openRuyi-tutorials/buildroot
6
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
63,231 Commits 2 Branches 459 Tags
2022.05-rc2
Commit Graph
324 Commits
Author SHA1 Message Date
Fabrice Fontaine 4f84945cc1 package/postgresql: fix BR2_OPTIMIZE_FAST comment 
Commit e702a05d89 wrongly added a
dependency on !BR2_OPTIMIZE_FAST instead of BR2_OPTIMIZE_FAST

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2022-05-14 23:10:12 +02:00
Bernd Kuhls 15999f3b5c package/php: bump version to 8.0.19 
Changelog: https://www.php.net/ChangeLog-8.php#8.0.19

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2022-05-12 22:01:51 +02:00
Bernd Kuhls 6d97f3e2e6 package/php: bump version to 8.0.18 
Changelog: https://www.php.net/ChangeLog-8.php#8.0.18

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2022-04-28 23:36:11 +02:00
Fabrice Fontaine e702a05d89 package/postgresql: can't be built with BR2_OPTIMIZE_FAST 
postgresql can't be built with BR2_OPTIMIZE_FAST:

configure: error: do not put -ffast-math in CFLAGS

Fixes:
 - http://autobuild.buildroot.org/results/106bb61bcff5d03e44d3e2e9149c76e6705606a5

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
 2022-04-23 17:00:15 +02:00
Bernd Kuhls ff867be030 package/php: bump version to 8.0.17 
Changelog: https://www.php.net/ChangeLog-8.php#8.0.17

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2022-03-20 16:24:41 +01:00
Bernd Kuhls 4c4d289229 package/php: security bump version to 8.0.16 
Changelog: https://www.php.net/ChangeLog-8.php#8.0.16

Fixes CVE-2021-21708.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2022-02-20 16:36:10 +01:00
Bernd Kuhls b784733f9c package/php: bump version to 8.0.15 
Changelog: https://www.php.net/ChangeLog-8.php#8.0.15

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2022-02-04 23:24:33 +01:00
Bernd Kuhls 7a351e9fbe package/php: bump version to 8.0.14 
Changelog: https://www.php.net/ChangeLog-8.php#8.0.14

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2021-12-26 23:29:45 +01:00
Bernd Kuhls 3c91d5f8dd package/php: security bump version to 8.0.13 
Changelog: https://www.php.net/ChangeLog-8.php#8.0.13

Fixes CVE-2021-21707: http://bugs.php.net/79971

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2021-11-21 14:51:32 +01:00
Bernd Kuhls afdd74d2fb package/php:security bump version to 8.0.12 
Changelog:
https://www.php.net/ChangeLog-8.php#8.0.12

Fixes CVE-2021-21703: http://bugs.php.net/81026

For details, see https://www.ambionics.io/blog/php-fpm-local-root

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-10-26 20:43:09 +02:00
Bernd Kuhls 3c74aef445 package/php: security bump version to 8.0.11 
Changelog: https://www.php.net/ChangeLog-8.php#8.0.11

Fixes CVE-2021-21706: https://bugs.php.net/bug.php?id=81420

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-10-07 22:10:37 +02:00
Bernd Kuhls bd20e704ec package/php: security bump version to 8.0.10 
Quoting https://www.php.net/
"This is a security fix release."

Changelog: https://www.php.net/ChangeLog-8.php#8.0.10

CVE-ID were not mentioned in any of the fixed bugs.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-08-31 08:28:53 +02:00
Fabrice Fontaine c1e6b82e8d package/php: drop mcrypt 
mcrypt has been dropped from php since version 7.2.0 and
https://github.com/php/php-src/commit/5a17f632d4c7d936385485a0cb187172f33eb97a

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
 2021-08-05 18:46:19 +02:00
Fabrice Fontaine 17e7863ba9 package/php: opcache needs dynamic library 
opcache needs dynamic library since version 8.0.0 and
https://github.com/php/php-src/commit/9a06876072b9ccb023d4a14426ccb587f10882f3
otherwise the build will fail on:

/tmp/instance-4/output-1/host/opt/ext-toolchain/bin/../lib/gcc/arm-buildroot-linux-uclibcgnueabi/9.3.0/../../../../arm-buildroot-linux-uclibcgnueabi/bin/ld: /tmp/instance-4/output-1/host/bin/../arm-buildroot-linux-uclibcgnueabi/sysroot/usr/lib/libc.a(__uClibc_main.os): in function `__uClibc_fini':
__uClibc_main.c:(.text+0x15c): undefined reference to `__fini_array_start'
/tmp/instance-4/output-1/host/opt/ext-toolchain/bin/../lib/gcc/arm-buildroot-linux-uclibcgnueabi/9.3.0/../../../../arm-buildroot-linux-uclibcgnueabi/bin/ld: __uClibc_main.c:(.text+0x160): undefined reference to `__fini_array_end'

Fixes:
 - http://autobuild.buildroot.org/results/526d2e3108ff2506482d1665bcc3ed083961430f

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
 2021-08-04 22:50:04 +02:00
Bernd Kuhls 1612546960 package/php: bump version to 8.0.9 
Changelog: https://www.php.net/ChangeLog-8.php#8.0.9

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2021-07-30 23:36:58 +02:00
Bernd Kuhls 31c7f2fc4c package/php: security bump version to 8.0.8 
Changelog: https://www.php.net/ChangeLog-8.php#8.0.8

Fixes CVE-2021-21704 & CVE-2021-217045.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2021-07-26 23:11:23 +02:00
Fabrice Fontaine 9d8b1d3977 package/php: needs wchar 
php depends on wchar since bump to version 8.0.7 in commit
469c11c516 and
https://github.com/php/php-src/commit/457380cae7813a4a34faa1f9a49fa121395fe290

Fixes:
 - http://autobuild.buildroot.org/results/751fea989e4c0136d0bbda0f5487d55d387ee5f3

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2021-07-25 15:13:00 +02:00
Fabrice Fontaine 2b2f635733 package/php: requires DES support in openssl 
Enable DES in openssl to fix build failure raised since commit
a83d41867c

Fixes:
 - http://autobuild.buildroot.org/results/c10800fde50b123809557ed50e0a86acb59404a4

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2021-07-17 10:05:55 +02:00
Adam Duskett 469c11c516 package/php: bump version to 8.0.7 
Other changes:

  - Remove BR2_PACKAGE_PHP_EXT_JSON as the json extension is now an
    integral part of PHP and is no longer optional. Due to this, it is
    not added to Config.in.legacy.

  - Move BR2_PACKAGE_PHP_EXT_XMLRPC to Config.in.legacy as the extension has
    been removed. See https://wiki.php.net/rfc/unbundle_xmlprc for an
    explination.

  - Add a new patch that allows for opcache to cross-compile with PHP8.

  - Explicitly disable opcache-jit when opcache is enabled, as the JIT fails
    to cross-compile.

  - --enable-maintainer-zts is now --enable-zts

Signed-off-by: Adam Duskett <aduskett@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2021-07-03 22:01:12 +02:00
Bernd Kuhls f42a500e41 package/php: bump version to 7.4.20 
Changelog: https://www.php.net/ChangeLog-7.php#7.4.20

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-06-24 09:27:53 +02:00
Fabrice Fontaine c1aa0d4b8a package/php: requires MD4, RC4 and RMD160 support in openssl 
Enable MD4, RC4 and RMD160 in openssl to fix build failure raised since
commit a83d41867c

Fixes:
 - http://autobuild.buildroot.org/results/bd884a34e8de8990fc85bf51389ec4d8d3424482
 - http://autobuild.buildroot.org/results/faaa667b72ca7b8621d6b13b1912cd5413767222

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2021-06-13 22:02:51 +02:00
Bernd Kuhls f4d0191689 package/php: bump version to 7.4.19 
Changelog: https://www.php.net/ChangeLog-7.php#7.4.19

