Commit Graph

123 Commits

Author SHA1 Message Date
Michael Heimpold c6f27671a3 php7: update to 7.4.26
This fixes:
    - CVE-2021-21707

Also drop upstream patch which is included in the release now.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-11-20 13:52:11 +01:00
Giovanni Giacobbi 024ac2b040 php7: Clean up and update distributed php.ini for php 7.4.25
Details:
- Cleaned up whitespace and removed comments (refer to official PHP documentation for that)
- Removed directives that no longer exist as of PHP 7.4.25
- Added '~E_DEPRECATED' to 'error_reporting'

Directives removed that no longer exist as of PHP 7.4.25:
- zend.ze1_compatibility_mode
- y2k_compliance
- register_globals
- register_long_arrays
- magic_quotes_gpc
- magic_quotes_runtime
- magic_quotes_sybase
- always_populate_raw_post_data

Signed-off-by: Giovanni Giacobbi <giovanni@giacobbi.net>
(cherry picked from commit 7e45ad87f3)
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-11-12 07:48:43 +01:00
Hirokazu MORIKAWA bc13112a7c php7: Support for icu 70.1
This PR prepares PHP for a few minor changes that cause PHP builds to fail when using --enable-intl with ICU 70.1.

Change UBool to bool for equality operators in ICU >= 70.1

https://github.com/php/php-src/pull/7596

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2021-11-02 09:36:12 +09:00
Michael Heimpold 1df333bfb0 php7: update to 7.4.25
This fixes:
    - CVE-2021-21703

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-10-22 22:28:27 +02:00
Michael Heimpold 96a04adbf3 php7: update to 7.4.24
This fixes:
    - CVE-2021-21706

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-09-27 20:44:30 +02:00
Michael Heimpold d153c61650 php7: fix module loading with glibc (refs #16642)
Without -ldl linker flag .so extensions are not loaded
when glibc is used. Fix it by providing adjusted LDFLAGS
for this case.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-09-26 21:57:44 +02:00
Michael Heimpold e51a049301 php7: fix config file upgrade issue (fixes #14623)
The addressed issue is related to #6893 as its resolution
is actually causing the problem.

When changing the priority of the config file it happens
that after a sysupgrade the previous file is restored
and the new file is added, ending up in a situation
like this:

/etc/php7/15_openssl.ini
/etc/php7/20_openssl.ini

Causing a double extension=openssl.so to be parsed,
which is not appropriate and leads to error message.

The same problem might also occur for mysqli since there
was also a priority change - let's take care about this
at the same time.

The solution is to remove one of the files. Since it is
a configuration file, the user might have adjusted it, so
lets just use the previous version to replace the new
installed version.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-09-09 08:36:49 +02:00
Michael Heimpold fb9e05615b php7: update to 7.4.23
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-08-31 20:31:49 +02:00
Michael Heimpold 741d6d6768 php7: update to 7.4.22
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-07-29 22:27:37 +02:00
Michael Heimpold f15aba89f7 php7: update to 7.4.21
This fixes:
    - CVE-2021-21704
    - CVE-2021-21705

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-07-05 00:13:35 +02:00
Michael Heimpold 555d0c9a29 php7: update to 7.4.20
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-06-07 06:47:21 +02:00
Michael Heimpold 4e39d9fc7c php7: update to 7.4.19
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-05-10 22:37:12 +02:00
Michael Heimpold aaaeef8b63 php7: update to 7.4.18
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-04-30 21:39:13 +02:00
Michael Heimpold 87e852fc71 php7: update to 7.4.16
Also refresh patch.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-03-04 23:15:47 +01:00
Eneas U de Queiroz d4979cff06
php7: fix build with QUILT
When building with QUILT, unlike the regular build, Build/Prepare does
not apply the patches.  So when buildconf is called with QUILT on, at
the end of Build/Prepare, it will not have the patched sources, and
build will fail.

To fix the problem, run buildconf in Build/Prepare only when QUILT is
off, and do it in Build/Configure otherwise.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2021-02-26 11:23:11 -03:00
Michael Heimpold 1e2fc720ab php7: update to 7.4.15
This fixes:
    - CVE-2021-21702

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-02-08 22:34:58 +01:00
Michael Heimpold 73833e6a24 php7: move into own submenu to prepare for upcoming php8
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-02-01 07:49:01 +01:00
Michael Heimpold 1195c89c95 php7: update to 7.4.14
This fixes:
    - CVE-2020-7071

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-01-16 22:44:48 +01:00
Michael Heimpold 4e7c006ef2 php7: fix some whitespace nitpicks
Align some lines with the rest, no functional change.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-01-16 22:44:48 +01:00
Michael Heimpold 110ea1b994 php7: remove obsolete patch for ICU 68.1
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-11-29 21:59:06 +01:00
Michael Heimpold 1023114977 php7: update to 7.4.13
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-11-29 11:03:40 +01:00
Hirokazu MORIKAWA fc9fa48973 php7: fix for icu 68.1
https://github.com/openwrt/packages/pull/13883
https://github.com/php/php-src/commit/8eaaabd

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2020-11-13 09:06:15 +09:00
Michael Heimpold b737b8ce6c php7: update to 7.4.12
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-11-01 14:56:05 +01:00
Michael Heimpold 70f26ed2fc php7: update to 7.4.11
This fixes:
  - CVE-2020-7069
  - CVE-2020-7070

