SHA256
1
0
forked from pool/php8

42 Commits

Author SHA256 Message Date
7c86eeaee1 Accepting request 1291490 from devel:languages:php
- version update to 8.4.10 [bsc#1246146][bsc#1246148][bsc#1246167]
    BcMath:
        Fixed bug GH-18641 (Accessing a BcMath\Number property by ref crashes).
    Core:
        Fixed bugs GH-17711 and GH-18022 (Infinite recursion on deprecated attribute evaluation) and GH-18464 (Recursion protection for deprecation constants not released on bailout).
        Fixed GH-18695 (zend_ast_export() - float number is not preserved).
        Fix handling of references in zval_try_get_long().
        Do not delete main chunk in zend_gc.
        Fix compile issues with zend_alloc and some non-default options.
    Curl:
        Fix memory leak when setting a list via curl_setopt fails.
    Date:
        Fix leaks with multiple calls to DatePeriod iterator current().
    DOM:
        Fixed bug GH-18744 (classList works not correctly if copy HTMLElement by clone keyword).
    FPM:
        Fixed GH-18662 (fpm_get_status segfault).
    Hash:
        Fixed bug GH-14551 (PGO build fails with xxhash).
    Intl:
        Fix memory leak in intl_datetime_decompose() on failure.
        Fix memory leak in locale lookup on failure.
    Opcache:
        Fixed bug GH-18743 (Incompatibility in Inline TLS Assembly on Alpine 3.22).
    ODBC:
        Fix memory leak on php_odbc_fetch_hash() failure.
    OpenSSL:
        Fix memory leak of X509_STORE in php_openssl_setup_verify() on failure.
        Fixed bug #74796 (Requests through http proxy set peer name).
    PGSQL:

OBS-URL: https://build.opensuse.org/request/show/1291490
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/php8?expand=0&rev=91
2025-07-10 21:14:52 +00:00
6d472e68b2 checkin
OBS-URL: https://build.opensuse.org/package/show/devel:languages:php/php8?expand=0&rev=215
2025-07-09 12:36:23 +00:00
09722d5c55 checkin
OBS-URL: https://build.opensuse.org/package/show/devel:languages:php/php8?expand=0&rev=214
2025-07-03 13:10:22 +00:00
baa181b861 Accepting request 1283579 from devel:languages:php
- version update to 8.4.8
    Core:
        Fixed GH-18480 (array_splice with large values for offset/length arguments).
        Partially fixed GH-18572 (nested object comparisons leading to stack overflow).
        Fixed OSS-Fuzz #417078295.
        Fixed OSS-Fuzz #418106144.
    Curl:
        Fixed GH-18460 (curl_easy_setopt with CURLOPT_USERPWD/CURLOPT_USERNAME/ CURLOPT_PASSWORD set the Authorization header when set to NULL).
    Date:
        Fixed bug GH-18076 (Since PHP 8, the date_sun_info() function returns inaccurate sunrise and sunset times, but other calculated times are correct) (JiriJozif).
        Fixed bug GH-18481 (date_sunrise with unexpected nan value for the offset).
    DOM:
        Backport lexbor/lexbor#274.
    Intl:
        Fix various reference issues.
    LDAP:
        Fixed bug GH-18529 (ldap no longer respects TLS_CACERT from ldaprc in ldap_start_tls()).
    Opcache:
        Fixed bug GH-18417 (Windows SHM reattachment fails when increasing memory_consumption or jit_buffer_size).
        Fixed bug GH-18297 (Exception not handled when jit guard is triggered).
        Fixed bug GH-18408 (Snapshotted poly_func / poly_this may be spilled).
        Fixed bug GH-18567 (Preloading with internal class alias triggers assertion failure).
        Fixed bug GH-18534 (FPM exit code 70 with enabled opcache and hooked properties in traits).
        Fix leak of accel_globals->key.
    OpenSSL:
        Fix missing checks against php_set_blocking() in xp_ssl.c.
    SPL:
        Fixed bug GH-18421 (Integer overflow with large numbers in LimitIterator).
    Standard:
        Fixed bug GH-17403 (Potential deadlock when putenv fails).

OBS-URL: https://build.opensuse.org/request/show/1283579
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/php8?expand=0&rev=90
2025-06-10 06:59:23 +00:00
d353beb46e checkin
OBS-URL: https://build.opensuse.org/package/show/devel:languages:php/php8?expand=0&rev=212
2025-06-06 08:26:28 +00:00
bf0b8c4749 Accepting request 1276711 from devel:languages:php
- version update to 8.4.7
    Core:
        Fixed bug GH-18038 (Lazy proxy calls magic methods twice).
        Fixed bug GH-18209 (Use-after-free in extract() with EXTR_REFS).
        Fixed bug GH-18268 (Segfault in array_walk() on object with added property hooks).
        Fixed bug GH-18304 (Changing the properties of a DateInterval through dynamic properties triggers a SegFault).
        Fix some leaks in php_scandir.
    DBA:
        FIxed bug GH-18247 dba_popen() memory leak on invalid path.
    Filter:
        Fixed bug GH-18309 (ipv6 filter integer overflow).
    GD:
        Fixed imagecrop() overflow with rect argument with x/width y/heigh usage in gdImageCrop().
        Fixed GH-18243 imagettftext() overflow/underflow on font size value.
    Intl:
        Fix reference support for intltz_get_offset().
    LDAP:
        Fixed bug GH-17776 (LDAP_OPT_X_TLS_* options can't be overridden).
        Fix NULL deref on high modification key.
    libxml:
        Fixed custom external entity loader returning an invalid resource leading to a confusing TypeError message.
    Opcache:
        Fixed bug GH-18294 (assertion failure zend_jit_ir.c).
        Fixed bug GH-18289 (Fix segfault in JIT).
        Fixed bug GH-18136 (tracing JIT floating point register clobbering on Windows and ARM64).
    OpenSSL:
        Fix memory leak in openssl_sign() when passing invalid algorithm.
        Fix potential leaks when writing to BIO fails.
    PDO Firebird:
        Fixed bug GH-18276 (persistent connection - "zend_mm_heap corrupted" with setAttribute())
        Fixed bug GH-17383 (PDOException has wrong code and message since PHP 8.4)
    PDO Sqlite:
        Fix memory leak on error return of collation callback.
    PgSql:
        Fix uouv in pg_put_copy_end().
    SPL:
        Fixed bug GH-18322 (SplObjectStorage debug handler mismanages memory).
    Standard:
        Fixed bug GH-18145 (php8ts crashes in php_clear_stat_cache()).
        Fix resource leak in iptcembed() on error.
    Tests:
        Address deprecated PHP 8.4 session options to prevent test failures.
    Zip:
        Fix uouv when handling empty options in ZipArchive::addGlob().
        Fix memory leak when handling a too long path in ZipArchive::addGlob(). (forwarded request 1276314 from adkorte)

OBS-URL: https://build.opensuse.org/request/show/1276711
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/php8?expand=0&rev=89
2025-05-12 14:46:40 +00:00
8b806e160d - version update to 8.4.7
Core:
        Fixed bug GH-18038 (Lazy proxy calls magic methods twice).
        Fixed bug GH-18209 (Use-after-free in extract() with EXTR_REFS).
        Fixed bug GH-18268 (Segfault in array_walk() on object with added property hooks).
        Fixed bug GH-18304 (Changing the properties of a DateInterval through dynamic properties triggers a SegFault).
        Fix some leaks in php_scandir.
    DBA:
        FIxed bug GH-18247 dba_popen() memory leak on invalid path.
    Filter:
        Fixed bug GH-18309 (ipv6 filter integer overflow).
    GD:
        Fixed imagecrop() overflow with rect argument with x/width y/heigh usage in gdImageCrop().
        Fixed GH-18243 imagettftext() overflow/underflow on font size value.
    Intl:
        Fix reference support for intltz_get_offset().
    LDAP:
        Fixed bug GH-17776 (LDAP_OPT_X_TLS_* options can't be overridden).
        Fix NULL deref on high modification key.
    libxml:
        Fixed custom external entity loader returning an invalid resource leading to a confusing TypeError message.
    Opcache:
        Fixed bug GH-18294 (assertion failure zend_jit_ir.c).
        Fixed bug GH-18289 (Fix segfault in JIT).
        Fixed bug GH-18136 (tracing JIT floating point register clobbering on Windows and ARM64).
    OpenSSL:
        Fix memory leak in openssl_sign() when passing invalid algorithm.
        Fix potential leaks when writing to BIO fails.
    PDO Firebird:
        Fixed bug GH-18276 (persistent connection - "zend_mm_heap corrupted" with setAttribute())
        Fixed bug GH-17383 (PDOException has wrong code and message since PHP 8.4)
    PDO Sqlite:
        Fix memory leak on error return of collation callback.
    PgSql:
        Fix uouv in pg_put_copy_end().
    SPL:
        Fixed bug GH-18322 (SplObjectStorage debug handler mismanages memory).
    Standard:
        Fixed bug GH-18145 (php8ts crashes in php_clear_stat_cache()).
        Fix resource leak in iptcembed() on error.
    Tests:
        Address deprecated PHP 8.4 session options to prevent test failures.
    Zip:
        Fix uouv when handling empty options in ZipArchive::addGlob().
        Fix memory leak when handling a too long path in ZipArchive::addGlob().

OBS-URL: https://build.opensuse.org/package/show/devel:languages:php/php8?expand=0&rev=210
2025-05-12 06:21:28 +00:00
c22a6fbfc4 Accepting request 1271170 from devel:languages:php
OBS-URL: https://build.opensuse.org/request/show/1271170
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/php8?expand=0&rev=88
2025-04-22 15:25:46 +00:00
71e557c034 - version update to 8.4.6
BCMath:
        Fixed pointer subtraction for scale.
    Core:
        Fixed property hook backing value access in multi-level inheritance.
        Fixed accidentally inherited default value in overridden virtual properties.
        Fixed bug GH-17376 (Broken JIT polymorphism for property hooks added to child class).
        Fixed bug GH-17913 (ReflectionFunction::isDeprecated() returns incorrect results for closures created from magic __call()).
        Fixed bug GH-17941 (Stack-use-after-return with lazy objects and hooks).
        Fixed bug GH-17988 (Incorrect handling of hooked props without get hook in get_object_vars()).
        Fixed bug GH-17998 (Skipped lazy object initialization on primed SIMPLE_WRITE cache).
        Fixed bug GH-17998 (Assignment to backing value in set hook of lazy proxy calls hook again).
        Fixed bug GH-17961 (use-after-free during dl()'ed module class destruction).
        Fixed bug GH-15367 (dl() of module with aliased class crashes in shutdown).
        Fixed OSS-Fuzz #403308724.
        Fixed bug GH-13193 again (Significant performance degradation in 'foreach').
    DBA:
        Fixed assertion violation when opening the same file with dba_open multiple times.
    DOM:
        Fixed bug GH-17991 (Assertion failure dom_attr_value_write).
        Fix weird unpack behaviour in DOM.
        Fixed bug GH-18090 (DOM: Svg attributes and tag names are being lowercased).
        Fix xinclude destruction of live attributes.
    Fuzzer:
        Fixed bug GH-18081 (Memory leaks in error paths of fuzzer SAPI).
    GD:
        Fixed bug GH-17984 (calls with arguments as array with references).
    LDAP:
        Fixed bug GH-18015 (Error messages for ldap_mod_replace are confusing).
    Mbstring:
        Fixed bug GH-17989 (mb_output_handler crash with unset http_output_conv_mimetypes).
    Opcache:
        Fixed bug GH-15834 (Segfault with hook "simple get" cache slot and minimal JIT).
        Fixed bug GH-17966 (Symfony JIT 1205 assertion failure).
        Fixed bug GH-18037 (SEGV Zend/zend_execute.c).
        Fixed bug GH-18050 (IN_ARRAY optimization in DFA pass is broken).
        Fixed bug GH-18113 (stack-buffer-overflow ext/opcache/jit/ir/ir_sccp.c).
        Fixed bug GH-18112 (NULL access with preloading and INI option).
        Fixed bug GH-18107 (Opcache CFG jmp optimization with try-finally breaks the exception table).
    PDO:
        Fix memory leak when destroying PDORow.
    Standard:
        Fix memory leaks in array_any() / array_all().
    SOAP:
        Fixed bug #66049 (Typemap can break parsing in parse_packet_soap leading to a segfault) .
    SPL:
        Fixed bug GH-18018 (RC1 data returned from offsetGet causes UAF in ArrayObject).
    Treewide:
        Fixed bug GH-17736 (Assertion failure zend_reference_destroy()).
    Windows:
        Fixed bug GH-17836 (zend_vm_gen.php shouldn't break on Windows line endings).

OBS-URL: https://build.opensuse.org/package/show/devel:languages:php/php8?expand=0&rev=208
2025-04-21 13:09:03 +00:00
458c582da3 Accepting request 1267591 from devel:languages:php
- version update to 8.4.5
    BCMath:
        Fixed bug GH-17398 (bcmul memory leak).
    Core:
        Fixed bug GH-17623 (Broken stack overflow detection for variable compilation).
        Fixed bug GH-17618 (UnhandledMatchError does not take zend.exception_ignore_args=1 into account).
        Fix fallback paths in fast_long_{add,sub}_function.
        Fixed bug OSS-Fuzz #391975641 (Crash when accessing property backing value by reference).
        Fixed bug GH-17718 (Calling static methods on an interface that has `__callStatic` is allowed).
        Fixed bug GH-17713 (ReflectionProperty::getRawValue() and related methods may call hooks of overridden properties).
        Fixed bug GH-17916 (Final abstract properties should error).
        Fixed bug GH-17866 (zend_mm_heap corrupted error after upgrading from 8.4.3 to 8.4.4).
        Fixed GHSA-rwp7-7vc6-8477 (Reference counting in php_request_shutdown causes Use-After-Free). (CVE-2024-11235)
    DOM:
        Fixed bug GH-17609 (Typo in error message: Dom\NO_DEFAULT_NS instead of Dom\HTML_NO_DEFAULT_NS).
        Fixed bug GH-17802 (\Dom\HTMLDocument querySelector attribute name is case sensitive in HTML).
        Fixed bug GH-17847 (xinclude destroys live node).
        Fix using Dom\Node with Dom\XPath callbacks.
    GD:
        Fixed bug GH-17703 (imagescale with both width and height negative values triggers only an Exception on width).
        Fixed bug GH-17772 (imagepalettetotruecolor crash with memory_limit=2M).
    FFI:
        Fix FFI Parsing of Pointer Declaration Lists.
    FPM:
        Fixed bug GH-17643 (FPM with httpd ProxyPass encoded PATH_INFO env).
    LDAP:
        Fixed bug GH-17704 (ldap_search fails when $attributes contains a non-packed array with numerical keys).
    LibXML:
        Fixed GHSA-wg4p-4hqh-c3g9 (Reocurrence of #72714).
        Fixed GHSA-p3x9-6h7p-cgfc (libxml streams use wrong `content-type` header when requesting a redirected resource). (CVE-2025-1219)

OBS-URL: https://build.opensuse.org/request/show/1267591
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/php8?expand=0&rev=87
2025-04-08 15:50:39 +00:00
de110e06bf checkin
OBS-URL: https://build.opensuse.org/package/show/devel:languages:php/php8?expand=0&rev=206
2025-04-02 10:10:46 +00:00
6da594a879 Accepting request 1254303 from devel:languages:php
Readding the reference, Sorry.

