Commit graph

97 commits

Author SHA1 Message Date
Michael Heimpold
2e6bd4cb86 php7: update to version 7.2.31
This fixes:
  - CVE-2019-11048

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-05-16 13:57:30 +02:00
Michael Heimpold
d2a02ee24c Merge branch '19.07-php7' of https://github.com/BKPepe/packages into
a local branch for conflict resolving.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-04-25 21:16:19 +02:00
Michael Heimpold
f2143f6ebc php7: fix dependencies for mysqlnd (fixes #11113)
When during the build the openssl extension is also selected, then
the mysqlnd extension depends on it, too.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 50b1cd3757)
2020-04-25 21:11:43 +02:00
Josef Schlehofer
09738290a3
php7: update to version 7.2.30
Fixes:
CVE-2020-7066
CVE-2020-7064

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-04-22 18:05:21 +02:00
Michael Heimpold
95c72d8aba php7: update to 7.2.28
This fixes:
  - CVE-2020-7062
  - CVE-2020-7063

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-02-25 22:35:15 +01:00
Michael Heimpold
3cf0c61f2e php7: update to 7.2.27
This fixes:
  - CVE-2020-7059
  - CVE-2020-7060

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-02-07 21:09:24 +01:00
Michael Heimpold
13de8da3b3 php7: update to 7.2.26
This fixes:
  - CVE-2019-11046
  - CVE-2019-11044
  - CVE-2019-11045
  - CVE-2019-11050
  - CVE-2019-11047

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit d5c18b1d5e)
2019-12-18 21:23:12 +01:00
Josef Schlehofer
4a82137613 php7: Update to version 7.2.25
- Fixes CVE-2019-11043

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 9bc48abd2a)
2019-11-24 22:04:15 +01:00
W. Michael Petullo
36358e7e38 php7: mark /etc/config/php7-fastcgi as conffile
Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 5bc9bb04c5)
2019-11-24 22:03:41 +01:00
Michael Heimpold
3be4577ee9 php7-mod-xmlreader: add conditional dependency to php7-mod-dom (fixes #10201)
PHP7 fails to load xmlreader.so (php7-mod-xmlreader) module without
dom.so (php7-mod-dom) module loaded:

-snip-
PHP Warning:  PHP Startup: Unable to load dynamic library 'xmlreader.so'
 (tried: /usr/lib/php/xmlreader.so (Error relocating /usr/lib/php/xmlreader.so:
 dom_node_class_entry: symbol not found), /usr/lib/php/xmlreader.so.so (Error
 loading shared library /usr/lib/php/xmlreader.so.so: No such file or
 directory)) in Unknown on line 0
^C
-snap-

However, this dependency only exists when during build also php7-mod-dom
is selected.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit b8c22fc1ec)
2019-11-24 22:03:11 +01:00
Stefaan Ghysels
7aadc71300 php7: bump to 7.2.23
Signed-off-by: Stefaan Ghysels <stefaang@gmail.com>
(cherry picked from commit dacda44755)
2019-11-24 22:02:30 +01:00
Michael Heimpold
41fb159a38 php7: update to 7.2.22
While at, update the SPDX license id to most recent format.

Compile and run tested on mxs platform.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 5805da860e)
2019-09-12 21:52:27 +02:00
Michael Heimpold
42a98950b8 php7: update to 7.2.21
This fixes CVE-2019-11042 and CVE-2019-11041.

Compile and run tested on mxs platform

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2019-08-04 00:44:31 +02:00
Michael Heimpold
59e48a68ba php7: update to 7.2.18
Compile and run tested on mxs platform.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2019-05-20 21:18:07 +02:00
Rosen Penev
b81a2bd384
php7: Fix compilation without deprecated OpenSSL APIs
Refreshed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-04-20 14:07:51 -07:00
Michael Heimpold
71d3f6aa8c php7: update to 7.2.17
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2019-04-14 06:53:12 +02:00
W. Michael Petullo
a5d2ea9ed0 php7: facilitate running php7-fastcgi without listening on TCP socket
The init.d script for php7-fastcgi no longer invokes php7-fastcgi with
the '-b' flag when 'port' does not appear in /etc/config/php7-fastcgi.
This causes php7-fastcgi to communicate using only a Unix socket.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
2019-04-13 08:25:34 -04:00
Jan Pavlinec
0465f6fb46
php7: Add PKG_CPE_ID for proper CVE tracking
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-03-15 15:04:06 +01:00
Michael Heimpold
80cdd53134 php7: update to 7.2.16
Also refresh patch which does not apply cleanly anymore.

