Hi, * David Prévot [Mon Jan 19, 2026 at 03:57:46PM +0100]: > Le Sat, Dec 13, 2025 at 08:54:04AM +0100, Sebastiaan Couwenberg a écrit : > > On Fri, 26 Sep 2025 09:03:19 +0200 Moritz Schlarb <[email protected]> > > wrote: > > > Philipp Gühring wrote:
> > > > During the run of apt dist-upgrade, apache suddenly delivered the .php > > > > files uninterpreted in cleartext to the clients, revealing any secrets, > > > > database connection strings, passwords, API keys, ... to the user > > > > requesting the page. > > > > After apt dist-upgrade was complete, apache correctly interpreted the > > > > .php files again > > > please tell us how exactly are you running the PHP interpreter in your > > > apache > > > (mod_php or PHP-FPM or...)? FTR: not being the original bug reporter, but I tried to reproduce the behavior, but wasn't able to do so. This might indeed be configuration/setup specific? > > I've noticed the same with upgrades of systems at $DAYJOB where > > libapache2-mod-php8.4 did not get enabled automatically after the upgrade > > of libapache2-mod-php. > > > > The upgrade procedure for those systems added steps to explicitly enable it: > > > > a2enmod php8.4 > > service apache2 restart > > Thanks for the feedback. The initial bug report also seem to imply that > the issue happens “During the run of apt dist-upgrade”, i.e., during a > major upgrade. Maybe this issue should rather be documented in the > release notes actually, and it may not be specific to PHP either. This feels like a *different* bug report than the original bug report (the one from Philipp)? I tried to reproduce also the issue from Sebastiaan, but couldn't - it seems to be working as expected for the bookworm->trixie upgrade situation (as long as libapache2-mod-php is/was present on bookworm, and not only libapache2-mod-php8.2 was explicitly installed, because then libapache2-mod-php8.4 would be missing on trixie of course). Situation on bookworm: root@f4e23b69b69f:/# ls -la /etc/apache2/mods-enabled/php* lrwxrwxrwx 1 root root 29 Jul 18 20:10 /etc/apache2/mods-enabled/php8.2.conf -> ../mods-available/php8.2.conf lrwxrwxrwx 1 root root 29 Jul 18 20:10 /etc/apache2/mods-enabled/php8.2.load -> ../mods-available/php8.2.load After the upgrade to trixie: root@1f7465dbdcb4:/# ls -la /etc/apache2/mods-enabled/php* lrwxrwxrwx 1 root root 29 Jul 18 20:20 /etc/apache2/mods-enabled/php8.4.conf -> ../mods-available/php8.4.conf lrwxrwxrwx 1 root root 29 Jul 18 20:20 /etc/apache2/mods-enabled/php8.4.load -> ../mods-available/php8.4.load I'm wondering whether any *further* php version might also have been present (like the ones thankfully being provided at https://deb.sury.org/) before the upgrade to trixie? FTR, my STR: podman run --pull=always --rm -i -t -v $(pwd)/:/code:rw debian:bookworm bash apt update ; apt -y install apache2 libapache2-mod-php sed -i 's/bookworm/trixie/g' /etc/apt/sources.list.d/debian.sources apt update apt -y dist-upgrade regards -mika-
signature.asc
Description: PGP signature