OBS-URL: https://build.opensuse.org/request/show/1254303
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/php8?expand=0&rev=86
2025-03-19 21:33:27 +00:00
4c3b7647ab checkin
OBS-URL: https://build.opensuse.org/package/show/devel:languages:php/php8?expand=0&rev=204
2025-03-19 07:14:16 +00:00
b5fdc68fc8 Accepting request 1254084 from devel:languages:php
- fixes: CVE-2025-1217 [bsc#1239664]
         CVE-2024-11235 [bsc#1239666]
         CVE-2025-1734 [bsc#1239668]
         CVE-2025-1861 [bsc#1239669]
         CVE-2025-1736 [bsc#1239670]

OBS-URL: https://build.opensuse.org/request/show/1254084
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/php8?expand=0&rev=85
2025-03-18 16:40:23 +00:00
51329fd55f checkin
OBS-URL: https://build.opensuse.org/package/show/devel:languages:php/php8?expand=0&rev=202
2025-03-18 11:03:17 +00:00
04311735ca checkin
OBS-URL: https://build.opensuse.org/package/show/devel:languages:php/php8?expand=0&rev=201
2025-03-17 11:09:14 +00:00
8602acce9c Accepting request 1253013 from devel:languages:php
- version update to 8.3.19
    BCMath:
        Fixed bug GH-17398 (bcmul memory leak).
    Core:
        Fixed bug GH-17623 (Broken stack overflow detection for variable compilation).
        Fixed bug GH-17618 (UnhandledMatchError does not take zend.exception_ignore_args=1 into account).
        Fix fallback paths in fast_long_{add,sub}_function.
        Fixed bug GH-17718 (Calling static methods on an interface that has `__callStatic` is allowed).
        Fixed bug GH-17797 (zend_test_compile_string crash on invalid script path).
        Fixed GHSA-rwp7-7vc6-8477 (Reference counting in php_request_shutdown causes Use-After-Free). (CVE-2024-11235)
    DOM:
        Fixed bug GH-17847 (xinclude destroys live node).
    FFI:
        Fix FFI Parsing of Pointer Declaration Lists.
    FPM:
        Fixed bug GH-17643 (FPM with httpd ProxyPass encoded PATH_INFO env).
    GD:
        Fixed bug GH-17772 (imagepalettetotruecolor crash with memory_limit=2M).
    LDAP:
        Fixed bug GH-17704 (ldap_search fails when $attributes contains a non-packed array with numerical keys).
    LibXML:
        Fixed GHSA-wg4p-4hqh-c3g9 (Reocurrence of #72714).
        Fixed GHSA-p3x9-6h7p-cgfc (libxml streams use wrong `content-type` header when requesting a redirected resource). (CVE-2025-1219)
    MBString:
        Fixed bug GH-17503 (Undefined float conversion in mb_convert_variables).
    Opcache:
        Fixed bug GH-17654 (Multiple classes using same trait causes function JIT crash).
        Fixed bug GH-17577 (JIT packed type guard crash).
        Fixed bug GH-17899 (zend_test_compile_string with invalid path when opcache is enabled).
        Fixed bug GH-17868 (Cannot allocate memory with tracing JIT).

OBS-URL: https://build.opensuse.org/request/show/1253013
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/php8?expand=0&rev=84
2025-03-15 15:15:55 +00:00
94840a6e42 checkin
OBS-URL: https://build.opensuse.org/package/show/devel:languages:php/php8?expand=0&rev=199
2025-03-14 09:30:30 +00:00
fbdb1263cd checkin
OBS-URL: https://build.opensuse.org/package/show/devel:languages:php/php8?expand=0&rev=198
2025-03-14 06:11:38 +00:00
c20d752886 Accepting request 1245821 from devel:languages:php
- version update to 8.3.17
    Core:
        Fixed bug GH-16892 (ini_parse_quantity() fails to parse inputs starting with 0x0b).
        Fixed bug GH-16886 (ini_parse_quantity() fails to emit warning for 0x+0).
        Fixed bug GH-17214 (Relax final+private warning for trait methods with inherited final).
        Fixed NULL arithmetic during system program execution on Windows.
        Fixed potential OOB when checking for trailing spaces on Windows.
        Fixed bug GH-17408 (Assertion failure Zend/zend_exceptions.c).
        Fix may_have_extra_named_args flag for ZEND_AST_UNPACK.
        Fix NULL arithmetic in System V shared memory emulation for Windows.
    DOM:
        Fixed bug GH-17500 (Segfault with requesting nodeName on nameless doctype).
    Enchant:
        Fix crashes in enchant when passing null bytes.
    FTP:
        Fixed bug GH-16800 (ftp functions can abort with EINTR).
    GD:
        Fixed bug GH-17349 (Tiled truecolor filling looses single color transparency).
        Fixed bug GH-17373 (imagefttext() ignores clipping rect for palette images).
        Ported fix for libgd 223 (gdImageRotateGeneric() does not properly interpolate).
    Intl:
        Fixed bug GH-11874 (intl causing segfault in docker images).
        Fixed bug GH-17469 (UConverter::transcode always emit E_WARNING on invalid encoding).
    Opcache:
        Fixed bug GH-17307 (Internal closure causes JIT failure).
        Fixed bug GH-17564 (Potential UB when reading from / writing to struct padding).
    PDO:
        Fixed a memory leak when the GC is used to free a PDOStatment.
        Fixed a crash in the PDO Firebird Statement destructor.
        Fixed UAFs when changing default fetch class ctor args.

OBS-URL: https://build.opensuse.org/request/show/1245821
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/php8?expand=0&rev=83
2025-02-16 21:37:11 +00:00
ed85cbb754 checkin
OBS-URL: https://build.opensuse.org/package/show/devel:languages:php/php8?expand=0&rev=196
2025-02-14 07:28:57 +00:00
69be8a53df Accepting request 1244104 from devel:languages:php
- obsolete also apache2-mod_php7 [bsc#1236850]

OBS-URL: https://build.opensuse.org/request/show/1244104
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/php8?expand=0&rev=82
2025-02-09 19:00:17 +00:00
9953ae4ebe - obsolete also apache2-mod_php7 [bsc#1236850]
OBS-URL: https://build.opensuse.org/package/show/devel:languages:php/php8?expand=0&rev=194
2025-02-07 09:31:28 +00:00
7f8487b2c5 Accepting request 1238427 from devel:languages:php
- version update to 8.3.16
    Core:
        Fixed bug GH-17106 (ZEND_MATCH_ERROR misoptimization).
        Fixed bug GH-17162 (zend_array_try_init() with dtor can cause engine UAF).
        Fixed bug GH-17101 (AST->string does not reproduce constructor property promotion correctly).
        Fixed bug GH-17211 (observer segfault on function loaded with dl()).
        Fixed bug GH-17216 (Trampoline crash on error).
    Date:
        Fixed bug GH-14709 DatePeriod::__construct() overflow on recurrences.
    DBA:
        Skip test if inifile is disabled.
    DOM:
        Fixed bug GH-17224 (UAF in importNode).
    Embed:
        Make build command for program using embed portable.
    FFI:
        Fixed bug #79075 (FFI header parser chokes on comments).
        Fix memory leak on ZEND_FFI_TYPE_CHAR conversion failure.
        Fixed bug GH-16013 and bug #80857 (Big endian issues).
    Filter:
        Fixed bug GH-16944 (Fix filtering special IPv4 and IPv6 ranges, by using information from RFC 6890).
    FPM:
        Fixed bug GH-13437 (FPM: ERROR: scoreboard: failed to lock (already locked)).
        Fixed bug GH-17112 (Macro redefinitions).
        Fixed bug GH-17208 (bug64539-status-json-encoding.phpt fail on 32-bits).
    GD:
        Fixed bug GH-16255 (Unexpected nan value in ext/gd/libgd/gd_filter.c).
        Ported fix for libgd bug 276 (Sometimes pixels are missing when storing images as BMPs).
    Gettext:
        Fixed bug GH-17202 (Segmentation fault ext/gettext/gettext.c bindtextdomain()).

OBS-URL: https://build.opensuse.org/request/show/1238427
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/php8?expand=0&rev=81
2025-01-18 12:17:37 +00:00
4077ff3d78 checkin
OBS-URL: https://build.opensuse.org/package/show/devel:languages:php/php8?expand=0&rev=192
2025-01-17 07:45:52 +00:00
e6afe086da checkin
OBS-URL: https://build.opensuse.org/package/show/devel:languages:php/php8?expand=0&rev=191
2025-01-17 07:29:48 +00:00
7858e2c23d Accepting request 1237725 from devel:languages:php
- obsolete php7 to smooth the migration [bsc#1234788] (forwarded request 1237532 from pgajdos)

OBS-URL: https://build.opensuse.org/request/show/1237725
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/php8?expand=0&rev=80
2025-01-15 16:42:13 +00:00
2fdbcbda4e - obsolete php7 to smooth the migration [bsc#1234788]
OBS-URL: https://build.opensuse.org/package/show/devel:languages:php/php8?expand=0&rev=189
2025-01-14 10:45:25 +00:00
7628d3b697 Accepting request 1232801 from devel:languages:php
- version update to 8.3.15
    Calendar:
        Fixed jdtogregorian overflow.
        Fixed cal_to_jd julian_days argument overflow.
    COM:
        Fixed bug GH-16991 (Getting typeinfo of non DISPATCH variant segfaults).
    Core:
        Fail early in *nix configuration build script.
        Fixed bug GH-16727 (Opcache bad signal 139 crash in ZTS bookworm (frankenphp)).
        Fixed bug GH-16799 (Assertion failure at Zend/zend_vm_execute.h:7469).
        Fixed bug GH-16630 (UAF in lexer with encoding translation and heredocs).
        Fix is_zend_ptr() huge block comparison.
        Fixed potential OOB read in zend_dirname() on Windows.
    Curl:
        Fixed bug GH-16802 (open_basedir bypass using curl extension).
        Fix various memory leaks in curl mime handling.
    DOM:
        Fixed bug GH-16777 (Calling the constructor again on a DOM object after it is in a document causes UAF).
        Fixed bug GH-16906 (Reloading document can cause UAF in iterator).
    FPM:
        Fixed GH-16432 (PHP-FPM 8.2 SIGSEGV in fpm_get_status).
    GD:
        Fixed GH-16776 (imagecreatefromstring overflow).
    GMP:
        Fixed bug GH-16890 (array_sum() with GMP can loose precision (LLP64)).
    Hash:
        Fixed GH-16711: Segfault in mhash().
    Opcache:
        Fixed bug GH-16770 (Tracing JIT type mismatch when returning UNDEF).
        Fixed bug GH-16851 (JIT_G(enabled) not set correctly on other threads).

OBS-URL: https://build.opensuse.org/request/show/1232801
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/php8?expand=0&rev=79
2024-12-22 16:58:53 +00:00
149894726f checkin
OBS-URL: https://build.opensuse.org/package/show/devel:languages:php/php8?expand=0&rev=187
2024-12-20 07:44:44 +00:00
506c95c8eb Accepting request 1226875 from devel:languages:php
- version update to 8.3.14 [bsc#1233644] [bsc#1233651] [bsc#1233703] [bsc#1233702] [bsc#1233705]

OBS-URL: https://build.opensuse.org/request/show/1226875
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/php8?expand=0&rev=78
2024-11-28 21:42:43 +00:00
f3bea5782f checkin
OBS-URL: https://build.opensuse.org/package/show/devel:languages:php/php8?expand=0&rev=185
2024-11-25 16:41:21 +00:00
ecc2995640 checkin
OBS-URL: https://build.opensuse.org/package/show/devel:languages:php/php8?expand=0&rev=184
2024-11-25 09:57:51 +00:00
c67687f8ed Accepting request 1225446 from devel:languages:php
- version update to 8.3.14
    CLI:
        Fixed bug GH-16373 (Shebang is not skipped for router script in cli-server started through shebang).
        Fixed bug GHSA-4w77-75f9-2c8w (Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface).
    COM:
        Fixed out of bound writes to SafeArray data.
    Core:
        Fixed bug GH-16168 (php 8.1 and earlier crash immediately when compiled with Xcode 16 clang on macOS 15).
        Fixed bug GH-16371 (Assertion failure in Zend/zend_weakrefs.c:646).
        Fixed bug GH-16515 (Incorrect propagation of ZEND_ACC_RETURN_REFERENCE for call trampoline).
        Fixed bug GH-16509 (Incorrect line number in function redeclaration error).
        Fixed bug GH-16508 (Incorrect line number in inheritance errors of delayed early bound classes).
        Fixed bug GH-16648 (Use-after-free during array sorting).
    Curl:
        Fixed bug GH-16302 (CurlMultiHandle holds a reference to CurlHandle if curl_multi_add_handle fails).
    Date:
        Fixed bug GH-16454 (Unhandled INF in date_sunset() with tiny $utcOffset).
        Fixed bug GH-14732 (date_sun_info() fails for non-finite values).
    DBA:
        Fixed bug GH-16390 (dba_open() can segfault for "pathless" streams).
    DOM:
        Fixed bug GH-16316 (DOMXPath breaks when not initialized properly).
        Add missing hierarchy checks to replaceChild.
        Fixed bug GH-16336 (Attribute intern document mismanagement).
        Fixed bug GH-16338 (Null-dereference in ext/dom/node.c).
        Fixed bug GH-16473 (dom_import_simplexml stub is wrong).
        Fixed bug GH-16533 (Segfault when adding attribute to parent that is not an element).
        Fixed bug GH-16535 (UAF when using document as a child).
        Fixed bug GH-16593 (Assertion failure in DOM->replaceChild).
        Fixed bug GH-16595 (Another UAF in DOM -> cloneNode).

OBS-URL: https://build.opensuse.org/request/show/1225446
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/php8?expand=0&rev=77
2024-11-22 22:50:19 +00:00
98f5d22669 checkin
OBS-URL: https://build.opensuse.org/package/show/devel:languages:php/php8?expand=0&rev=182
2024-11-21 07:18:37 +00:00
db9744d1e3 Accepting request 1219869 from devel:languages:php
- version update to 8.3.12 [bsc#1231358], [bsc#1231382], [bsc#1231360]

OBS-URL: https://build.opensuse.org/request/show/1219869
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/php8?expand=0&rev=76
2024-10-31 15:08:57 +00:00
f98a88335e checkin
OBS-URL: https://build.opensuse.org/package/show/devel:languages:php/php8?expand=0&rev=180
2024-10-31 14:04:42 +00:00
f77974bf57 Accepting request 1218225 from devel:languages:php
- version update to 8.3.13
    Calendar:
        Fixed GH-16240: jdtounix overflow on argument value.
        Fixed GH-16241: easter_days/easter_date overflow on year argument.
        Fixed GH-16263: jddayofweek overflow.
        Fixed GH-16234: jewishtojd overflow.
    CLI:
        Fixed bug GH-16137: duplicate http headers when set several times by the client.
    Core:
        Fixed bug GH-16054 (Segmentation fault when resizing hash table iterator list while adding).
        Fixed bug GH-15905 (Assertion failure for TRACK_VARS_SERVER).
        Fixed bug GH-15907 (Failed assertion when promoting Serialize deprecation to exception).
        Fixed bug GH-15851 (Segfault when printing backtrace during cleanup of nested generator frame).
        Fixed bug GH-15866 (Core dumped in Zend/zend_generators.c).
        Fixed bug GH-16188 (Assertion failure in Zend/zend_exceptions.c).
        Fixed bug GH-16233 (Observer segfault when calling user function in internal function via trampoline).
    DOM:
        Fixed bug GH-16039 (Segmentation fault (access null pointer) in ext/dom/parentnode/tree.c).
        Fixed bug GH-16149 (Null pointer dereference in DOMElement->getAttributeNames()).
        Fixed bug GH-16151 (Assertion failure in ext/dom/parentnode/tree.c).
        Fixed bug GH-16150 (Use after free in php_dom.c).
        Fixed bug GH-16152 (Memory leak in DOMProcessingInstruction/DOMDocument).
    JSON:
        Fixed bug GH-15168 (stack overflow in json_encode()).
    GD:
        Fixed bug GH-16232 (bitshift overflow on wbmp file content reading / fix backport from upstream).
        Fixed bug GH-12264 (overflow/underflow on imagerotate degrees value) (David Carlier)
        Fixed bug GH-16274 (imagescale underflow on RBG channels / fix backport from upstream).
    LDAP:
        Fixed bug GH-16032 (Various NULL pointer dereferencements in ldap_modify_batch()).