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-10-03 22:09:51 +02:00
Michael Heimpold f6c2c1499b php7: update to 7.4.10
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-09-10 20:50:34 +02:00
Michael Heimpold 9c1670ed61 php7: update to 7.4.9
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-08-12 23:15:44 +02:00
Michael Heimpold 37c9857a19 php7: update to 7.4.8
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-07-15 23:51:54 +02:00
Michael Heimpold 64fafc1e22 php7: update to 7.4.7
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-06-14 14:54:33 +02:00
Michael Heimpold ceb660cc61 php7: update to 7.4.6
This fixes:
  - CVE-2019-11048

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-05-16 13:56:33 +02:00
Michael Heimpold 328d1baad2 php7: update to 7.4.5
This fixes:
  - CVE-2020-7067

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-04-19 10:39:48 +02:00
Michael Heimpold e9ee517600 php7: update to 7.4.4
This fixes:
  - CVE-2020-7064
  - CVE-2020-7065
  - CVE-2020-7066

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-03-26 23:42:08 +01:00
Michael Heimpold a8ff4663b5 php7: update to 7.4.3
This fixes:
  - CVE-2020-7061
  - CVE-2020-7062
  - CVE-2020-7063

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-02-25 22:56:15 +01:00
Michael Heimpold 50b1cd3757 php7: fix dependencies for mysqlnd (fixes #11113)
When during the build the openssl extension is also selected, then
the mysqlnd extension depends on it, too.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-01-26 21:55:10 +01:00
Michael Heimpold 4f1c5e5919 php7: update to 7.4.2
This fixes:
  - CVE-2020-7059
  - CVE-2020-7060

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-01-26 21:55:10 +01:00
W. Michael Petullo fa0d982c77 php7: update the gd module to depend on libgd-full
The php7-mod-gd package requires that freetype support exist in libgd. The
libgd-full package provides this, whereas the libgd package does only
if explicitly configured.

Ref: https://github.com/openwrt/packages/issues/10944
Signed-off-by: W. Michael Petullo <mike@flyn.org>
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-01-12 11:24:02 +01:00
Michael Heimpold 0f10c8c841 php7: major upgrade to 7.4.1
- remove obsolete patches and update other ones
- filter support is now available as an extension module
- php7-mod-hash: this extension is now part of the core binary
  and cannot be built as an extension module anymore
- php7-mod-gd:
  - do not use bundled libgd, but rely on external one
  - this also obsoletes dependencies and configuration options
- php7-mod-zip: requires external libzip now

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2019-12-21 16:59:53 +01:00
Michael Heimpold d5c18b1d5e php7: update to 7.2.26
This fixes:
  - CVE-2019-11046
  - CVE-2019-11044
  - CVE-2019-11045
  - CVE-2019-11050
  - CVE-2019-11047

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2019-12-18 20:57:34 +01:00
Rosen Penev 8015772fdb
php7: Properly fix compilation without deprecated APIs
It seems that OpenSSL is bugged. While OpenSSL uses this code, it doesn't
export these defines anywhere. Match against the API version instead.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-11-25 11:43:35 -08:00
Josef Schlehofer 9bc48abd2a
php7: Update to version 7.2.25
- Fixes CVE-2019-11043

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-11-24 17:41:02 +01:00
W. Michael Petullo 5bc9bb04c5 php7: mark /etc/config/php7-fastcgi as conffile
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2019-10-19 18:13:41 -04:00
Michael Heimpold b8c22fc1ec php7-mod-xmlreader: add conditional dependency to php7-mod-dom (fixes #10201)
PHP7 fails to load xmlreader.so (php7-mod-xmlreader) module without
dom.so (php7-mod-dom) module loaded:

-snip-
PHP Warning:  PHP Startup: Unable to load dynamic library 'xmlreader.so'
 (tried: /usr/lib/php/xmlreader.so (Error relocating /usr/lib/php/xmlreader.so:
 dom_node_class_entry: symbol not found), /usr/lib/php/xmlreader.so.so (Error
 loading shared library /usr/lib/php/xmlreader.so.so: No such file or
 directory)) in Unknown on line 0
^C
-snap-

However, this dependency only exists when during build also php7-mod-dom
is selected.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2019-10-16 00:04:24 +02:00
Stefaan Ghysels dacda44755 php7: bump to 7.2.23
Signed-off-by: Stefaan Ghysels <stefaang@gmail.com>
2019-10-03 13:44:23 +02:00
Stefaan Ghysels 84a449440a php7-mod-gd: enable libwebp
Signed-off-by: Stefaan Ghysels <stefaang@gmail.com>
2019-10-03 13:42:38 +02:00
Michael Heimpold 5805da860e php7: update to 7.2.22
While at, update the SPDX license id to most recent format.

Compile and run tested on mxs platform.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2019-09-08 21:27:18 +02:00
Michael Heimpold 8e419c6d4c php7: update to 7.2.21
This fixes CVE-2019-11042 and CVE-2019-11041.

Compile and run tested on mxs platform

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2019-08-04 00:37:32 +02:00
Michael Heimpold 134ebb7a9d php7: update to 7.2.19
Compile and run tested on mxs platform

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2019-06-21 06:48:42 +02:00
Michael Heimpold 59e48a68ba php7: update to 7.2.18
Compile and run tested on mxs platform.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2019-05-20 21:18:07 +02:00
Rosen Penev b81a2bd384
php7: Fix compilation without deprecated OpenSSL APIs
Refreshed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-04-20 14:07:51 -07:00
Michael Heimpold 71d3f6aa8c php7: update to 7.2.17
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2019-04-14 06:53:12 +02:00
Jan Pavlinec 0465f6fb46
php7: Add PKG_CPE_ID for proper CVE tracking
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-03-15 15:04:06 +01:00