Run tested on Duckbill for mxs platform.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2019-03-13 22:21:16 +01:00
Michael Heimpold
1d4081dd4c php7: fix cross compiling patch (fixes #8166)
Fixes: e148924a4 ("php7: update to 7.2.15")
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2019-02-10 21:50:25 +01:00
Michael Heimpold
e148924a4c php7: update to 7.2.15
Also refresh patch which does not apply cleanly anymore.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2019-02-09 13:35:58 +01:00
Michael Heimpold
963c841463 php7: update to 7.2.14
While at, add --with-pic to configure arguments. This prevents the following
build errors spotted by the build bots for i386 targets:

-snip-
...
ext/openssl/.libs/openssl.o: direct GOT relocation R_386_GOT32X against
`X509_REQ_free' without base register can not be used when making a shared object
...
-snap-

This parameter seems to make no difference on other targets, nor
improve or make worse the package size.

Run tested for i386 in VirtualBox VM and on Duckbill for mxs platform.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2019-01-11 23:51:47 +01:00
Michael Heimpold
794f8f8e94 php7: update to 7.2.13
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2018-12-09 16:26:52 +01:00
Michael Heimpold
2186fe821d php7: update to 7.2.12
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2018-11-15 23:22:16 +01:00
Michael Heimpold
797776a3b3 php7: update to 7.2.11
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2018-10-16 21:59:49 +02:00
Michael Heimpold
c69af6717c php7: update to 7.2.10
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2018-09-23 21:35:11 +02:00
Michael Heimpold
3b6e346a4c php7: mod-intl: add optional dep for icu-full-data (fixes #6536)
As worked out, ICU library needs its data archive to be useful.
Explain the situation in help text and add option to declare/prevent
this dependency in package meta-data.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2018-09-08 00:11:51 +02:00
Michael Heimpold
5afeb3f9c8 php7: adjust load priority for openssl (fixes #6893)
This orders loading of openssl extension before extensions
which require openssl functions.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2018-09-02 21:44:41 +02:00
Krystian Kozak
9cfca32347 php7: add bcmath module
Added bcmath module, which is required for some packages. For example it
is required for zabbix-server frontend

Compile tested: Yes, brcm2708
Run tested: Yes, brcm2708

Signed-off-by: Krystian Kozak <krystian.kozak20@gmail.com>
2018-09-02 14:19:27 +02:00
Michael Heimpold
cf142bb9a6 php7: update to 7.2.9
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2018-08-23 22:13:11 +02:00
Michael Heimpold
8d2764f193 php7: add dependency to hash for mysqlnd
The following error shows that mysqlnd depends on functions
provided by hash:

root@OpenWrt:/etc/php7# php-cli -m
PHP Warning:  PHP Startup: Unable to load dynamic library
'mysqlnd.so' (tried: /usr/lib/php/mysqlnd.so (Error
relocating /usr/lib/php/mysqlnd.so: PHP_SHA256Final: symbol
not found), /usr/lib/php/mysqlnd.so.so (Error loading shared
library /usr/lib/php/mysqlnd.so.so: No such file or
directory)) in Unknown on line 0

So let's model this dep in package metadata.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2018-08-23 22:13:11 +02:00
Michael Heimpold
dd49827511 php7: update to 7.2.8
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2018-07-21 23:27:58 +02:00
Michael Heimpold
b7f71c69d8 php7: fix load order of mysqli extension
This problem was reported by Teun Lubberhuizen, thanks!

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2018-07-06 22:53:54 +02:00
Michael Heimpold
045fdb5336 php7: update to 7.2.7
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2018-07-02 22:42:48 +02:00
Michael Heimpold
4529584690
Merge pull request #6333 from micmac1/php7-mysqlnd
php7: use mysqlnd
2018-06-29 22:53:02 +02:00
Rafał Miłecki
0421787098 php7: add package dependency on zoneinfo-core
Having "select PACKAGE_zoneinfo-core" wasn't enough for builds without
php7-cli=y or php7-cgi=y. It didn't result in installing zoneinfo-core
when using "opkg install" (during runtime or when building images with
CONFIG_TARGET_PER_DEVICE_ROOTFS).

Missing zoneinfo results in PHP fatal errors, e.g.:
Fatal error: DateTime::createFromFormat(): Timezone database is corrupt - this should *never* happen!

For years users were told to manually install zoneinfo-core package.
This problem was hidden for some time (including 17.01 release) due to
disabled support for CONFIG_PHP7_SYSTEMTZDATA. It's now back as support
for --with-system-tzdata was enabled again.

The proper solution is to simply make php7 package depend on
zoneinfo-core when PHP7_SYSTEMTZDATA is used.