OBS-URL: https://build.opensuse.org/request/show/1218225
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/php8?expand=0&rev=75
2024-10-25 17:19:15 +00:00
ca772987d9 checkin
OBS-URL: https://build.opensuse.org/package/show/devel:languages:php/php8?expand=0&rev=178
2024-10-24 18:49:58 +00:00
06e97b5933 Accepting request 1204317 from devel:languages:php
OBS-URL: https://build.opensuse.org/request/show/1204317
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/php8?expand=0&rev=74
2024-09-29 16:09:25 +00:00
85b157d848 - Add /srv/www directories to filelist [bsc#1231027]
OBS-URL: https://build.opensuse.org/package/show/devel:languages:php/php8?expand=0&rev=176
2024-09-28 07:55:48 +00:00
e30469a868 - version update to 8.3.12
CGI:
        Fixed bug GHSA-p99j-rfp4-xqvq (Bypass of CVE-2024-4577, Parameter Injection Vulnerability). (CVE-2024-8926)
        Fixed bug GHSA-94p6-54jq-9mwp (cgi.force_redirect configuration is bypassable due to the environment variable collision). (CVE-2024-8927)
    Core:
        Fixed bug GH-15408 (MSan false-positve on zend_max_execution_timer).
        Fixed bug GH-15515 (Configure error grep illegal option q).
        Fixed bug GH-15514 (Configure error: genif.sh: syntax error).
        Fixed bug GH-15565 (--disable-ipv6 during compilation produces error EAI_SYSTEM not found).
        Fixed bug GH-15587 (CRC32 API build error on arm 32-bit).
        Fixed bug GH-15330 (Do not scan generator frames more than once).
        Fixed uninitialized lineno in constant AST of internal enums.
    Curl:
        Fixed bug GH-15547 (curl_multi_select overflow on timeout argument).
    DOM:
        Fixed bug GH-15551 (Segmentation fault (access null pointer) in ext/dom/xml_common.h).
        Fixed bug GH-15654 (Signed integer overflow in ext/dom/nodelist.c).
    Fileinfo:
        Fixed bug GH-15752 (Incorrect error message for finfo_file with an empty filename argument).
    FPM:
        Fixed bug GHSA-865w-9rf3-2wh5 (Logs from childrens may be altered). (CVE-2024-9026)
    MySQLnd:
        Fixed bug GH-15432 (Heap corruption when querying a vector).
    Opcache:
        Fixed bug GH-15661 (Access null pointer in Zend/Optimizer/zend_inference.c).
        Fixed bug GH-15658 (Segmentation fault in Zend/zend_vm_execute.h).
    SAPI:
        Fixed bug GHSA-9pqp-7h25-4f32 (Erroneous parsing of multipart form data). (CVE-2024-8925)
    Standard:
        Fixed bug GH-15552 (Signed integer overflow in ext/standard/scanf.c).
    Streams:
        Fixed bug GH-15628 (php_stream_memory_get_buffer() not zero-terminated).

OBS-URL: https://build.opensuse.org/package/show/devel:languages:php/php8?expand=0&rev=175
2024-09-27 06:11:07 +00:00
15 changed files with 1209 additions and 194 deletions

Binary file not shown.

View File

@@ -1,7 +0,0 @@
-----BEGIN PGP SIGNATURE-----
iHUEABYIAB0WIQTCjZN1dWA+tKu3JYYcB3ncXAqd5AUCZs4m5wAKCRAcB3ncXAqd
5GEcAQDijVOhXPZKRA3CPaut9JwOysoNgX9/A5zLeMGgTwUMIwEAwGig+o0XKonL
Ay0PrGtv7SLU3ZUXKGIfo/E2jCDlUgE=
=1Ytt
-----END PGP SIGNATURE-----

BIN
php-8.4.10.tar.xz LFS Normal file

Binary file not shown.

16
php-8.4.10.tar.xz.asc Normal file
View File

@@ -0,0 +1,16 @@
-----BEGIN PGP SIGNATURE-----
iQIzBAABCAAdFiEEBhbpPZWvRxJD4mdhdwQm4X67s90FAmhkmUAACgkQdwQm4X67
s903TA/6AkonwSTFryS9cZzV03soHgS0eJqKNsf+pgIS+YiY+NUAe6Jl3TlKx5FX
3qKalCfUKDaWZX8Gso7psHHyY0a6oC3HD/xe8NV29VR1Zxe7dvqS2ovCu+7ek2wF
kyK2S7P7bRSIi9w5AMAHbVUbiOFB2AE98aBJ+H0n+kc50QltG4xe2/zcrx92fmwY
2aH8K/M4GsuPV+8pzpdSPT3yIa/iEknHf+1GfDy76+2D2gW9x2wr20QOJdEpr4kc
N6BoaZU+IrADT1pB04zYyeIy0a8gAXoHzUHsu2NW+rLOxYywtB1Xex7pQlEJw7h1
hNSvvAhJBQ1lYJQeF7o/a7ybplYe/2ypb9hjMsuvitncVl5JYvY2Ok9yxR8IxIUT
ryks9JezDD+xFuBeGqg1lOh1EiNHlJrvDeCz48KMKnOyWQNNrry98yr1mKRYft3Q
MLEIvj8ea13mEpBOd0Z2xwRUhYoMJrOymHFEEfprdFH0Sa2aThCUW3xEaPl2miAV
LsDjEthCNEnKA3AX5X1HEpbHm4g+ni/AK22if1IPrf94/oeENnDW5l4cktZt2h89
z/yToRjyh4yGbFWReC4KHx5vmNVEx7ltDfQEFuuCUzISaJMr48RPcSvzpqh//NHS
wYNXwIXSo/gN6U3XKAJWFenuvQLtd+/GUo3YzfNmx0+Pp2s8QI8=
=zmRy
-----END PGP SIGNATURE-----

View File

@@ -1,13 +1,13 @@
Index: php-8.3.8/configure.ac
Index: php-8.4.1/configure.ac
===================================================================
--- php-8.3.8.orig/configure.ac
+++ php-8.3.8/configure.ac
@@ -1660,7 +1660,7 @@ PHP_CONFIGURE_PART(Configuring libtool)
--- php-8.4.1.orig/configure.ac
+++ php-8.4.1/configure.ac
@@ -1560,7 +1560,7 @@ PHP_CONFIGURE_PART([Configuring libtool]
dnl Silence warning: `ar: 'u' modifier ignored since 'D' is the default`
dnl Silence warning: "ar: 'u' modifier ignored since 'D' is the default".
dnl See https://github.com/php/php-src/pull/3017
-AC_SUBST(AR_FLAGS, [cr])
+AC_SUBST(AR_FLAGS, [Dcr])
-AC_SUBST([AR_FLAGS], [cr])
+AC_SUBST([AR_FLAGS], [Dcr])
dnl Only allow AC_PROG_CXX and AC_PROG_CXXCPP if they are explicitly called (by
dnl PHP_REQUIRE_CXX). Otherwise AC_PROG_LIBTOOL fails if there is no working C++

View File

@@ -16,11 +16,11 @@ Signed-off-by: Arjen de Korte <build+github@de-korte.org>
ext/phar/zip.c | 2 +-
6 files changed, 18 insertions(+), 5 deletions(-)
Index: php-8.3.8/ext/phar/phar.c
Index: php-8.4.10/ext/phar/phar.c
===================================================================
--- php-8.3.8.orig/ext/phar/phar.c
+++ php-8.3.8/ext/phar/phar.c
@@ -2996,7 +2996,7 @@ int phar_flush(phar_archive_data *phar,
--- php-8.4.10.orig/ext/phar/phar.c
+++ php-8.4.10/ext/phar/phar.c
@@ -2965,7 +2965,7 @@ void phar_flush_ex(phar_archive_data *ph
4: metadata-len
+: metadata
*/
@@ -29,12 +29,12 @@ Index: php-8.3.8/ext/phar/phar.c
phar_set_32(entry_buffer, entry->uncompressed_filesize);
phar_set_32(entry_buffer+4, mytime);
phar_set_32(entry_buffer+8, entry->compressed_filesize);
Index: php-8.3.8/ext/phar/phar_internal.h
Index: php-8.4.10/ext/phar/phar_internal.h
===================================================================
--- php-8.3.8.orig/ext/phar/phar_internal.h
+++ php-8.3.8/ext/phar/phar_internal.h
@@ -427,6 +427,21 @@ static inline enum phar_fp_type phar_get
return PHAR_G(cached_fp)[entry->phar->phar_pos].manifest[entry->manifest_pos].fp_type;
--- php-8.4.10.orig/ext/phar/phar_internal.h
+++ php-8.4.10/ext/phar/phar_internal.h
@@ -315,6 +315,21 @@ static inline php_stream *phar_get_pharf
return PHAR_G(cached_fp)[phar->phar_pos].fp;
}
+static inline time_t source_date_epoch_time(time_t *tloc)
@@ -52,28 +52,28 @@ Index: php-8.3.8/ext/phar/phar_internal.h
+ return ts;
+}
+
static inline zend_off_t phar_get_fp_offset(phar_entry_info *entry)
static inline enum phar_fp_type phar_get_fp_type(const phar_entry_info *entry)
{
if (!entry->is_persistent) {
Index: php-8.3.8/ext/phar/stream.c
Index: php-8.4.10/ext/phar/stream.c
===================================================================
--- php-8.3.8.orig/ext/phar/stream.c
+++ php-8.3.8/ext/phar/stream.c
--- php-8.4.10.orig/ext/phar/stream.c
+++ php-8.4.10/ext/phar/stream.c
@@ -474,7 +474,7 @@ static int phar_stream_flush(php_stream
phar_entry_data *data = (phar_entry_data *) stream->abstract;
if (data->internal_file->is_modified) {
- data->internal_file->timestamp = time(0);
+ data->internal_file->timestamp = source_date_epoch_time(0);
ret = phar_flush(data->phar, 0, 0, 0, &error);
phar_flush(data->phar, &error);
if (error) {
php_stream_wrapper_log_error(stream->wrapper, REPORT_ERRORS, "%s", error);
Index: php-8.3.8/ext/phar/tar.c
Index: php-8.4.10/ext/phar/tar.c
===================================================================
--- php-8.3.8.orig/ext/phar/tar.c
+++ php-8.3.8/ext/phar/tar.c
@@ -965,7 +965,7 @@ int phar_tar_flush(phar_archive_data *ph
char halt_stub[] = "__HALT_COMPILER();";
--- php-8.4.10.orig/ext/phar/tar.c
+++ php-8.4.10/ext/phar/tar.c
@@ -972,7 +972,7 @@ void phar_tar_flush(phar_archive_data *p
char *buf, *signature, sigbuf[8];
entry.flags = PHAR_ENT_PERM_DEF_FILE;
- entry.timestamp = time(NULL);
@@ -81,11 +81,11 @@ Index: php-8.3.8/ext/phar/tar.c
entry.is_modified = 1;
entry.is_crc_checked = 1;
entry.is_tar = 1;
Index: php-8.3.8/ext/phar/util.c
Index: php-8.4.10/ext/phar/util.c
===================================================================
--- php-8.3.8.orig/ext/phar/util.c
+++ php-8.3.8/ext/phar/util.c
@@ -584,7 +584,7 @@ phar_entry_data *phar_get_or_create_entr
--- php-8.4.10.orig/ext/phar/util.c
+++ php-8.4.10/ext/phar/util.c
@@ -701,7 +701,7 @@ phar_entry_data *phar_get_or_create_entr
phar_add_virtual_dirs(phar, path, path_len);
etemp.is_modified = 1;
@@ -94,16 +94,16 @@ Index: php-8.3.8/ext/phar/util.c
etemp.is_crc_checked = 1;
etemp.phar = phar;
etemp.filename = estrndup(path, path_len);
Index: php-8.3.8/ext/phar/zip.c
Index: php-8.4.10/ext/phar/zip.c
===================================================================
--- php-8.3.8.orig/ext/phar/zip.c
+++ php-8.3.8/ext/phar/zip.c
@@ -1236,7 +1236,7 @@ int phar_zip_flush(phar_archive_data *ph
--- php-8.4.10.orig/ext/phar/zip.c
+++ php-8.4.10/ext/phar/zip.c
@@ -1271,7 +1271,7 @@ void phar_zip_flush(phar_archive_data *p
pass.error = &temperr;
entry.flags = PHAR_ENT_PERM_DEF_FILE;
- entry.timestamp = time(NULL);
+ entry.timestamp = source_date_epoch_time(NULL);
entry.is_modified = 1;
entry.is_zip = 1;
entry.is_zip = true;
entry.phar = phar;

View File

@@ -1,20 +1,20 @@
Index: php-8.2.7/ext/date/config0.m4
Index: php-8.4.1/ext/date/config0.m4
===================================================================
--- php-8.2.7.orig/ext/date/config0.m4
+++ php-8.2.7/ext/date/config0.m4
@@ -23,6 +23,8 @@ timelib_sources="lib/astro.c lib/dow.c l
PHP_NEW_EXTENSION(date, php_date.c $timelib_sources, no,, $PHP_DATE_CFLAGS)
--- php-8.4.1.orig/ext/date/config0.m4
+++ php-8.4.1/ext/date/config0.m4
@@ -30,6 +30,8 @@ PHP_NEW_EXTENSION([date],
[no],,
[$PHP_DATE_CFLAGS])
+PHP_ADD_MAKEFILE_FRAGMENT()
+
PHP_ADD_BUILD_DIR([$ext_builddir/lib], 1)
PHP_ADD_BUILD_DIR([$ext_builddir/lib], [1])
PHP_ADD_INCLUDE([$ext_builddir/lib])
PHP_ADD_INCLUDE([$ext_srcdir/lib])
Index: php-8.2.7/ext/date/Makefile.frag
Index: php-8.4.1/ext/date/Makefile.frag
===================================================================
--- /dev/null
+++ php-8.2.7/ext/date/Makefile.frag
+++ php-8.4.1/ext/date/Makefile.frag
@@ -0,0 +1,6 @@
+$(srcdir)/lib/parse_date.c: $(srcdir)/lib/parse_date.re
+ @(cd $(top_srcdir); $(RE2C) $(RE2C_FLAGS) -b --no-generation-date -o ext/date/lib/parse_date.c ext/date/lib/parse_date.re)

View File

@@ -1,8 +1,8 @@
Index: php-8.3.0/php.ini-production
Index: php-8.4.1/php.ini-production
===================================================================
--- php-8.3.0.orig/php.ini-production
+++ php-8.3.0/php.ini-production
@@ -752,7 +752,7 @@ default_charset = "UTF-8"
--- php-8.4.1.orig/php.ini-production
+++ php-8.4.1/php.ini-production
@@ -738,7 +738,7 @@ default_charset = "UTF-8"
;;;;;;;;;;;;;;;;;;;;;;;;;
; UNIX: "/path1:/path2"
@@ -11,7 +11,7 @@ Index: php-8.3.0/php.ini-production
;
; Windows: "\path1;\path2"
;include_path = ".;c:\php\includes"
@@ -986,7 +986,7 @@ cli_server.color = On
@@ -963,7 +963,7 @@ cli_server.color = On
[Date]
; Defines the default timezone used by the date functions
; https://php.net/date.timezone
@@ -20,7 +20,7 @@ Index: php-8.3.0/php.ini-production
; https://php.net/date.default-latitude
;date.default_latitude = 31.7667
@@ -1179,7 +1179,7 @@ mysqli.max_persistent = -1
@@ -1149,7 +1149,7 @@ mysqli.max_persistent = -1
; Allow or prevent persistent links.
; https://php.net/mysqli.allow-persistent
@@ -29,10 +29,10 @@ Index: php-8.3.0/php.ini-production
; Maximum number of links. -1 means no limit.
; https://php.net/mysqli.max-links
Index: php-8.3.0/sapi/fpm/www.conf.in
Index: php-8.4.1/sapi/fpm/www.conf.in
===================================================================
--- php-8.3.0.orig/sapi/fpm/www.conf.in
+++ php-8.3.0/sapi/fpm/www.conf.in
--- php-8.4.1.orig/sapi/fpm/www.conf.in
+++ php-8.4.1/sapi/fpm/www.conf.in
@@ -27,6 +27,8 @@
; If the group is not set, the user's group is used.
user = @php_fpm_user@