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-05-11 22:01:59 +02:00
Bernd Kuhls ac3234acd8 package/php: security bump version to 7.4.18 
Changelog: https://www.php.net/ChangeLog-7.php#7.4.18

Release notes: https://www.php.net/releases/7_4_18.php

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-04-30 14:55:14 +02:00
Bernd Kuhls 92797a8923 package/php: bump version to 7.4.16 
Changelog: https://www.php.net/ChangeLog-7.php#7.4.16

Update license hash due to copyright year bump:
http://git.php.net/?p=php-src.git;a=commitdiff;h=8c04944b66fd4a4fa88e54b65a2391397998c51d

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2021-03-28 22:42:55 +02:00
Bernd Kuhls c0ed274ffa package/php: security bump version to 7.4.15 
Changelog: https://www.php.net/ChangeLog-7.php#7.4.15

Fixes CVE-2021-21702: http://bugs.php.net/80672

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-02-04 22:10:58 +01:00
Fabrice Fontaine 85dc033f24 package/php: add PHP_CPE_ID_VENDOR 
cpe:2.3:a:php:php is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aphp%3Aphp

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2021-01-18 21:49:12 +01:00
Bernd Kuhls 2136d7ca5c package/php: security bump version to 7.4.14 
Fixes CVE-2020-7071: https://bugs.php.net/bug.php?id=77423

Release notes: https://news-web.php.net/php.announce/304
Changelog: https://www.php.net/ChangeLog-7.php#7.4.14

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-01-07 20:32:13 +01:00
Bernd Kuhls fabb1243ab package/php: needs pcre2 
Since 2008 pcre is a hard-dependency of php:
https://github.com/php/php-src/commit/aa64c6727c2d33a647bdbd9769215044f7cf2967

Instead of optionally depending on the pcre2 package and building the
bundled pcre2 code of php in case BR2_PACKAGE_PCRE2 was not selected
we let php depend on pcre2.

While being at it rename the pcre-related configure option due to
upstream commit:
https://github.com/php/php-src/commit/c1a22f3d4e69cb87f8deeed7d03d9434e6901537

Fixes:
http://autobuild.buildroot.net/results/4a5/4a582af6b66c59a61b75a7047d8530202972ebdd/
because the pcre2 package already contains the fix for mips r6.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
[yann.morin.1998@free.fr: keep the JIT option]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2021-01-02 22:07:40 +01:00
Bernd Kuhls 8c38262066 package/php: security bump version to 7.4.13 
Rebased patches.

Changelog: https://www.php.net/ChangeLog-7.php#7.4.13

According to the release notes this is a "security bug fix release":
https://news-web.php.net/php.announce/301

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2020-11-27 17:50:17 +01:00
Bernd Kuhls 69beb4dd98 package/php: security bump version to 7.4.12 
Changelog: https://www.php.net/ChangeLog-7.php#7.4.12

According to the release notes this is a "security bug fix release":
https://news-web.php.net/php.announce/300

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2020-10-31 16:10:21 +01:00
Fabrice Fontaine 51d9617474 package/php: security bump to version 7.4.11 
- Fix CVE-2020-7069: In PHP versions 7.2.x below 7.2.34, 7.3.x below
  7.3.23 and 7.4.x below 7.4.11, when AES-CCM mode is used with
  openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the
  IV is actually used. This can lead to both decreased security and
  incorrect encryption data.
- Fix CVE-2020-7070: In PHP versions 7.2.x below 7.2.34, 7.3.x below
  7.3.23 and 7.4.x below 7.4.11, when PHP is processing incoming HTTP
  cookie values, the cookie names are url-decoded. This may lead to
  cookies with prefixes like __Host confused with cookies that decode to
  such prefix, thus leading to an attacker being able to forge cookie
  which is supposed to be secure. See also CVE-2020-8184 for more
  information.

