checkin

OBS-URL: https://build.opensuse.org/package/show/devel:languages:php/php8?expand=0&rev=159
2024-06-07 07:03:58 +00:00
parent 95f0cf753b
commit 2e31d755bb
7 changed files with 78 additions and 30 deletions
--- a/php-8.3.7.tar.xz
+++ b/php-8.3.7.tar.xz
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:d53433c1ca6b2c8741afa7c524272e6806c1e895e5912a058494fea89988570a
-size 12456020
--- a/php-8.3.7.tar.xz.asc
+++ b/php-8.3.7.tar.xz.asc
@@ -1,7 +0,0 @@
-----BEGIN PGP SIGNATURE-----
-
-iHUEABYIAB0WIQTCjZN1dWA+tKu3JYYcB3ncXAqd5AUCZjpZSgAKCRAcB3ncXAqd
-5DjkAQDRsE7yCm5EvRV3H94Q0r+AE8QRshC1nbeYZlodsujF5gEAuaX12Eh9GSJ/
-nDk3qyvVBt9XaHr0fXLTYD7DjfQdngk=
-=NVBw
-----END PGP SIGNATURE-----
--- a/php-8.3.8.tar.xz
+++ b/php-8.3.8.tar.xz
--- a/php-8.3.8.tar.xz.asc
+++ b/php-8.3.8.tar.xz.asc
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=aLaa
+-----END PGP SIGNATURE-----
--- a/php-build-reproducible-phar.patch
+++ b/php-build-reproducible-phar.patch
@@ -16,11 +16,11 @@ Signed-off-by: Arjen de Korte <build+github@de-korte.org>
 ext/phar/zip.c           |  2 +-
 6 files changed, 18 insertions(+), 5 deletions(-)

-Index: php-8.3.3/ext/phar/phar.c
+Index: php-8.3.8/ext/phar/phar.c
 ===================================================================
--- php-8.3.3.orig/ext/phar/phar.c
-+++ php-8.3.3/ext/phar/phar.c
-@@ -2993,7 +2993,7 @@ int phar_flush(phar_archive_data *phar,
+--- php-8.3.8.orig/ext/phar/phar.c
+++ php-8.3.8/ext/phar/phar.c
+@@ -2996,7 +2996,7 @@ int phar_flush(phar_archive_data *phar,
 			4: metadata-len
 			+: metadata
 		*/
@@ -29,10 +29,10 @@ Index: php-8.3.3/ext/phar/phar.c
 		phar_set_32(entry_buffer, entry->uncompressed_filesize);
 		phar_set_32(entry_buffer+4, mytime);
 		phar_set_32(entry_buffer+8, entry->compressed_filesize);
-Index: php-8.3.3/ext/phar/phar_internal.h
+Index: php-8.3.8/ext/phar/phar_internal.h
 ===================================================================
--- php-8.3.3.orig/ext/phar/phar_internal.h
-+++ php-8.3.3/ext/phar/phar_internal.h
+--- php-8.3.8.orig/ext/phar/phar_internal.h
+++ php-8.3.8/ext/phar/phar_internal.h
@@ -427,6 +427,21 @@ static inline enum phar_fp_type phar_get
 	return PHAR_G(cached_fp)[entry->phar->phar_pos].manifest[entry->manifest_pos].fp_type;
 }
@@ -55,10 +55,10 @@ Index: php-8.3.3/ext/phar/phar_internal.h
 static inline zend_off_t phar_get_fp_offset(phar_entry_info *entry)
 {
 	if (!entry->is_persistent) {
-Index: php-8.3.3/ext/phar/stream.c
+Index: php-8.3.8/ext/phar/stream.c
 ===================================================================
--- php-8.3.3.orig/ext/phar/stream.c
-+++ php-8.3.3/ext/phar/stream.c
+--- php-8.3.8.orig/ext/phar/stream.c
+++ php-8.3.8/ext/phar/stream.c
@@ -474,7 +474,7 @@ static int phar_stream_flush(php_stream
 	phar_entry_data *data = (phar_entry_data *) stream->abstract;
 
@@ -68,10 +68,10 @@ Index: php-8.3.3/ext/phar/stream.c
 		ret = phar_flush(data->phar, 0, 0, 0, &error);
 		if (error) {
 			php_stream_wrapper_log_error(stream->wrapper, REPORT_ERRORS, "%s", error);
-Index: php-8.3.3/ext/phar/tar.c
+Index: php-8.3.8/ext/phar/tar.c
 ===================================================================
--- php-8.3.3.orig/ext/phar/tar.c
-+++ php-8.3.3/ext/phar/tar.c
+--- php-8.3.8.orig/ext/phar/tar.c
+++ php-8.3.8/ext/phar/tar.c
@@ -965,7 +965,7 @@ int phar_tar_flush(phar_archive_data *ph
 	char halt_stub[] = "__HALT_COMPILER();";
 