View File

@@ -2,16 +2,16 @@
scripts/php-config.in | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
Index: php-8.0.0/scripts/php-config.in
Index: php-8.4.1/scripts/php-config.in
===================================================================
--- php-8.0.0.orig/scripts/php-config.in 2020-11-24 18:04:03.000000000 +0100
+++ php-8.0.0/scripts/php-config.in 2021-01-07 10:13:28.462563114 +0100
--- php-8.4.1.orig/scripts/php-config.in
+++ php-8.4.1/scripts/php-config.in
@@ -6,7 +6,7 @@ datarootdir="@datarootdir@"
exec_prefix="@exec_prefix@"
version="@PHP_VERSION@"
vernum="@PHP_VERSION_ID@"
-include_dir="@includedir@/php"
+include_dir="@includedir@/php8"
lib_dir="@orig_libdir@"
includes="-I$include_dir -I$include_dir/main -I$include_dir/TSRM -I$include_dir/Zend -I$include_dir/ext -I$include_dir/ext/date/lib"
ldflags="@PHP_LDFLAGS@"
libs="@EXTRA_LIBS@"

View File

@@ -3,10 +3,10 @@
scripts/phpize.in | 4 ++--
2 files changed, 4 insertions(+), 4 deletions(-)
Index: php-8.0.0/scripts/Makefile.frag
Index: php-8.4.1/scripts/Makefile.frag
===================================================================
--- php-8.0.0.orig/scripts/Makefile.frag 2020-11-24 18:04:03.000000000 +0100
+++ php-8.0.0/scripts/Makefile.frag 2021-01-07 10:13:16.914490379 +0100
--- php-8.4.1.orig/scripts/Makefile.frag
+++ php-8.4.1/scripts/Makefile.frag
@@ -2,8 +2,8 @@
# Build environment install
#
@@ -18,10 +18,10 @@ Index: php-8.0.0/scripts/Makefile.frag
BUILD_FILES = \
scripts/phpize.m4 \
Index: php-8.0.0/scripts/phpize.in
Index: php-8.4.1/scripts/phpize.in
===================================================================
--- php-8.0.0.orig/scripts/phpize.in 2020-11-24 18:04:03.000000000 +0100
+++ php-8.0.0/scripts/phpize.in 2021-01-07 10:13:16.914490379 +0100
--- php-8.4.1.orig/scripts/phpize.in
+++ php-8.4.1/scripts/phpize.in
@@ -4,8 +4,8 @@
prefix='@prefix@'
datarootdir='@datarootdir@'

View File

@@ -1,13 +1,13 @@
Index: php-8.2.8/ext/phar/Makefile.frag
Index: php-8.4.1/ext/phar/Makefile.frag
===================================================================
--- php-8.2.8.orig/ext/phar/Makefile.frag
+++ php-8.2.8/ext/phar/Makefile.frag
@@ -46,7 +46,7 @@ $(builddir)/phar.phar: $(builddir)/phar.
--- php-8.4.1.orig/ext/phar/Makefile.frag
+++ php-8.4.1/ext/phar/Makefile.frag
@@ -45,7 +45,7 @@ $(builddir)/phar.phar: $(builddir)/phar.
if [ "$(TEST_PHP_EXECUTABLE_RES)" != 1 ]; then \
rm -f $(builddir)/phar.phar; \
rm -f $(srcdir)/phar.phar; \
- $(PHP_PHARCMD_EXECUTABLE) $(PHP_PHARCMD_SETTINGS) $(builddir)/phar.php pack -f $(builddir)/phar.phar -a pharcommand -c auto -x \\.svn -p 0 -s $(srcdir)/phar/phar.php -h sha1 -b "$(PHP_PHARCMD_BANG)" $(srcdir)/phar/; \
+ $(PHP_PHARCMD_EXECUTABLE) $(PHP_PHARCMD_SETTINGS) $(builddir)/phar.php pack -f $(builddir)/phar.phar -a pharcommand -c auto -x \\.svn -p 0 -s $(srcdir)/phar/phar.php -h sha1 -b "$(PHP_PHARCMD_BANG)" -l 9 $(srcdir)/phar/*.inc; \
- $(PHP_PHARCMD_EXECUTABLE) $(PHP_PHARCMD_SETTINGS) $(builddir)/phar.php pack -f $(builddir)/phar.phar -a pharcommand -c auto -p 0 -s $(srcdir)/phar/phar.php -h sha1 -b "$(PHP_PHARCMD_BANG)" $(srcdir)/phar/; \
+ $(PHP_PHARCMD_EXECUTABLE) $(PHP_PHARCMD_SETTINGS) $(builddir)/phar.php pack -f $(builddir)/phar.phar -a pharcommand -c auto -p 0 -s $(srcdir)/phar/phar.php -h sha1 -b "$(PHP_PHARCMD_BANG)" -l 9 $(srcdir)/phar/*.inc; \
chmod +x $(builddir)/phar.phar; \
else \
echo "Skipping phar.phar generating during cross compilation"; \

View File

@@ -36,13 +36,13 @@ r2: add filesystem trawl to set up name alias index
r1: initial revision
Index: php-8.3.11/ext/date/config0.m4
Index: php-8.4.1/ext/date/config0.m4
===================================================================
--- php-8.3.11.orig/ext/date/config0.m4
+++ php-8.3.11/ext/date/config0.m4
--- php-8.4.1.orig/ext/date/config0.m4
+++ php-8.4.1/ext/date/config0.m4
@@ -4,6 +4,19 @@ AC_CHECK_HEADERS([io.h])
dnl Check for strtoll, atoll
AC_CHECK_FUNCS(strtoll atoll)
AC_CHECK_FUNCS([strtoll atoll])
+PHP_ARG_WITH(system-tzdata, for use of system timezone data,
+[ --with-system-tzdata[=DIR] to specify use of system timezone data],
@@ -60,10 +60,10 @@ Index: php-8.3.11/ext/date/config0.m4
AX_CHECK_COMPILE_FLAG([-Wno-implicit-fallthrough],
[PHP_DATE_CFLAGS="$PHP_DATE_CFLAGS -Wno-implicit-fallthrough"],,
[-Werror])
Index: php-8.3.11/ext/date/lib/parse_tz.c
Index: php-8.4.1/ext/date/lib/parse_tz.c
===================================================================
--- php-8.3.11.orig/ext/date/lib/parse_tz.c
+++ php-8.3.11/ext/date/lib/parse_tz.c
--- php-8.4.1.orig/ext/date/lib/parse_tz.c
+++ php-8.4.1/ext/date/lib/parse_tz.c
@@ -26,9 +26,33 @@
#include "timelib.h"
#include "timelib_private.h"
@@ -728,11 +728,11 @@ Index: php-8.3.11/ext/date/lib/parse_tz.c
} else {
*error_code = TIMELIB_ERROR_NO_SUCH_TIMEZONE;
tmp = NULL;
Index: php-8.3.11/ext/date/php_date.c
Index: php-8.4.1/ext/date/php_date.c
===================================================================
--- php-8.3.11.orig/ext/date/php_date.c
+++ php-8.3.11/ext/date/php_date.c
@@ -490,7 +490,11 @@ PHP_MINFO_FUNCTION(date)
--- php-8.4.1.orig/ext/date/php_date.c
+++ php-8.4.1/ext/date/php_date.c
@@ -489,7 +489,11 @@ PHP_MINFO_FUNCTION(date)
php_info_print_table_row(2, "date/time support", "enabled");
php_info_print_table_row(2, "timelib version", TIMELIB_ASCII_VERSION);
php_info_print_table_row(2, "\"Olson\" Timezone Database Version", tzdb->version);