https://www.php.net/ChangeLog-7.php#7.4.11

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2020-10-04 11:19:51 +02:00
Bernd Kuhls 4fecbce953 package/php: bump version to 7.4.10 
Changelog: https://www.php.net/ChangeLog-7.php#7.4.10

Rebased patches 0002 & 0003.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2020-09-20 15:05:57 +02:00
Fabrice Fontaine de9e0f1f00 package/php: drop BR2_PACKAGE_PHP_EXT_HASH 
hash extension can't be disabled since version 7.4.0 and
https://github.com/php/php-src/commit/bf344425812b0f6156d0a8a54ed7bc38054f7636

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2020-08-23 19:03:20 +02:00
Fabrice Fontaine 6f3e269737 package/php: drop --with-libxml-dir 
--with-libxml-dir has been dropped since version 7.4.0 and
https://github.com/php/php-src/commit/29d1b7fd521af288e9f04d784f59a2d15b494a30

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2020-08-23 19:02:20 +02:00
Fabrice Fontaine 3004d54034 package/php: ffi needs dynamic library 
FFI support in php has been added with commit
e16f05c0f0, it depends on dynamic library
otherwise the build will fail on:

/home/buildroot/autobuild/instance-1/output-1/host/opt/ext-toolchain/bin/../lib/gcc/arm-buildroot-linux-uclibcgnueabi/5.5.0/../../../../arm-buildroot-linux-uclibcgnueabi/bin/ld: ext/ffi/ffi.o: in function `zim_FFI_cdef':
ffi.c:(.text+0xe78): undefined reference to `DL_LOAD'

Fixes:
 - http://autobuild.buildroot.org/results/3380b7b6777d1c5fcb53c855b003466fa3bf2079

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2020-08-23 19:00:58 +02:00
Bernd Kuhls 46ed4ac847 package/php: bump version to 7.4.9 
Changelog of this bugfix release:
https://www.php.net/ChangeLog-7.php#7.4.9

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2020-08-08 23:19:51 +02:00
Tom Marcuzzi e16f05c0f0 package/php: add FFI extension support 
Signed-off-by: Tom Marcuzzi <tom.marcuzzi@orolia.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2020-08-05 23:02:54 +02:00
Bernd Kuhls a6a500bb99 package/php: bump version to 7.4.8 
Quoting https://www.php.net/
"For windows users running an official build, this release contains a
 patched version of libcurl addressing CVE-2020-8159.

For all other consumers of PHP, this is a bug fix release."

Changelog: https://www.php.net/ChangeLog-7.php#7.4.8

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2020-07-11 15:58:00 +02:00
Fabrice Fontaine 23fdcb4cbd package/icu: needs gcc >= 4.9 and host gcc >= 4.9 
icu uses std::max_align_t since version 67-1 and
https://github.com/unicode-org/icu/commit/a3078fb8c89b61c35ccebb04cf6b189bc81093b3

This raises the following build failure with gcc 4.8:

utext.cpp:572:5: error: 'max_align_t' in namespace 'std' does not name a type
     std::max_align_t    extension;
     ^

This build failure is due to GCC bug 56019:
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=56019

Instead of adding BR2_TOOLCHAIN_HAS_GCC_BUG_56019, just bumps gcc
dependency from 4.8 to 4.9

As this issue also affects host-icu, add a host gcc >= 4.9 dependency

Fixes:
 - http://autobuild.buildroot.org/results/6d2658a3c165c99df3eae87b2970e738bd386245
 - http://autobuild.buildroot.org/results/d204f1a528765d1440620a1eed8c29cbb5ec93c3

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2020-06-18 22:14:18 +02:00
Bernd Kuhls 759ed10395 package/php: bump version to 7.4.7 
Changelog: https://www.php.net/ChangeLog-7.php#7.4.7

Contrary to the release notification on the mailinglist
https://news-web.php.net/php.announce/287
which declares this release as "security bug fix release" no CVE IDs
could be found on the bugtracker entries mentioned in the Changelog.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2020-06-14 18:30:32 +02:00
Bernd Kuhls 1dd6d52226 package/php: security bump version to 7.4.6 
Changelog: https://www.php.net/ChangeLog-7.php#7.4.6

Fixes CVE 2019-11048.