@@ -81,10 +81,10 @@ Index: php-8.3.3/ext/phar/tar.c
 	entry.is_modified = 1;
 	entry.is_crc_checked = 1;
 	entry.is_tar = 1;
-Index: php-8.3.3/ext/phar/util.c
+Index: php-8.3.8/ext/phar/util.c
 ===================================================================
--- php-8.3.3.orig/ext/phar/util.c
-+++ php-8.3.3/ext/phar/util.c
+--- php-8.3.8.orig/ext/phar/util.c
+++ php-8.3.8/ext/phar/util.c
@@ -584,7 +584,7 @@ phar_entry_data *phar_get_or_create_entr
 
 	phar_add_virtual_dirs(phar, path, path_len);
@@ -94,10 +94,10 @@ Index: php-8.3.3/ext/phar/util.c
 	etemp.is_crc_checked = 1;
 	etemp.phar = phar;
 	etemp.filename = estrndup(path, path_len);
-Index: php-8.3.3/ext/phar/zip.c
+Index: php-8.3.8/ext/phar/zip.c
 ===================================================================
--- php-8.3.3.orig/ext/phar/zip.c
-+++ php-8.3.3/ext/phar/zip.c
+--- php-8.3.8.orig/ext/phar/zip.c
+++ php-8.3.8/ext/phar/zip.c
@@ -1236,7 +1236,7 @@ int phar_zip_flush(phar_archive_data *ph
 
 	pass.error = &temperr;
--- a/php8.changes
+++ b/php8.changes
@@ -1,3 +1,42 @@
+-------------------------------------------------------------------
+Fri Jun  7 07:02:10 UTC 2024 - pgajdos@suse.com
+
+- version update to 8.3.8
+    CGI:
+        Fixed buffer limit on Windows, replacing read call usage by _read.
+        Fixed bug GHSA-3qgc-jrrr-25jv (Bypass of CVE-2012-1823, Argument Injection in PHP-CGI). (CVE-2024-4577)
+    CLI:
+        Fixed bug GH-14189 (PHP Interactive shell input state incorrectly handles quoted heredoc literals.).
+    Core:
+        Fixed bug GH-13970 (Incorrect validation of #[Attribute] flags type for non-compile-time expressions).
+    DOM:
+        Fix crashes when entity declaration is removed while still having entity references.
+        Fix references not handled correctly in C14N.
+        Fix crash when calling childNodes next() when iterator is exhausted.
+        Fix crash in ParentNode::append() when dealing with a fragment containing text nodes.
+    Filter:
+        Fixed bug GHSA-w8qr-v226-r27w (Filter bypass in filter_var FILTER_VALIDATE_URL). (CVE-2024-5458)
+    FPM:
+        Fix bug GH-14175 (Show decimal number instead of scientific notation in systemd status).
+    Hash:
+        ext/hash: Swap the checking order of `__has_builtin` and `__GNUC__` (Saki Takamachi)
+    Intl:
+        Fixed build regression on systems without C++17 compilers.
+    MySQLnd:
+        Fix bug GH-14255 (mysqli_fetch_assoc reports error from nested query).
+    Opcache:
+        Fixed bug GH-14109 (Fix accidental persisting of internal class constant in shm).
+    OpenSSL:
+        The openssl_private_decrypt function in PHP and Marvin attack.
+    Standard:
+        Fixed bug GHSA-9fcc-425m-g385 (Bypass of CVE-2024-1874). (CVE-2024-5585)
+    XML:
+        Fixed bug GH-14124 (Segmentation fault with XML extension under certain memory limit).
+    XMLReader:
+        Fixed bug GH-14183 (XMLReader::open() can't be overridden).
+- modified patches
+  % php-build-reproducible-phar.patch (refreshed)
+
 -------------------------------------------------------------------
 Thu May  9 15:57:56 UTC 2024 - pgajdos@suse.com

--- a/php8.spec
+++ b/php8.spec
@@ -57,7 +57,7 @@
 %bcond_without	sodium

 Name:           %{pprefix}%{php_name}%{psuffix}
-Version:        8.3.7
+Version:        8.3.8
 Release:        0
 Summary:        Interpreter for the PHP scripting language version 8
 License:        MIT AND PHP-3.01