View File

@@ -1,3 +1,981 @@
-------------------------------------------------------------------
Thu Jul 3 13:05:42 UTC 2025 - pgajdos@suse.com
- version update to 8.4.10 [bsc#1246146][bsc#1246148][bsc#1246167]
BcMath:
Fixed bug GH-18641 (Accessing a BcMath\Number property by ref crashes).
Core:
Fixed bugs GH-17711 and GH-18022 (Infinite recursion on deprecated attribute evaluation) and GH-18464 (Recursion protection for deprecation constants not released on bailout).
Fixed GH-18695 (zend_ast_export() - float number is not preserved).
Fix handling of references in zval_try_get_long().
Do not delete main chunk in zend_gc.
Fix compile issues with zend_alloc and some non-default options.
Curl:
Fix memory leak when setting a list via curl_setopt fails.
Date:
Fix leaks with multiple calls to DatePeriod iterator current().
DOM:
Fixed bug GH-18744 (classList works not correctly if copy HTMLElement by clone keyword).
FPM:
Fixed GH-18662 (fpm_get_status segfault).
Hash:
Fixed bug GH-14551 (PGO build fails with xxhash).
Intl:
Fix memory leak in intl_datetime_decompose() on failure.
Fix memory leak in locale lookup on failure.
Opcache:
Fixed bug GH-18743 (Incompatibility in Inline TLS Assembly on Alpine 3.22).
ODBC:
Fix memory leak on php_odbc_fetch_hash() failure.
OpenSSL:
Fix memory leak of X509_STORE in php_openssl_setup_verify() on failure.
Fixed bug #74796 (Requests through http proxy set peer name).
PGSQL:
Fixed GHSA-hrwm-9436-5mv3 (pgsql extension does not check for errors during escaping). (CVE-2025-1735)
Fix warning not being emitted when failure to cancel a query with pg_cancel_query().
PDO ODBC:
Fix memory leak if WideCharToMultiByte() fails.
PDO Sqlite:
Fixed memory leak with Pdo_Sqlite::createCollation when the callback has an incorrect return type.
Phar:
Add missing filter cleanups on phar failure.
Fixed bug GH-18642 (Signed integer overflow in ext/phar fseek).
PHPDBG:
Fix 'phpdbg --help' segfault on shutdown with USE_ZEND_ALLOC=0.
Random:
Fix reference type confusion and leak in user random engine.
Readline:
Fix memory leak when calloc() fails in php_readline_completion_cb().
SimpleXML:
Fixed bug GH-18597 (Heap-buffer-overflow in zend_alloc.c when assigning string with UTF-8 bytes).
SOAP:
Fix memory leaks in php_http.c when call_user_function() fails.
Fixed GHSA-453j-q27h-5p8x (NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix). (CVE-2025-6491)
Standard:
Fixed GHSA-3cr5-j632-f35r (Null byte termination in hostnames). (CVE-2025-1220)
Tidy:
Fix memory leak in tidy output handler on error.
Fix tidyOptIsReadonly deprecation, using tidyOptGetCategory.
- modified patches
% php-build-reproducible-phar.patch (refreshed)
-------------------------------------------------------------------
Fri Jun 6 08:25:15 UTC 2025 - pgajdos@suse.com
- version update to 8.4.8
Core:
Fixed GH-18480 (array_splice with large values for offset/length arguments).
Partially fixed GH-18572 (nested object comparisons leading to stack overflow).
Fixed OSS-Fuzz #417078295.
Fixed OSS-Fuzz #418106144.
Curl:
Fixed GH-18460 (curl_easy_setopt with CURLOPT_USERPWD/CURLOPT_USERNAME/ CURLOPT_PASSWORD set the Authorization header when set to NULL).
Date:
Fixed bug GH-18076 (Since PHP 8, the date_sun_info() function returns inaccurate sunrise and sunset times, but other calculated times are correct) (JiriJozif).
Fixed bug GH-18481 (date_sunrise with unexpected nan value for the offset).
DOM:
Backport lexbor/lexbor#274.
Intl:
Fix various reference issues.
LDAP:
Fixed bug GH-18529 (ldap no longer respects TLS_CACERT from ldaprc in ldap_start_tls()).
Opcache:
Fixed bug GH-18417 (Windows SHM reattachment fails when increasing memory_consumption or jit_buffer_size).
Fixed bug GH-18297 (Exception not handled when jit guard is triggered).
Fixed bug GH-18408 (Snapshotted poly_func / poly_this may be spilled).
Fixed bug GH-18567 (Preloading with internal class alias triggers assertion failure).
Fixed bug GH-18534 (FPM exit code 70 with enabled opcache and hooked properties in traits).
Fix leak of accel_globals->key.
OpenSSL:
Fix missing checks against php_set_blocking() in xp_ssl.c.
SPL:
Fixed bug GH-18421 (Integer overflow with large numbers in LimitIterator).
Standard:
Fixed bug GH-17403 (Potential deadlock when putenv fails).
Fixed bug GH-18400 (http_build_query type error is inaccurate).
Fixed bug GH-18509 (Dynamic calls to assert() ignore zend.assertions).
Windows:
Fix leak+crash with sapi_windows_set_ctrl_handler().
Zip:
Fixed bug GH-18431 (Registering ZIP progress callback twice doesn't work).
Fixed bug GH-18438 (Handling of empty data and errors in ZipArchive::addPattern).
-------------------------------------------------------------------
Fri May 9 16:20:20 UTC 2025 - Arjen de Korte <suse+build@de-korte.org>
- version update to 8.4.7
Core:
Fixed bug GH-18038 (Lazy proxy calls magic methods twice).
Fixed bug GH-18209 (Use-after-free in extract() with EXTR_REFS).
Fixed bug GH-18268 (Segfault in array_walk() on object with added property hooks).
Fixed bug GH-18304 (Changing the properties of a DateInterval through dynamic properties triggers a SegFault).
Fix some leaks in php_scandir.
DBA:
FIxed bug GH-18247 dba_popen() memory leak on invalid path.
Filter:
Fixed bug GH-18309 (ipv6 filter integer overflow).
GD:
Fixed imagecrop() overflow with rect argument with x/width y/heigh usage in gdImageCrop().
Fixed GH-18243 imagettftext() overflow/underflow on font size value.
Intl:
Fix reference support for intltz_get_offset().
LDAP:
Fixed bug GH-17776 (LDAP_OPT_X_TLS_* options can't be overridden).
Fix NULL deref on high modification key.
libxml:
Fixed custom external entity loader returning an invalid resource leading to a confusing TypeError message.
Opcache:
Fixed bug GH-18294 (assertion failure zend_jit_ir.c).
Fixed bug GH-18289 (Fix segfault in JIT).
Fixed bug GH-18136 (tracing JIT floating point register clobbering on Windows and ARM64).
OpenSSL:
Fix memory leak in openssl_sign() when passing invalid algorithm.
Fix potential leaks when writing to BIO fails.
PDO Firebird:
Fixed bug GH-18276 (persistent connection - "zend_mm_heap corrupted" with setAttribute())
Fixed bug GH-17383 (PDOException has wrong code and message since PHP 8.4)
PDO Sqlite:
Fix memory leak on error return of collation callback.
PgSql:
Fix uouv in pg_put_copy_end().
SPL:
Fixed bug GH-18322 (SplObjectStorage debug handler mismanages memory).
Standard:
Fixed bug GH-18145 (php8ts crashes in php_clear_stat_cache()).
Fix resource leak in iptcembed() on error.
Tests:
Address deprecated PHP 8.4 session options to prevent test failures.
Zip:
Fix uouv when handling empty options in ZipArchive::addGlob().
Fix memory leak when handling a too long path in ZipArchive::addGlob().
-------------------------------------------------------------------
Fri Apr 18 06:10:13 UTC 2025 - Manu Maier <mmanu84@outlook.de>
- version update to 8.4.6
BCMath:
Fixed pointer subtraction for scale.
Core:
Fixed property hook backing value access in multi-level inheritance.
Fixed accidentally inherited default value in overridden virtual properties.
Fixed bug GH-17376 (Broken JIT polymorphism for property hooks added to child class).
Fixed bug GH-17913 (ReflectionFunction::isDeprecated() returns incorrect results for closures created from magic __call()).
Fixed bug GH-17941 (Stack-use-after-return with lazy objects and hooks).
Fixed bug GH-17988 (Incorrect handling of hooked props without get hook in get_object_vars()).
Fixed bug GH-17998 (Skipped lazy object initialization on primed SIMPLE_WRITE cache).
Fixed bug GH-17998 (Assignment to backing value in set hook of lazy proxy calls hook again).
Fixed bug GH-17961 (use-after-free during dl()'ed module class destruction).
Fixed bug GH-15367 (dl() of module with aliased class crashes in shutdown).
Fixed OSS-Fuzz #403308724.
Fixed bug GH-13193 again (Significant performance degradation in 'foreach').
DBA:
Fixed assertion violation when opening the same file with dba_open multiple times.
DOM:
Fixed bug GH-17991 (Assertion failure dom_attr_value_write).
Fix weird unpack behaviour in DOM.
Fixed bug GH-18090 (DOM: Svg attributes and tag names are being lowercased).
Fix xinclude destruction of live attributes.
Fuzzer:
Fixed bug GH-18081 (Memory leaks in error paths of fuzzer SAPI).
GD:
Fixed bug GH-17984 (calls with arguments as array with references).
LDAP:
Fixed bug GH-18015 (Error messages for ldap_mod_replace are confusing).
Mbstring:
Fixed bug GH-17989 (mb_output_handler crash with unset http_output_conv_mimetypes).
Opcache:
Fixed bug GH-15834 (Segfault with hook "simple get" cache slot and minimal JIT).
Fixed bug GH-17966 (Symfony JIT 1205 assertion failure).
Fixed bug GH-18037 (SEGV Zend/zend_execute.c).
Fixed bug GH-18050 (IN_ARRAY optimization in DFA pass is broken).
Fixed bug GH-18113 (stack-buffer-overflow ext/opcache/jit/ir/ir_sccp.c).
Fixed bug GH-18112 (NULL access with preloading and INI option).
Fixed bug GH-18107 (Opcache CFG jmp optimization with try-finally breaks the exception table).
PDO:
Fix memory leak when destroying PDORow.
Standard:
Fix memory leaks in array_any() / array_all().
SOAP:
Fixed bug #66049 (Typemap can break parsing in parse_packet_soap leading to a segfault) .
SPL:
Fixed bug GH-18018 (RC1 data returned from offsetGet causes UAF in ArrayObject).
Treewide:
Fixed bug GH-17736 (Assertion failure zend_reference_destroy()).
Windows:
Fixed bug GH-17836 (zend_vm_gen.php shouldn't break on Windows line endings).
-------------------------------------------------------------------
Wed Apr 2 08:57:28 UTC 2025 - pgajdos@suse.com
- version update to 8.4.5
BCMath:
Fixed bug GH-17398 (bcmul memory leak).
Core:
Fixed bug GH-17623 (Broken stack overflow detection for variable compilation).
Fixed bug GH-17618 (UnhandledMatchError does not take zend.exception_ignore_args=1 into account).
Fix fallback paths in fast_long_{add,sub}_function.
Fixed bug OSS-Fuzz #391975641 (Crash when accessing property backing value by reference).
Fixed bug GH-17718 (Calling static methods on an interface that has `__callStatic` is allowed).
Fixed bug GH-17713 (ReflectionProperty::getRawValue() and related methods may call hooks of overridden properties).
Fixed bug GH-17916 (Final abstract properties should error).
Fixed bug GH-17866 (zend_mm_heap corrupted error after upgrading from 8.4.3 to 8.4.4).
Fixed GHSA-rwp7-7vc6-8477 (Reference counting in php_request_shutdown causes Use-After-Free). (CVE-2024-11235)
DOM:
Fixed bug GH-17609 (Typo in error message: Dom\NO_DEFAULT_NS instead of Dom\HTML_NO_DEFAULT_NS).
Fixed bug GH-17802 (\Dom\HTMLDocument querySelector attribute name is case sensitive in HTML).
Fixed bug GH-17847 (xinclude destroys live node).
Fix using Dom\Node with Dom\XPath callbacks.
GD:
Fixed bug GH-17703 (imagescale with both width and height negative values triggers only an Exception on width).
Fixed bug GH-17772 (imagepalettetotruecolor crash with memory_limit=2M).
FFI:
Fix FFI Parsing of Pointer Declaration Lists.
FPM:
Fixed bug GH-17643 (FPM with httpd ProxyPass encoded PATH_INFO env).
LDAP:
Fixed bug GH-17704 (ldap_search fails when $attributes contains a non-packed array with numerical keys).
LibXML:
Fixed GHSA-wg4p-4hqh-c3g9 (Reocurrence of #72714).
Fixed GHSA-p3x9-6h7p-cgfc (libxml streams use wrong `content-type` header when requesting a redirected resource). (CVE-2025-1219)
MBString:
Fixed bug GH-17503 (Undefined float conversion in mb_convert_variables).
Opcache:
Fixed bug GH-17654 (Multiple classes using same trait causes function JIT crash).
Fixed bug GH-17577 (JIT packed type guard crash).
Fixed bug GH-17747 (Exception on reading property in register-based FETCH_OBJ_R breaks JIT).
Fixed bug GH-17715 (Null pointer deref in observer API when calling cases() method on preloaded enum).
Fixed bug GH-17868 (Cannot allocate memory with tracing JIT on 8.4.4).
PDO_SQLite:
Fixed GH-17837 ()::getColumnMeta() on unexecuted statement segfaults).
Fix cycle leak in sqlite3 setAuthorizer().
Fix memory leaks in pdo_sqlite callback registration.
Phar:
Fixed bug GH-17808: PharFileInfo refcount bug.
PHPDBG:
Partially fixed bug GH-17387 (Trivial crash in phpdbg lexer).
Fix memory leak in phpdbg calling registered function.
Reflection:
Fixed bug GH-15902 (Core dumped in ext/reflection/php_reflection.c).
Fixed missing final and abstract flags when dumping properties.
Standard:
Fixed bug #72666 (stat cache clearing inconsistent between file:// paths and plain paths).
Streams:
Fixed bug GH-17650 (realloc with size 0 in user_filters.c).
Fix memory leak on overflow in _php_stream_scandir().
Fixed GHSA-hgf5-96fm-v528 (Stream HTTP wrapper header check might omit basic auth header). (CVE-2025-1736)
Fixed GHSA-52jp-hrpf-2jff (Stream HTTP wrapper truncate redirect location to 1024 bytes). (CVE-2025-1861)
Fixed GHSA-pcmh-g36c-qc44 (Streams HTTP wrapper does not fail for headers without colon). (CVE-2025-1734)
Fixed GHSA-v8xr-gpvj-cx9g (Header parser of `http` stream wrapper does not handle folded headers). (CVE-2025-1217)
Windows:
Fixed phpize for Windows 11 (24H2).
Fixed GH-17855 (CURL_STATICLIB flag set even if linked with shared lib).
Zlib:
Fixed bug GH-17745 (zlib extension incorrectly handles object arguments).
Fix memory leak when encoding check fails.
Fix zlib support for large files.
- version update to 8.4.4
Core:
Fixed bug GH-17234 (Numeric parent hook call fails with assertion).
Fixed bug GH-16892 (ini_parse_quantity() fails to parse inputs starting with 0x0b).
Fixed bug GH-16886 (ini_parse_quantity() fails to emit warning for 0x+0).
Fixed bug GH-17222 (__PROPERTY__ magic constant does not work in all constant expression contexts).
Fixed bug GH-17214 (Relax final+private warning for trait methods with inherited final).
Fixed NULL arithmetic during system program execution on Windows.
Fixed potential OOB when checking for trailing spaces on Windows.
Fixed bug GH-17408 (Assertion failure Zend/zend_exceptions.c).
Fix may_have_extra_named_args flag for ZEND_AST_UNPACK.
Fix NULL arithmetic in System V shared memory emulation for Windows.
Fixed bug GH-17597 (#[\Deprecated] does not work for __call() and __callStatic()).
DOM:
Fixed bug GH-17397 (Assertion failure ext/dom/php_dom.c).
Fixed bug GH-17486 (Incorrect error line numbers reported in Dom\HTMLDocument::createFromString).
Fixed bug GH-17481 (UTF-8 corruption in \Dom\HTMLDocument).
Fixed bug GH-17500 (Segfault with requesting nodeName on nameless doctype).
Fixed bug GH-17485 (upstream fix, Self-closing tag on void elements shouldn't be a parse error/warning in \Dom\HTMLDocument).
Fixed bug GH-17572 (getElementsByTagName returns collections with tagName-based indexing).
Enchant:
Fix crashes in enchant when passing null bytes.
FTP:
Fixed bug GH-16800 (ftp functions can abort with EINTR).
GD:
Fixed bug GH-17349 (Tiled truecolor filling looses single color transparency).
Fixed bug GH-17373 (imagefttext() ignores clipping rect for palette images).
Ported fix for libgd 223 (gdImageRotateGeneric() does not properly interpolate).
Added support for reading GIFs without colormap to bundled libgd.
Gettext:
Fixed bug GH-17400 (bindtextdomain SEGV on invalid domain).
Intl:
Fixed bug GH-11874 (intl causing segfault in docker images).
Opcache:
Fixed bug GH-15981 (Segfault with frameless jumps and minimal JIT).
Fixed bug GH-17307 (Internal closure causes JIT failure).
Fixed bug GH-17428 (Assertion failure ext/opcache/jit/zend_jit_ir.c:8940).
Fixed bug GH-17564 (Potential UB when reading from / writing to struct padding).
PCNTL:
Fixed pcntl_setcpuaffinity exception type from ValueError to TypeError for the cpu mask argument with entries type different than int/string.
PCRE:
Fixed bug GH-17122 (memory leak in regex).
PDO:
Fixed a memory leak when the GC is used to free a PDOStatment.
Fixed a crash in the PDO Firebird Statement destructor.
Fixed UAFs when changing default fetch class ctor args.
PgSql:
Fixed build failure when the constant PGRES_TUPLES_CHUNK is not present in the system.
Phar:
Fixed bug GH-17518 (offset overflow phar extractTo()).
PHPDBG:
Fix crashes in function registration + test.
Session:
Fix type confusion with session SID constant.
Fixed bug GH-17541 (ext/session NULL pointer dereferencement during ID reset).
SimpleXML:
Fixed bug GH-17409 (Assertion failure Zend/zend_hash.c:1730).
SNMP:
Fixed bug GH-17330 (SNMP::setSecurity segfault on closed session).
SPL:
Fixed bug GH-15833 (Segmentation fault (access null pointer) in ext/spl/spl_array.c).
Fixed bug GH-17516 (SplFileTempObject::getPathInfo() Undefined behavior on invalid class).
Standard:
Fixed bug GH-17447 (Assertion failure when array popping a self addressing variable).
Windows:
Fixed clang compiler detection.
Zip:
Fixed bug GH-17139 (Fix zip_entry_name() crash on invalid entry).
- version update to 8.4.3
BcMath:
Fixed bug GH-17049 (Correctly compare 0 and -0).
Fixed bug GH-17061 (Now Number::round() does not remove trailing zeros).
Fixed bug GH-17064 (Correctly round rounding mode with zero edge case).
Fixed bug GH-17275 (Fixed the calculation logic of dividend scale).
Core:
Fixed bug OSS-Fuzz #382922236 (Duplicate dynamic properties in hooked object iterator properties table).
Fixed unstable get_iterator pointer for hooked classes in shm on Windows.
Fixed bug GH-17106 (ZEND_MATCH_ERROR misoptimization).
Fixed bug GH-17162 (zend_array_try_init() with dtor can cause engine UAF).
Fixed bug GH-17101 (AST->string does not reproduce constructor property promotion correctly).
Fixed bug GH-17200 (Incorrect dynamic prop offset in hooked prop iterator).
Fixed bug GH-17216 (Trampoline crash on error).
DBA:
Skip test if inifile is disabled.
DOM:
Fixed bug GH-17145 (DOM memory leak).
Fixed bug GH-17201 (Dom\TokenList issues with interned string replace).
Fixed bug GH-17224 (UAF in importNode).
Embed:
Make build command for program using embed portable.
FFI:
Fixed bug #79075 (FFI header parser chokes on comments).
Fix memory leak on ZEND_FFI_TYPE_CHAR conversion failure.
Fixed bug GH-16013 and bug #80857 (Big endian issues).
Fileinfo:
Fixed bug GH-17039 (PHP 8.4: Incorrect MIME content type).
FPM:
Fixed bug GH-13437 (FPM: ERROR: scoreboard: failed to lock (already locked)).
Fixed bug GH-17112 (Macro redefinitions).
Fixed bug GH-17208 (bug64539-status-json-encoding.phpt fail on 32-bits).
GD:
Fixed bug GH-16255 (Unexpected nan value in ext/gd/libgd/gd_filter.c).
Ported fix for libgd bug 276 (Sometimes pixels are missing when storing images as BMPs).
Gettext:
Fixed bug GH-17202 (Segmentation fault ext/gettext/gettext.c bindtextdomain()).
Iconv:
Fixed bug GH-17047 (UAF on iconv filter failure).
LDAP:
Fixed bug GH-17280 (ldap_search() fails when $attributes array has holes).
LibXML:
Fixed bug GH-17223 (Memory leak in libxml encoding handling).
MBString:
Fixed bug GH-17112 (Macro redefinitions).
Opcache:
opcache_get_configuration() properly reports jit_prof_threshold.
Fixed bug GH-17140 (Assertion failure in JIT trace exit with ZEND_FETCH_DIM_FUNC_ARG).
Fixed bug GH-17151 (Incorrect RC inference of op1 of FETCH_OBJ and INIT_METHOD_CALL).
Fixed bug GH-17246 (GC during SCCP causes segfault).
Fixed bug GH-17257 (UBSAN warning in ext/opcache/jit/zend_jit_vm_helpers.c).
PCNTL:
Fix memory leak in cleanup code of pcntl_exec() when a non stringable value is encountered past the first entry.
PgSql:
Fixed bug GH-17158 (pg_fetch_result Shows Incorrect ArgumentCountError Message when Called With 1 Argument).
Fixed further ArgumentCountError for calls with flexible number of arguments.
Phar:
Fixed bug GH-17137 (Segmentation fault ext/phar/phar.c).
SimpleXML:
Fixed bug GH-17040 (SimpleXML's unset can break DOM objects).
Fixed bug GH-17153 (SimpleXML crash when using autovivification on document).
Sockets:
Fixed bug GH-16276 (socket_strerror overflow handling with INT_MIN).
Fixed overflow on SO_LINGER values setting, strengthening values check on SO_SNDTIMEO/SO_RCVTIMEO for socket_set_option().
SPL:
Fixed bug GH-17198 (SplFixedArray assertion failure with get_object_vars).
Fixed bug GH-17225 (NULL deref in spl_directory.c).
Streams:
Fixed bug GH-17037 (UAF in user filter when adding existing filter name due to incorrect error handling).
Fixed bug GH-16810 (overflow on fopen HTTP wrapper timeout value).
Fixed bug GH-17067 (glob:// wrapper doesn't cater to CWD for ZTS builds).
Windows:
Hardened proc_open() against cmd.exe hijacking.
XML:
Fixed bug GH-1718 (unreachable program point in zend_hash).
- modified patches
% php-build-reproducible-phar.patch (refreshed)
- version update to 8.4.2
BcMath:
Fixed bug GH-16978 (Avoid unnecessary padding with leading zeros) (Saki Takamachi)
Calendar:
Fixed jdtogregorian overflow.
Fixed cal_to_jd julian_days argument overflow.
COM:
Fixed bug GH-16991 (Getting typeinfo of non DISPATCH variant segfaults).
Core:
Fail early in *nix configuration build script.
Fixed bug GH-16344 (setRawValueWithoutLazyInitialization() and skipLazyInitialization() may change initialized proxy).
Fixed bug GH-16727 (Opcache bad signal 139 crash in ZTS bookworm (frankenphp)).
Fixed bug GH-16799 (Assertion failure at Zend/zend_vm_execute.h:7469).
Fixed bug GH-16630 (UAF in lexer with encoding translation and heredocs).
Fix is_zend_ptr() huge block comparison.
Fixed potential OOB read in zend_dirname() on Windows.
Fixed bug GH-15964 (printf() can strip sign of -INF).
Curl:
Fixed bug GH-16802 (open_basedir bypass using curl extension).
Fix various memory leaks in curl mime handling.
DBA:
Fixed bug GH-16990 (dba_list() is now zero-indexed instead of using resource ids) (kocsismate)
DOM:
Fixed bug GH-16777 (Calling the constructor again on a DOM object after it is in a document causes UAF).
Fixed bug GH-16906 (Reloading document can cause UAF in iterator).
FPM:
Fixed GH-16432 (PHP-FPM 8.2 SIGSEGV in fpm_get_status).
Fixed bug GH-16932 (wrong FPM status output).
GD:
Fixed GH-16776 (imagecreatefromstring overflow).
GMP:
Fixed bug GH-16890 (array_sum() with GMP can loose precision (LLP64)).
Hash:
Fixed GH-16711: Segfault in mhash().
Opcache:
Fixed bug GH-16851 (JIT_G(enabled) not set correctly on other threads).
Fixed bug GH-16902 (Set of opcache tests fail zts+aarch64).
Fixed bug GH-16879 (JIT dead code skipping does not update call_level).
OpenSSL:
Prevent unexpected array entry conversion when reading key.
Fix various memory leaks related to openssl exports.
Fix memory leak in php_openssl_pkey_from_zval().
PDO:
Fixed memory leak of `setFetchMode()`.
Phar:
Fixed bug GH-16695 (phar:// tar parser and zero-length file header blocks).
PHPDBG:
Fixed bug GH-15208 (Segfault with breakpoint map and phpdbg_clear()).
SAPI:
Fixed bug GH-16998 (UBSAN warning in rfc1867).
SimpleXML:
Fixed bug GH-16808 (Segmentation fault in RecursiveIteratorIterator ->current() with a xml element input).
SOAP:
Fix make check being invoked in ext/soap.
Standard:
Fixed bug GH-16905 (Internal iterator functions can't handle UNDEF properties).
Fixed bug GH-16957 (Assertion failure in array_shift with self-referencing array).
Streams:
Fixed network connect poll interuption handling.
