer script)
intl (Enabled for cgi by maintainer script)
mysqli (Enabled for fpm by maintainer script)
mysqli (Enabled for cli by maintainer script)
mysqli (Enabled for cgi by maintainer script)
redis (Enabled for fpm by local administrator)
redis (Enabled for cli by local administrator)
redis (Enabled for cgi by local administrator)
apcu (Enabled for fpm by maintainer script)
apcu (Enabled for cli by maintainer script)
apcu (Enabled for cgi by maintainer script)
ldap (Enabled for fpm by maintainer script)
ldap (Enabled for cli by maintainer script)
ldap (Enabled for cgi by maintainer script)
memcache (Enabled for fpm by local administrator)
memcache (Enabled for cli by local administrator)
memcache (Enabled for cgi by local administrator)
mysql (Enabled for fpm by maintainer script)
mysql (Enabled for cli by maintainer script)
mysql (Enabled for cgi by maintainer script)

++++ Configuration files: ++++
**** /etc/php5/mods-available/pdo.ini ****
extension=pdo.so

**** /etc/php5/mods-available/opcache.ini ****
zend_extension=opcache.so


-- System Information:
Debian Release: 8.3
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/1 CPU core)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages php5 depends on:
ii  php5-cgi     5.6.17+dfsg-0+deb8u1
ii  php5-common  5.6.17+dfsg-0+deb8u1
ii  php5-fpm     5.6.17+dfsg-0+deb8u1

php5 recommends no packages.

php5 suggests no packages.

Versions of packages php5-common depends on:
ii  libc6   2.19-18+deb8u2
ii  lsof    4.86+dfsg-1
ii  psmisc  22.21-2
ii  sed     4.2.2-4+b1
ii  ucf     3.0030

Versions of packages php5-common suggests:
ii  php5-apcu [php5-user-cache]  4.0.7-1

-- no debconf information