Reformatted hashes.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2020-05-15 21:25:46 +02:00
Louis Aussedat 31c5fd8f4b package/php: fix gd extension dependencies and options 
Due to migration to pkg-config in php 7.4, the detection of
library dependencies has been changed.

source from php.net:
--with-gd becomes --enable-gd
--with-png-dir has been removed. libpng is required.
--with-zlib-dir has been removed. zlib is required.
--with-freetype-dir becomes --with-freetype
--with-jpeg-dir becomes --with-jpeg

Signed-off-by: Louis Aussedat <aussedat.louis@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2020-04-18 15:25:23 +02:00
Louis Aussedat ac2b371732 package/php: fix zip support 
since php7.4, --enable-zip becomes --with-zip due to
migration to pkg-config.

Signed-off-by: Louis Aussedat <aussedat.louis@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2020-04-18 15:11:16 +02:00
Bernd Kuhls db52b57c3d package/php: security bump version to 7.4.5 
Changelog: https://www.php.net/ChangeLog-7.php#7.4.5

Fixes CVE-2020-7067.

Removed patch applied upstream.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2020-04-17 22:05:53 +02:00
Peter Seiderer 16e0bf6b9f package/php: fix aarch64 uclibc-ng compile 
The aarch64 compile uses the sys/auxv.h header which is not
provided by ulcibc-ng. Add configure.ac patch to check for
the header before using it in ext/standard/crc32.c.

Fixes:

  https://bugs.busybox.net/show_bug.cgi?id=12626

  build/php-7.4.3/ext/standard/crc32.c:26:12: schwerwiegender Fehler: sys/auxv.h: Datei oder Verzeichnis nicht gefunden

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2020-03-22 22:31:54 +01:00
Bernd Kuhls 51cd6b8641 package/php: security bump version to 7.4.4 
Changelog: https://www.php.net/ChangeLog-7.php#7.4.4

Fixes CVE-2020-7064, CVE-2020-7065 & CVE-2020-7066.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2020-03-20 21:53:34 +01:00
Fabrice Fontaine 57bbd39d61 package/php: fix build without zlib 
Build will fail if zlib is not found and mysqlnd compression support
is not disabled since version 7.4.1 and
https://github.com/php/php-src/commit/ee4295b4ce421003c2e1d2af98066826deb23319

Fixes:
 - http://autobuild.buildroot.org/results/9496d81437dba55d22a03762dcfe60d632115ab5

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2020-03-08 20:08:21 +01:00
Bernd Kuhls b467d58063 package/php: security bump version to 7.4.3 
Changelog: https://www.php.net/ChangeLog-7.php#7.4.3

Fixes CVE-2020-7061, CVE-2020-7062 & CVE-2020-7063.

Removed patch applied upstream:
https://github.com/php/php-src/commit/f0f5c415a6e0abc40514f97113deb52a343174ee

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2020-02-21 09:41:49 +01:00
Fabrice Fontaine 924e923639 package/php: remove trailing whitespace in php.hash 
A trailing whitespace was added by commit
26c16e9d5b

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2020-02-02 14:58:49 +01:00
Pascal de Bruijn 26c16e9d5b package/php: bump version to 7.4.2 
patch 0005 has been sourced from upstream, and can be dropped when
7.4.3 is released.

The mbstrings module used to use a bundled oniguruma library, but now
uses an external one, hence the new dependency on this package for the
mbstrings module.

The hash of the license file has changed due to this change in the
copyright year:

-Copyright (c) 1999 - 2018 The PHP Group. All rights reserved.
+Copyright (c) 1999 - 2019 The PHP Group. All rights reserved.

Signed-off-by: Pascal de Bruijn <p.debruijn@unilogic.nl>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2020-02-01 23:06:19 +01:00