Windows:
Fixed bug GH-16849 (Error dialog causes process to hang).
Windows Server 2025 is now properly reported.
- version update to 8.4.1
* Property Hooks
* Asymmetric Property Visibility
* Lazy Objects
* PDO driver-specific subclasses
* BCMath object type
* details: https://www.php.net/ChangeLog-8.php#8.4.1
* upgrading notes: https://www.php.net/manual/en/migration84.php
-------------------------------------------------------------------
Fri Mar 14 06:10:13 UTC 2025 - pgajdos@suse.com
- version update to 8.3.19
BCMath:
Fixed bug GH-17398 (bcmul memory leak).
Core:
Fixed bug GH-17623 (Broken stack overflow detection for variable compilation).
Fixed bug GH-17618 (UnhandledMatchError does not take zend.exception_ignore_args=1 into account).
Fix fallback paths in fast_long_{add,sub}_function.
Fixed bug GH-17718 (Calling static methods on an interface that has `__callStatic` is allowed).
Fixed bug GH-17797 (zend_test_compile_string crash on invalid script path).
Fixed GHSA-rwp7-7vc6-8477 (Reference counting in php_request_shutdown causes Use-After-Free). (CVE-2024-11235)
DOM:
Fixed bug GH-17847 (xinclude destroys live node).
FFI:
Fix FFI Parsing of Pointer Declaration Lists.
FPM:
Fixed bug GH-17643 (FPM with httpd ProxyPass encoded PATH_INFO env).
GD:
Fixed bug GH-17772 (imagepalettetotruecolor crash with memory_limit=2M).
LDAP:
Fixed bug GH-17704 (ldap_search fails when $attributes contains a non-packed array with numerical keys).
LibXML:
Fixed GHSA-wg4p-4hqh-c3g9 (Reocurrence of #72714).
Fixed GHSA-p3x9-6h7p-cgfc (libxml streams use wrong `content-type` header when requesting a redirected resource). (CVE-2025-1219)
MBString:
Fixed bug GH-17503 (Undefined float conversion in mb_convert_variables).
Opcache:
Fixed bug GH-17654 (Multiple classes using same trait causes function JIT crash).
Fixed bug GH-17577 (JIT packed type guard crash).
Fixed bug GH-17899 (zend_test_compile_string with invalid path when opcache is enabled).
Fixed bug GH-17868 (Cannot allocate memory with tracing JIT).
PDO_SQLite:
Fixed GH-17837 ()::getColumnMeta() on unexecuted statement segfaults).
Fix cycle leak in sqlite3 setAuthorizer().
Phar:
Fixed bug GH-17808: PharFileInfo refcount bug.
PHPDBG:
Partially fixed bug GH-17387 (Trivial crash in phpdbg lexer).
Fix memory leak in phpdbg calling registered function.
Reflection:
Fixed bug GH-15902 (Core dumped in ext/reflection/php_reflection.c).
Standard:
Fixed bug #72666 (stat cache clearing inconsistent between file:// paths and plain paths).
Streams:
Fixed bug GH-17650 (realloc with size 0 in user_filters.c).
Fix memory leak on overflow in _php_stream_scandir().
Fixed GHSA-hgf5-96fm-v528 (Stream HTTP wrapper header check might omit basic auth header). (CVE-2025-1736)
Fixed GHSA-52jp-hrpf-2jff (Stream HTTP wrapper truncate redirect location to 1024 bytes). (CVE-2025-1861)
Fixed GHSA-pcmh-g36c-qc44 (Streams HTTP wrapper does not fail for headers without colon). (CVE-2025-1734)
Fixed GHSA-v8xr-gpvj-cx9g (Header parser of `http` stream wrapper does not handle folded headers). (CVE-2025-1217)
Windows:
Fixed phpize for Windows 11 (24H2).
Fixed GH-17855 (CURL_STATICLIB flag set even if linked with shared lib).
Zlib:
Fixed bug GH-17745 (zlib extension incorrectly handles object arguments).
Fix memory leak when encoding check fails.
Fix zlib support for large files.
- fixes: CVE-2025-1217 [bsc#1239664]
CVE-2024-11235 [bsc#1239666]
CVE-2025-1734 [bsc#1239668]
CVE-2025-1861 [bsc#1239669]
CVE-2025-1736 [bsc#1239670]
CVE-2025-1219 [bsc#1239667]
-------------------------------------------------------------------
Fri Feb 14 07:11:17 UTC 2025 - pgajdos@suse.com
- version update to 8.3.17
Core:
Fixed bug GH-16892 (ini_parse_quantity() fails to parse inputs starting with 0x0b).
Fixed bug GH-16886 (ini_parse_quantity() fails to emit warning for 0x+0).
Fixed bug GH-17214 (Relax final+private warning for trait methods with inherited final).
Fixed NULL arithmetic during system program execution on Windows.
Fixed potential OOB when checking for trailing spaces on Windows.
Fixed bug GH-17408 (Assertion failure Zend/zend_exceptions.c).
Fix may_have_extra_named_args flag for ZEND_AST_UNPACK.
Fix NULL arithmetic in System V shared memory emulation for Windows.
DOM:
Fixed bug GH-17500 (Segfault with requesting nodeName on nameless doctype).
Enchant:
Fix crashes in enchant when passing null bytes.
FTP:
Fixed bug GH-16800 (ftp functions can abort with EINTR).
GD:
Fixed bug GH-17349 (Tiled truecolor filling looses single color transparency).
Fixed bug GH-17373 (imagefttext() ignores clipping rect for palette images).
Ported fix for libgd 223 (gdImageRotateGeneric() does not properly interpolate).
Intl:
Fixed bug GH-11874 (intl causing segfault in docker images).
Fixed bug GH-17469 (UConverter::transcode always emit E_WARNING on invalid encoding).
Opcache:
Fixed bug GH-17307 (Internal closure causes JIT failure).
Fixed bug GH-17564 (Potential UB when reading from / writing to struct padding).
PDO:
Fixed a memory leak when the GC is used to free a PDOStatment.
Fixed a crash in the PDO Firebird Statement destructor.
Fixed UAFs when changing default fetch class ctor args.
Phar:
Fixed bug GH-17518 (offset overflow phar extractTo()).
PHPDBG:
Fix crashes in function registration + test.
Session:
Fix type confusion with session SID constant.
Fixed bug GH-17541 (ext/session NULL pointer dereferencement during ID reset).
SimpleXML:
Fixed bug GH-17409 (Assertion failure Zend/zend_hash.c:1730).
SNMP:
Fixed bug GH-17330 (SNMP::setSecurity segfault on closed session).
SPL:
Fixed bug GH-17463 (crash on SplTempFileObject::ftruncate with negative value).
Zip:
Fixed bug GH-17139 (Fix zip_entry_name() crash on invalid entry).
-------------------------------------------------------------------
Fri Feb 7 09:29:53 UTC 2025 - pgajdos@suse.com
- obsolete also apache2-mod_php7 [bsc#1236850]
-------------------------------------------------------------------
Fri Jan 17 07:28:45 UTC 2025 - pgajdos@suse.com
- version update to 8.3.16
Core:
Fixed bug GH-17106 (ZEND_MATCH_ERROR misoptimization).
Fixed bug GH-17162 (zend_array_try_init() with dtor can cause engine UAF).
Fixed bug GH-17101 (AST->string does not reproduce constructor property promotion correctly).
Fixed bug GH-17211 (observer segfault on function loaded with dl()).
Fixed bug GH-17216 (Trampoline crash on error).
Date:
Fixed bug GH-14709 DatePeriod::__construct() overflow on recurrences.
DBA:
Skip test if inifile is disabled.
DOM:
Fixed bug GH-17224 (UAF in importNode).
Embed:
Make build command for program using embed portable.
FFI:
Fixed bug #79075 (FFI header parser chokes on comments).
Fix memory leak on ZEND_FFI_TYPE_CHAR conversion failure.
Fixed bug GH-16013 and bug #80857 (Big endian issues).
Filter:
Fixed bug GH-16944 (Fix filtering special IPv4 and IPv6 ranges, by using information from RFC 6890).
FPM:
Fixed bug GH-13437 (FPM: ERROR: scoreboard: failed to lock (already locked)).
Fixed bug GH-17112 (Macro redefinitions).
Fixed bug GH-17208 (bug64539-status-json-encoding.phpt fail on 32-bits).
GD:
Fixed bug GH-16255 (Unexpected nan value in ext/gd/libgd/gd_filter.c).
Ported fix for libgd bug 276 (Sometimes pixels are missing when storing images as BMPs).
Gettext:
Fixed bug GH-17202 (Segmentation fault ext/gettext/gettext.c bindtextdomain()).
Iconv:
Fixed bug GH-17047 (UAF on iconv filter failure).
LDAP:
Fixed bug GH-17280 (ldap_search() fails when $attributes array has holes).
LibXML:
Fixed bug GH-17223 (Memory leak in libxml encoding handling).
MBString:
Fixed bug GH-17112 (Macro redefinitions).
Opcache:
opcache_get_configuration() properly reports jit_prof_threshold.
Fixed bug GH-17246 (GC during SCCP causes segfault).
PCNTL:
Fix memory leak in cleanup code of pcntl_exec() when a non stringable value is encountered past the first entry.
PgSql:
Fixed bug GH-17158 (pg_fetch_result Shows Incorrect ArgumentCountError Message when Called With 1 Argument).
Fixed further ArgumentCountError for calls with flexible number of arguments.
Phar:
Fixed bug GH-17137 (Segmentation fault ext/phar/phar.c).
SimpleXML:
Fixed bug GH-17040 (SimpleXML's unset can break DOM objects).
Fixed bug GH-17153 (SimpleXML crash when using autovivification on document).
Sockets:
Fixed bug GH-16276 (socket_strerror overflow handling with INT_MIN).
Fixed overflow on SO_LINGER values setting, strengthening values check on SO_SNDTIMEO/SO_RCVTIMEO for socket_set_option().
SPL:
Fixed bug GH-17225 (NULL deref in spl_directory.c).
Streams:
Fixed bug GH-17037 (UAF in user filter when adding existing filter name due to incorrect error handling).
Fixed bug GH-16810 (overflow on fopen HTTP wrapper timeout value).
Fixed bug GH-17067 (glob:// wrapper doesn't cater to CWD for ZTS builds).
Windows:
Hardened proc_open() against cmd.exe hijacking.
XML:
Fixed bug GH-1718 (unreachable program point in zend_hash).
- modified patches
% php-build-reproducible-phar.patch (refreshed)
-------------------------------------------------------------------
Fri Jan 10 12:12:50 UTC 2025 - pgajdos@suse.com
- obsolete php7 to smooth the migration [bsc#1234788]
-------------------------------------------------------------------
Fri Dec 20 07:42:37 UTC 2024 - pgajdos@suse.com
- version update to 8.3.15
Calendar:
Fixed jdtogregorian overflow.
Fixed cal_to_jd julian_days argument overflow.
COM:
Fixed bug GH-16991 (Getting typeinfo of non DISPATCH variant segfaults).
Core:
Fail early in *nix configuration build script.
Fixed bug GH-16727 (Opcache bad signal 139 crash in ZTS bookworm (frankenphp)).
Fixed bug GH-16799 (Assertion failure at Zend/zend_vm_execute.h:7469).
Fixed bug GH-16630 (UAF in lexer with encoding translation and heredocs).
Fix is_zend_ptr() huge block comparison.
Fixed potential OOB read in zend_dirname() on Windows.
Curl:
Fixed bug GH-16802 (open_basedir bypass using curl extension).
Fix various memory leaks in curl mime handling.
DOM:
Fixed bug GH-16777 (Calling the constructor again on a DOM object after it is in a document causes UAF).
Fixed bug GH-16906 (Reloading document can cause UAF in iterator).
FPM:
Fixed GH-16432 (PHP-FPM 8.2 SIGSEGV in fpm_get_status).
GD:
Fixed GH-16776 (imagecreatefromstring overflow).
GMP:
Fixed bug GH-16890 (array_sum() with GMP can loose precision (LLP64)).
Hash:
Fixed GH-16711: Segfault in mhash().
Opcache:
Fixed bug GH-16770 (Tracing JIT type mismatch when returning UNDEF).
Fixed bug GH-16851 (JIT_G(enabled) not set correctly on other threads).
Fixed bug GH-16902 (Set of opcache tests fail zts+aarch64).
OpenSSL:
Prevent unexpected array entry conversion when reading key.
Fix various memory leaks related to openssl exports.
Fix memory leak in php_openssl_pkey_from_zval().
PDO:
Fixed memory leak of `setFetchMode()`.
Phar:
Fixed bug GH-16695 (phar:// tar parser and zero-length file header blocks).
PHPDBG:
Fixed bug GH-15208 (Segfault with breakpoint map and phpdbg_clear()).
SAPI:
Fixed bug GH-16998 (UBSAN warning in rfc1867).
SimpleXML:
Fixed bug GH-16808 (Segmentation fault in RecursiveIteratorIterator ->current() with a xml element input).
SOAP:
Fix make check being invoked in ext/soap.
Standard:
Fixed bug GH-16905 (Internal iterator functions can't handle UNDEF properties).
Fixed bug GH-16957 (Assertion failure in array_shift with self-referencing array).
Streams:
Fixed network connect poll interuption handling.
Windows:
Fixed bug GH-16849 (Error dialog causes process to hang).
- modified patches
% php-ar-flags.patch (refreshed)
% php-build-reproducible-phar.patch (refreshed)
% php-date-regenerate-lexers.patch (refreshed)
% php-systzdata-v24.patch (refreshed)
-------------------------------------------------------------------
Thu Nov 21 07:15:54 UTC 2024 - pgajdos@suse.com
- version update to 8.3.14 [bsc#1233644] [bsc#1233651] [bsc#1233703] [bsc#1233702] [bsc#1233705]
CLI:
Fixed bug GH-16373 (Shebang is not skipped for router script in cli-server started through shebang).
Fixed bug GHSA-4w77-75f9-2c8w (Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface).
COM:
Fixed out of bound writes to SafeArray data.
Core:
Fixed bug GH-16168 (php 8.1 and earlier crash immediately when compiled with Xcode 16 clang on macOS 15).
Fixed bug GH-16371 (Assertion failure in Zend/zend_weakrefs.c:646).
Fixed bug GH-16515 (Incorrect propagation of ZEND_ACC_RETURN_REFERENCE for call trampoline).
Fixed bug GH-16509 (Incorrect line number in function redeclaration error).
Fixed bug GH-16508 (Incorrect line number in inheritance errors of delayed early bound classes).
Fixed bug GH-16648 (Use-after-free during array sorting).
Curl:
Fixed bug GH-16302 (CurlMultiHandle holds a reference to CurlHandle if curl_multi_add_handle fails).
Date:
Fixed bug GH-16454 (Unhandled INF in date_sunset() with tiny $utcOffset).
Fixed bug GH-14732 (date_sun_info() fails for non-finite values).
DBA:
Fixed bug GH-16390 (dba_open() can segfault for "pathless" streams).
DOM:
Fixed bug GH-16316 (DOMXPath breaks when not initialized properly).
Add missing hierarchy checks to replaceChild.
Fixed bug GH-16336 (Attribute intern document mismanagement).
Fixed bug GH-16338 (Null-dereference in ext/dom/node.c).
Fixed bug GH-16473 (dom_import_simplexml stub is wrong).
Fixed bug GH-16533 (Segfault when adding attribute to parent that is not an element).
Fixed bug GH-16535 (UAF when using document as a child).
Fixed bug GH-16593 (Assertion failure in DOM->replaceChild).
Fixed bug GH-16595 (Another UAF in DOM -> cloneNode).
EXIF:
Fixed bug GH-16409 (Segfault in exif_thumbnail when not dealing with a real file).
FFI:
Fixed bug GH-16397 (Segmentation fault when comparing FFI object).
Filter:
Fixed bug GH-16523 (FILTER_FLAG_HOSTNAME accepts ending hyphen).
FPM:
Fixed bug GH-16628 (FPM logs are getting corrupted with this log statement).
GD:
Fixed bug GH-16334 (imageaffine overflow on matrix elements).
Fixed bug GH-16427 (Unchecked libavif return values).
Fixed bug GH-16559 (UBSan abort in ext/gd/libgd/gd_interpolation.c:1007).
GMP:
Fixed floating point exception bug with gmp_pow when using large exposant values. (David Carlier).
Fixed bug GH-16411 (gmp_export() can cause overflow).
Fixed bug GH-16501 (gmp_random_bits() can cause overflow).
Fixed gmp_pow() overflow bug with large base/exponents.
Fixed segfaults and other issues related to operator overloading with GMP objects.
LDAP:
Fixed bug GHSA-g665-fm4p-vhff (OOB access in ldap_escape). (CVE-2024-8932)
MBstring:
Fixed bug GH-16361 (mb_substr overflow on start/length arguments).
MySQLnd:
Fixed bug GHSA-h35g-vwh6-m678 (Leak partial content of the heap through heap buffer over-read). (CVE-2024-8929)
Opcache:
Fixed bug GH-16408 (Array to string conversion warning emitted in optimizer).
OpenSSL:
Fixed bug GH-16357 (openssl may modify member types of certificate arrays).
Fixed bug GH-16433 (Large values for openssl_csr_sign() $days overflow).
Fix various memory leaks on error conditions in openssl_x509_parse().
PDO DBLIB:
Fixed bug GHSA-5hqh-c84r-qjcv (Integer overflow in the dblib quoter causing OOB writes). (CVE-2024-11236)
PDO Firebird:
Fixed bug GHSA-5hqh-c84r-qjcv (Integer overflow in the firebird quoter causing OOB writes). (CVE-2024-11236)
PDO ODBC:
Fixed bug GH-16450 (PDO_ODBC can inject garbage into field values).
Phar:
Fixed bug GH-16406 (Assertion failure in ext/phar/phar.c:2808).
PHPDBG:
Fixed bug GH-16174 (Empty string is an invalid expression for ev).
Reflection:
Fixed bug GH-16601 (Memory leak in Reflection constructors).
Session:
Fixed bug GH-16385 (Unexpected null returned by session_set_cookie_params).
Fixed bug GH-16290 (overflow on cookie_lifetime ini value).
SOAP:
Fixed bug GH-16318 (Recursive array segfaults soap encoding).
Fixed bug GH-16429 (Segmentation fault access null pointer in SoapClient).
Sockets:
Fixed bug with overflow socket_recvfrom $length argument.
SPL:
Fixed bug GH-16337 (Use-after-free in SplHeap).
Fixed bug GH-16464 (Use-after-free in SplDoublyLinkedList::offsetSet()).
Fixed bug GH-16479 (Use-after-free in SplObjectStorage::setInfo()).
Fixed bug GH-16478 (Use-after-free in SplFixedArray::unset()).
Fixed bug GH-16588 (UAF in Observer->serialize).
Fix GH-16477 (Segmentation fault when calling __debugInfo() after failed SplFileObject::__constructor).
Fixed bug GH-16589 (UAF in SplDoublyLinked->serialize()).
Fixed bug GH-14687 (segfault on SplObjectIterator instance).
Fixed bug GH-16604 (Memory leaks in SPL constructors).
Fixed bug GH-16646 (UAF in ArrayObject::unset() and ArrayObject::exchangeArray()).
Standard:
Fixed bug GH-16293 (Failed assertion when throwing in assert() callback with bail enabled).
Streams:
Fixed bug GHSA-c5f2-jwm7-mmq2 (Configuring a proxy in a stream context might allow for CRLF injection in URIs). (CVE-2024-11234)
Fixed bug GHSA-r977-prxv-hc43 (Single byte overread with convert.quoted-printable-decode filter). (CVE-2024-11233)
SysVMsg:
Fixed bug GH-16592 (msg_send() crashes when a type does not properly serialized).
SysVShm:
Fixed bug GH-16591 (Assertion error in shm_put_var).
XMLReader:
Fixed bug GH-16292 (Segmentation fault in ext/xmlreader/php_xmlreader.c).
Zlib:
Fixed bug GH-16326 (Memory management is broken for bad dictionaries.) (cmb)
-------------------------------------------------------------------
Thu Oct 24 18:44:22 UTC 2024 - pgajdos@suse.com
- version update to 8.3.13
Calendar:
Fixed GH-16240: jdtounix overflow on argument value.
Fixed GH-16241: easter_days/easter_date overflow on year argument.
Fixed GH-16263: jddayofweek overflow.
Fixed GH-16234: jewishtojd overflow.
CLI:
Fixed bug GH-16137: duplicate http headers when set several times by the client.
Core:
Fixed bug GH-16054 (Segmentation fault when resizing hash table iterator list while adding).
Fixed bug GH-15905 (Assertion failure for TRACK_VARS_SERVER).
Fixed bug GH-15907 (Failed assertion when promoting Serialize deprecation to exception).
Fixed bug GH-15851 (Segfault when printing backtrace during cleanup of nested generator frame).
Fixed bug GH-15866 (Core dumped in Zend/zend_generators.c).
Fixed bug GH-16188 (Assertion failure in Zend/zend_exceptions.c).
Fixed bug GH-16233 (Observer segfault when calling user function in internal function via trampoline).
DOM:
Fixed bug GH-16039 (Segmentation fault (access null pointer) in ext/dom/parentnode/tree.c).
Fixed bug GH-16149 (Null pointer dereference in DOMElement->getAttributeNames()).
Fixed bug GH-16151 (Assertion failure in ext/dom/parentnode/tree.c).
Fixed bug GH-16150 (Use after free in php_dom.c).
Fixed bug GH-16152 (Memory leak in DOMProcessingInstruction/DOMDocument).
JSON:
Fixed bug GH-15168 (stack overflow in json_encode()).
GD:
Fixed bug GH-16232 (bitshift overflow on wbmp file content reading / fix backport from upstream).
Fixed bug GH-12264 (overflow/underflow on imagerotate degrees value) (David Carlier)
Fixed bug GH-16274 (imagescale underflow on RBG channels / fix backport from upstream).
LDAP:
Fixed bug GH-16032 (Various NULL pointer dereferencements in ldap_modify_batch()).
Fixed bug GH-16101 (Segfault in ldap_list(), ldap_read(), and ldap_search() when LDAPs array is not a list).
Fix GH-16132 (php_ldap_do_modify() attempts to free pointer not allocated by ZMM.).
Fix GH-16136 (Memory leak in php_ldap_do_modify() when entry is not a proper dictionary).
MBString:
Fixed bug GH-16261 (Reference invariant broken in mb_convert_variables()).
OpenSSL:
Fixed stub for openssl_csr_new.
PCRE:
Fixed bug GH-16189 (underflow on offset argument).
Fixed bug GH-16184 (UBSan address overflowed in ext/pcre/php_pcre.c).
PHPDBG:
Fixed bug GH-15901 (phpdbg: Assertion failure on i funcs).
Fixed bug GH-16181 (phpdbg: exit in exception handler reports fatal error).
Reflection:
Fixed bug GH-16187 (Assertion failure in ext/reflection/php_reflection.c).
SAPI:
Fixed bug GH-15395 (php-fpm: zend_mm_heap corrupted with cgi-fcgi request).
SimpleXML:
Fixed bug GH-15837 (Segmentation fault in ext/simplexml/simplexml.c).
Sockets:
Fixed bug GH-16267 (socket_strerror overflow on errno argument).
SOAP:
Fixed bug #73182 (PHP SOAPClient does not support stream context HTTP headers in array form).
Fixed bug #62900 (Wrong namespace on xsd import error message).
Fixed bug GH-15711 (SoapClient can't convert BackedEnum to scalar value).
Fixed bug GH-16237 (Segmentation fault when cloning SoapServer).
Fix Soap leaking http_msg on error.
Fixed bug GH-16256 (Assertion failure in ext/soap/php_encoding.c:460).
Fixed bug GH-16259 (Soap segfault when classmap instantiation fails).
SPL:
Fixed bug GH-15918 (Assertion failure in ext/spl/spl_fixedarray.c).
Standard:
Fixed bug GH-16053 (Assertion failure in Zend/zend_hash.c).
Fixed bug GH-15169 (stack overflow when var serialization in ext/standard/var).
Streams:
Fixed bugs GH-15908 and GH-15026 (leak / assertion failure in streams.c).
Fixed bug GH-15980 (Signed integer overflow in main/streams/streams.c).
TSRM:
Prevent closing of unrelated handles.
-------------------------------------------------------------------
Sat Sep 28 07:07:17 UTC 2024 - Thorsten Kukuk <kukuk@suse.com>
- Add /srv/www directories to filelist [bsc#1231027]
-------------------------------------------------------------------
Thu Sep 26 19:44:41 UTC 2024 - Arjen de Korte <suse+build@de-korte.org>
- version update to 8.3.12 [bsc#1231358], [bsc#1231382], [bsc#1231360]
CGI:
Fixed bug GHSA-p99j-rfp4-xqvq (Bypass of CVE-2024-4577, Parameter Injection Vulnerability). (CVE-2024-8926)
Fixed bug GHSA-94p6-54jq-9mwp (cgi.force_redirect configuration is bypassable due to the environment variable collision). (CVE-2024-8927)
Core:
Fixed bug GH-15408 (MSan false-positve on zend_max_execution_timer).
Fixed bug GH-15515 (Configure error grep illegal option q).
Fixed bug GH-15514 (Configure error: genif.sh: syntax error).
Fixed bug GH-15565 (--disable-ipv6 during compilation produces error EAI_SYSTEM not found).
Fixed bug GH-15587 (CRC32 API build error on arm 32-bit).
Fixed bug GH-15330 (Do not scan generator frames more than once).
Fixed uninitialized lineno in constant AST of internal enums.
Curl:
Fixed bug GH-15547 (curl_multi_select overflow on timeout argument).
DOM:
Fixed bug GH-15551 (Segmentation fault (access null pointer) in ext/dom/xml_common.h).
Fixed bug GH-15654 (Signed integer overflow in ext/dom/nodelist.c).
Fileinfo:
Fixed bug GH-15752 (Incorrect error message for finfo_file with an empty filename argument).
FPM:
Fixed bug GHSA-865w-9rf3-2wh5 (Logs from childrens may be altered). (CVE-2024-9026)
MySQLnd:
Fixed bug GH-15432 (Heap corruption when querying a vector).
Opcache:
Fixed bug GH-15661 (Access null pointer in Zend/Optimizer/zend_inference.c).
Fixed bug GH-15658 (Segmentation fault in Zend/zend_vm_execute.h).
SAPI:
Fixed bug GHSA-9pqp-7h25-4f32 (Erroneous parsing of multipart form data). (CVE-2024-8925)
Standard:
Fixed bug GH-15552 (Signed integer overflow in ext/standard/scanf.c).
Streams:
Fixed bug GH-15628 (php_stream_memory_get_buffer() not zero-terminated).
-------------------------------------------------------------------
Fri Aug 30 07:19:33 UTC 2024 - pgajdos@suse.com