Fixes: 84e5012e88 ("php7: re-enable system timezone data usage")
Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
2018-06-24 21:33:56 +02:00
Sebastian Kemper
f6e06384f1 php7: use mysqlnd
This is in anticipation of the MariaDB upgrade from mariadb 10.1.x to
10.2.x. With the latter the PHP MySQL plugins fail to compile, e.g.:

In file included from /home/equeiroz/src/openwrt-asus/build_dir/target-mipsel_74kc_musl/php-7.2.6/ext/mysqli/php_mysqli_structs.h:63:0,
                 from /home/equeiroz/src/openwrt-asus/build_dir/target-mipsel_74kc_musl/php-7.2.6/ext/mysqli/mysqli.c:34:
/home/equeiroz/src/openwrt-asus/staging_dir/target-mipsel_74kc_musl/usr/include/mysql/my_global.h:3:2: warning: #warning This file should not be included by clients, include only <mysql.h> [-Wcpp]
 #warning This file should not be included by clients, include only <mysql.h>
  ^~~~~~~
In file included from /home/equeiroz/src/openwrt-asus/build_dir/target-mipsel_74kc_musl/php-7.2.6/ext/mysqli/php_mysqli_structs.h:79:0,
                 from /home/equeiroz/src/openwrt-asus/build_dir/target-mipsel_74kc_musl/php-7.2.6/ext/mysqli/mysqli.c:34:
/home/equeiroz/src/openwrt-asus/staging_dir/target-mipsel_74kc_musl/usr/include/mysql/my_sys.h:3:2: warning: #warning This file should not be included by clients, include only <mysql.h> [-Wcpp]
 #warning This file should not be included by clients, include only <mysql.h>
  ^~~~~~~
In file included from /home/equeiroz/src/openwrt-asus/build_dir/target-mipsel_74kc_musl/php-7.2.6/ext/mysqli/mysqli.c:34:0:
/home/equeiroz/src/openwrt-asus/build_dir/target-mipsel_74kc_musl/php-7.2.6/ext/mysqli/php_mysqli_structs.h:82:10: fatal error: my_list.h: No such file or directory
 #include <my_list.h>

Upstream seems unlikely to fix this, see
https://bugs.php.net/bug.php?id=75612. In the bug report it is suggested
to not use libmysqlclient/libmariadbclient and instead utilize mysqlnd
(MySQL Native Driver) provided by PHP. This is the default anyway.

So add the mysqlnd module and remove the libmariadbclient depends.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2018-06-22 21:28:16 +02:00
Michael Heimpold
ff319fe353 php7: update to 7.2.6
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2018-05-27 17:04:08 +02:00
Michael Heimpold
1bcab624cf php7: replace libmysqlclient dependencies with libmariadbclient
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2018-05-15 22:12:35 +02:00
Michael Heimpold
d0057d5eb4 php7: update to 7.2.5
Also drop obsolete patches.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2018-04-28 23:41:31 +02:00
Michael Heimpold
7c0dd7ae87 php7: fix compile issue with icu 61.1 (refs #5853)
Compile tested only at the moment.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2018-04-02 23:29:54 +02:00
Michael Heimpold
518e6745b2 php7: update to 7.2.4
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2018-03-31 08:58:42 +02:00
Michael Heimpold
7ffa1641d8 php7: update to 7.2.3
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2018-03-04 14:21:46 +01:00
Michael Heimpold
9ace92dd7a php7: fix linking to libpcre
PHP comes with a bundled version of libpcre which is then statically
linked. However, we already depend on the packaged library, so we
can reduce the footprint when linking to it dynamically.
This saves around 200-300 kB (this depends on other configuration).

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2018-02-14 01:13:54 +01:00
Michael Heimpold
379f4a9507 php7: update to 7.2.2
Also refresh patches to reflect new year.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2018-02-05 20:50:46 +01:00
Philip Prindeville
e1a4178de1 php7: redux of fix for issue #5488
Upstream was a little premature on asking for a change and not
vetting it.  Here is the currently proposed fix.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2018-01-25 15:19:30 -07:00
Philip Prindeville
6230ab4437 php7: fix issue 5488
Depending on which version of libiconv you're using, php_iconv_string()
doesn't always null out *out as part of its initialization.  This
patch makes that behavior invariant.

Submitted upstream as https://github.com/php/php-src/pull/3037 where
it's approved and waiting a merge.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2018-01-25 12:51:51 -07:00
Michael Heimpold
9f4b18c757 php7: update to 7.2.1
Remove a patch which was included upstream.

While at, also add openssl configuration parameters when modules are selected
which depend on openssl (reported by Philip Prindeville).

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2018-01-04 20:43:57 +01:00
Philip Prindeville
97efa62c22 php7: fix syntax issue in MIPS code for pcre
Copied from upstream (master).

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2017-12-29 17:41:12 -07:00
Michael Heimpold
97305e41b6 php7: disable valgrind support
The check to enable/disable this new feature of PHP 7.2 works
incorrectly when cross-compiling because it detects the host headers
only and there is no way to pass in a dedicated directory.

The wish to change this was reported upstream at:
https://bugs.php.net/bug.php?id=75722

For the meantime, use a self-cooked patch.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2017-12-28 22:00:07 +01:00