View File

@@ -1,97 +1,5 @@
-----BEGIN PGP PUBLIC KEY BLOCK-----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=e6EH
-----END PGP PUBLIC KEY BLOCK-----
-----BEGIN PGP PUBLIC KEY BLOCK-----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=fB6k
-----END PGP PUBLIC KEY BLOCK-----
-----BEGIN PGP PUBLIC KEY BLOCK-----
mQINBFg4q4YBEAD50HOLDAVpW88rUHnX/TYTCLpqmHMKXPjuf1l3ZEkY3PXF6wqm
qaWWMPeWJFsik3cMebtLQzsgXHl4xDUBQhOOtdfax2ZKBHQmoUknw2dKkqdkVLh8
Xpu8tw00SmcTiAFVCA2+HOqQ+Drq9NUpnMeJpJZiZu84eZbJBEzgabi0s4jf67NH
@@ -263,3 +171,69 @@ qNeNbaksJpMcSXunKitg4ZOOmGMfzqdUQDCThyyEQkAo5dIpqM2dFNK+I/J/8QqX
ovhBoCTlBaU=
=Hyro
-----END PGP PUBLIC KEY BLOCK-----
-----BEGIN PGP PUBLIC KEY BLOCK-----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=67ZA
-----END PGP PUBLIC KEY BLOCK-----
-----BEGIN PGP PUBLIC KEY BLOCK-----
mDMEZiANXBYJKwYBBAHaRw8BAQdARP8nnoCEXdWhbte9/J1LeQZVMQ3vPM7ADToq
ZGNvXDe0JkNhbHZpbiBCdWNrbGV5IChQSFApIDxjYWx2aW5iQHBocC5uZXQ+iJME
ExYKADsWIQSdf5mgy48FyKaVjWJWqXr3YAo5pgUCZiANXAIbAwULCQgHAgIiAgYV
CgkICwIEFgIDAQIeBwIXgAAKCRBWqXr3YAo5ppvGAP9TWg8OSAuIZqsBwxd62k01
YbG08JClqfB8/aPeoEqPcQEA++VwjC5BppelKywM6CtYtxR0tM+zt3OjjKlN400A
wga4OARmIA1cEgorBgEEAZdVAQUBAQdA+SOq91v3irC1wiZR9kesStsulsJ+liFC
01oLuT9OhwEDAQgHiHgEGBYKACAWIQSdf5mgy48FyKaVjWJWqXr3YAo5pgUCZiAN
XAIbDAAKCRBWqXr3YAo5pkbYAP9oqokC5fA5yWPdi3fXGEl4K66tkebIOa5Pbm23
Hng4PwEAplx8F6SVD7tfszojqJDf5W4w4q0F0wknPSCLjCuldAQ=
=anm6
-----END PGP PUBLIC KEY BLOCK-----

View File

@@ -1,7 +1,7 @@
#
# spec file for package php8
#
# Copyright (c) 2024 SUSE LLC
# Copyright (c) 2025 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -40,8 +40,8 @@
%define psuffix %{nil}
%endif
%global apiver 20230831
%global zendver 20230831
%global apiver 20240924
%global zendver 20240924
%define extension_dir %{_libdir}/%{php_name}/extensions
%define php_sysconf %{_sysconfdir}/%{php_name}
@@ -57,7 +57,7 @@
%bcond_without sodium
Name: %{pprefix}%{php_name}%{psuffix}
Version: 8.3.11
Version: 8.4.10
Release: 0
Summary: Interpreter for the PHP scripting language version 8
License: MIT AND PHP-3.01
@@ -116,7 +116,11 @@ BuildRequires: net-snmp-devel
BuildRequires: openldap2-devel
BuildRequires: pkgconfig
BuildRequires: postfix
%if 0%{suse_version} >= 1600
BuildRequires: postgresql-devel
%else
BuildRequires: postgresql17-devel
%endif
BuildRequires: re2c
BuildRequires: tcpd-devel
BuildRequires: update-alternatives
@@ -203,8 +207,10 @@ Provides: php-spl = %{version}
Provides: php-xml = %{version}
Provides: zend = %{zendver}
# conflicts other php major versions with and should replace it
Conflicts: php < %{version}
Conflicts: php72
Obsoletes: php < %{version}
Obsoletes: php7
Obsoletes: php72
Obsoletes: php74
# mcrypt was removed in php 7.2
Obsoletes: php7-mcrypt
# json is now integral part of core, cannot be disabled
@@ -227,7 +233,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-cli = %{version}
Provides: php-sapi = %{version}
Conflicts: php-cli < %{version}
Obsoletes: php7-cli
%description cli
PHP is a server-side HTML embedded scripting language designed
@@ -251,7 +257,7 @@ Requires: php = %{version}
Requires: pkgconfig(libpcre2-8) >= 10.30
Requires: pkgconfig(libxml-2.0) >= 2.9.0
Provides: php-devel = %{version}
Conflicts: php-devel < %{version}
Obsoletes: php7-devel
%description devel
PHP is a server-side HTML embedded scripting language designed
@@ -281,6 +287,7 @@ Requires(post): %{_sbindir}/a2enmod
Requires(preun): %{_sbindir}/a2enmod
Provides: mod_php_any = %{version}
Provides: php-sapi = %{version}
Obsoletes: apache2-mod_php7
Obsoletes: mod_php_any < %{version}
%description
@@ -302,7 +309,7 @@ Requires: php = %{version}
Provides: php-cgi = %{version}
Provides: php-fastcgi = %{version}
Provides: php-sapi = %{version}
Conflicts: php-fastcgi < %{version}
Obsoletes: php7-fastcgi
%description
PHP is a server-side, cross-platform HTML embedded scripting language.
@@ -322,7 +329,7 @@ Requires: group(www)
Requires: user(wwwrun)
Provides: php-fpm = %{version}
Provides: php-sapi = %{version}
Conflicts: php-fpm < %{version}
Obsoletes: php7-fpm
%{?systemd_ordering}
%description
@@ -371,6 +378,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-bcmath = %{version}
Obsoletes: php-bcmath < %{version}
Obsoletes: php7-bcmath
%description bcmath
Binary Calculator which supports numbers of any size and precision,
@@ -382,6 +390,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-bz2 = %{version}
Obsoletes: php-bz2 < %{version}
Obsoletes: php7-bz2
%description bz2
PHP functions to read and write bzip2 (.bz2) compressed files.
@@ -392,6 +401,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-calendar = %{version}
Obsoletes: php-calendar < %{version}
Obsoletes: php7-calendar
%description calendar
PHP functions for converting between different calendar formats.
@@ -402,6 +412,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-ctype = %{version}
Obsoletes: php-ctype < %{version}
Obsoletes: php7-ctype
%description ctype
PHP functions for checking whether a character or string falls into a
@@ -413,6 +424,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-curl = %{version}
Obsoletes: php-curl < %{version}
Obsoletes: php7-curl
%description curl
PHP interface to libcurl that allows you to connect to and communicate
@@ -425,6 +437,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-dba = %{version}
Obsoletes: php-dba < %{version}
Obsoletes: php7-dba
%description dba
This is a general abstraction layer for several file-based databases.
@@ -439,6 +452,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-dom = %{version}
Obsoletes: php-dom < %{version}
Obsoletes: php7-dom
%description dom
This module adds Document Object Model (DOM) support.
@@ -451,6 +465,7 @@ Provides: php-enchant = %{version}
Obsoletes: php-enchant < %{version}
# Obsolete pspell plugin as enchant is favored solution (goodbye aspell)
Obsoletes: php7-pspell
Obsoletes: php7-enchant
%description enchant
Enchant is the PHP binding for the Enchant library. Enchant steps in
@@ -466,6 +481,7 @@ Requires: php = %{version}
Requires: php-mbstring = %{version}
Provides: php-exif = %{version}
Obsoletes: php-exif < %{version}
Obsoletes: php7-exif
%description exif
PHP functions for extracting EXIF (Exchangable Image File Format;
@@ -477,6 +493,7 @@ Summary: Main interface to C code and data
Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-ffi = %{version}
Obsoletes: php7-ffi
%description ffi
This extension allows the loading of shared libraries (.DLL or .so),
@@ -490,6 +507,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-fileinfo = %{version}
Obsoletes: php-fileinfo < %{version}
Obsoletes: php7-fileinfo
%description fileinfo
The functions in this module try to guess the content type and
@@ -503,6 +521,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-ftp = %{version}
Obsoletes: php-ftp < %{version}
Obsoletes: php7-ftp
%description ftp
PHP functions for access to file servers speaking the File Transfer
@@ -514,6 +533,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-gd = %{version}
Obsoletes: php-gd < %{version}
Obsoletes: php7-gd
%description gd
PHP functions to create and manipulate image files in a variety of
@@ -526,6 +546,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-gettext = %{version}
Obsoletes: php-gettext < %{version}
Obsoletes: php7-gettext
%description gettext
PHP functions that implement a Native Language Support (NLS) API which
@@ -537,6 +558,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-gmp = %{version}
Obsoletes: php-gmp < %{version}
Obsoletes: php7-gmp
%description gmp
PHP functions for work with arbitrary-length integers using the GNU MP
@@ -548,6 +570,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-iconv = %{version}
Obsoletes: php-iconv < %{version}
Obsoletes: php7-iconv
%description iconv
This module contains an interface to iconv character set conversion
@@ -562,6 +585,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-intl = %{version}
Obsoletes: php-intl < %{version}
Obsoletes: php7-intl
%description intl
The internationalization (intl) extension is a wrapper for the ICU
@@ -575,6 +599,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-ldap = %{version}
Obsoletes: php-ldap < %{version}
Obsoletes: php7-ldap
%description ldap
PHP interface to the Lightweight Directory Access Protocol (LDAP).
@@ -585,6 +610,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-mbstring = %{version}
Obsoletes: php-mbstring < %{version}
Obsoletes: php7-mbstring
%description mbstring
mbstring provides multibyte specific string functions that help
@@ -603,6 +629,7 @@ Provides: php-mysqli = %{version}
Provides: php-pdo_mysql = %{version}
Provides: php_any_db = %{version}
Obsoletes: php-mysql < %{version}
Obsoletes: php7-mysql
%description mysql
PHP functions for access to MySQL database servers.
@@ -616,6 +643,7 @@ Requires: php-pdo = %{version}
Provides: php-firebird = %{version}
Provides: php_any_db = %{version}
Obsoletes: php-firebird < %{version}
Obsoletes: php7-firebird
%description firebird
PHP functions for access to firebird database servers.
@@ -629,6 +657,7 @@ Requires: php-pdo = %{version}
Provides: php-odbc = %{version}
Provides: php-pdo_odbc = %{version}
Obsoletes: php-odbc < %{version}
Obsoletes: php7-odbc
%description odbc
This module adds Open Database Connectivity (ODBC) support.
@@ -639,6 +668,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-opcache = %{version}
Obsoletes: php-opcache < %{version}
Obsoletes: php7-opcache
%description opcache
OPcache improves PHP performance by storing precompiled script
@@ -651,6 +681,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-openssl = %{version}
Obsoletes: php-openssl < %{version}
Obsoletes: php7-openssl
%description openssl
This extension binds functions of OpenSSL library for symmetric and
@@ -664,6 +695,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-pcntl = %{version}
Obsoletes: php-pcntl < %{version}
Obsoletes: php7-pcntl
%description pcntl
Process Control support in PHP implements the Unix style of process
@@ -676,7 +708,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Requires: php-zlib = %{version}
Provides: php-phar = %{version}
Conflicts: php-phar < %{version}
Obsoletes: php7-phar
%description phar
The phar extension provides a way to put entire PHP applications into
@@ -695,6 +727,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-pdo = %{version}
Obsoletes: php-pdo < %{version}
Obsoletes: php7-pdo
%description pdo
The PHP Data Objects (PDO) extension defines an interface for
@@ -717,6 +750,7 @@ Provides: php-pdo_pgsql = %{version}
Provides: php-pgsql = %{version}
Provides: php_any_db = %{version}
Obsoletes: php-pgsql < %{version}
Obsoletes: php7-pgsql
%description pgsql
PHP functions for access to PostgreSQL database servers. It includes
@@ -728,6 +762,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-posix = %{version}
Obsoletes: php-posix < %{version}
Obsoletes: php7-posix
%description posix
This module contains an interface to those functions defined in the
@@ -740,6 +775,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-readline = %{version}
Obsoletes: php-readline < %{version}
Obsoletes: php7-readline
%description readline
PHP interface to libedit, which provides editable command line as well
@@ -751,6 +787,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-shmop = %{version}
Obsoletes: php-shmop < %{version}
Obsoletes: php7-shmop
%description shmop
An extension created as an alternative to the sysvmsg module.
@@ -761,6 +798,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-snmp = %{version}
Obsoletes: php-snmp < %{version}
Obsoletes: php7-snmp
%description snmp
The SNMP extension provides a toolset for managing remote devices via
@@ -777,6 +815,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-soap = %{version}
Obsoletes: php-soap < %{version}
Obsoletes: php7-soap
%description soap
This module provides SOAP support.
@@ -790,6 +829,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-sockets = %{version}
Obsoletes: php-sockets < %{version}
Obsoletes: php7-sockets
%description sockets
The socket extension implements a low-level interface to the socket
@@ -803,6 +843,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-sodium = %{version}
Obsoletes: php-sodium < %{version}
Obsoletes: php7-sodium
%description sodium
PHP binding to libsodium software library for encryption, decryption,
@@ -817,6 +858,7 @@ Requires: php-pdo = %{version}
Provides: php-pdo_sqlite = %{version}
Provides: php-sqlite = %{version}
Obsoletes: php-sqlite < %{version}
Obsoletes: php7-sqlite
%description sqlite
This is an extension for the SQLite Embeddable SQL Database Engine.
@@ -839,6 +881,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-sysvmsg = %{version}
Obsoletes: php-sysvmsg < %{version}
Obsoletes: php7-sysvmsg
%description sysvmsg
This module provides System V Message Queue support.
@@ -849,6 +892,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-sysvsem = %{version}
Obsoletes: php-sysvsem < %{version}
Obsoletes: php7-sysvsem
%description sysvsem
PHP interface for System V semaphores.
@@ -859,6 +903,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-sysvshm = %{version}
Obsoletes: php-sysvshm < %{version}
Obsoletes: php7-sysvshm
%description sysvshm
PHP interface for System V shared memory.
@@ -869,6 +914,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-tidy = %{version}
Obsoletes: php-tidy < %{version}
Obsoletes: php7-tidy
%description tidy
Tidy is an extension based on Libtidy (http://tidy.sourceforge.net) and allows
@@ -882,6 +928,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-tokenizer = %{version}
Obsoletes: php-tokenizer < %{version}
Obsoletes: php7-tokenizer
%description tokenizer
The tokenizer functions provide an interface to the PHP tokenizer
@@ -896,6 +943,7 @@ Requires: php = %{version}
Requires: php-dom = %{version}
Provides: php-xsl = %{version}
Obsoletes: php-xsl < %{version}
Obsoletes: php7-xsl
%description xsl
PHP's XSL extension implements the XSL (Extensible Stylesheet
@@ -909,6 +957,7 @@ Requires: php = %{version}
Requires: php-dom = %{version}
Provides: php-xmlreader = %{version}
Obsoletes: php-xmlreader < %{version}
Obsoletes: php7-xmlreader
%description xmlreader
The XMLReader extension is an XML Pull parser. The reader acts as a
@@ -921,6 +970,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-xmlwriter = %{version}
Obsoletes: php-xmlwriter < %{version}
Obsoletes: php7-xmlwriter
%description xmlwriter
XMLWriter wraps the libxml xmlWriter API. Represents a writer that
@@ -933,6 +983,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-zip = %{version}
Obsoletes: php-zip < %{version}
Obsoletes: php7-zip
%description zip
This extension allows to transparently read or write ZIP compressed
@@ -944,6 +995,7 @@ Group: Development/Libraries/PHP
Requires: php = %{version}
Provides: php-zlib = %{version}
Obsoletes: php-zlib < %{version}
Obsoletes: php7-zlib
%description zlib
This module enables to transparently read and write gzip (.gz)
@@ -1185,13 +1237,13 @@ Build cli \
--disable-cgi
%endif
%if "%{flavor}" == "test"
%check
%if %{with asan}
# no need for ASAN build
exit 0
%endif
%if "%{flavor}" == "test"
# Run tests, using the CLI SAPI
export NO_INTERACTION=1 REPORT_EXIT_STATUS=1 LANG=POSIX LC_ALL=POSIX
unset TZ
@@ -1428,6 +1480,8 @@ fi
%dir %{php_sysconf}/fastcgi
%{_bindir}/php-cgi
%{_mandir}/man1/php-cgi.1%{?ext_man}
%dir %{apache_serverroot}
%dir %{apache_serverroot}/cgi-bin
%{apache_serverroot}/cgi-bin/php
%endif