buildroot/package/php/php.mk, branch 2016.11.2

php: bump version to 7.1.0 (security)

2017-01-12T08:11:26+00:00

Fixed CVEs: - CVE-2016-9933 (imagefilltoborder stackoverflow on truecolor images) http://bugs.php.net/72696 - CVE-2016-9934 (NULL Pointer Dereference in WDDX Packet Deserialization with PDORow) http://bugs.php.net/73331 Full ChangeLog: http://php.net/ChangeLog-7.php#7.1.0 Signed-off-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard (cherry picked from commit e470b3fde7fe7e69fc5ec57fe8a5c8a4cd66c8cc)

php: security bump to version 7.0.14

2016-12-19T22:00:23+00:00

Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard (cherry picked from commit 2483170d3258ee3e805ead6f0ebafe9fc6765c19)

php: rework selection of interfaces

2016-10-24T12:46:43+00:00

Following suggestion of Yann Morin, rework selection of php interfaces: use booleans instead of choice to be able to select multiple interfaces as they are not exclusive. We make sure at least one of the options is selected. It should be noted that previously CGI and FPM could not be selected at the same time. This is now possible. Bug that prevented compilation of CGI and FPM binaries at the same time has been fixed since PHP 5.4 (https://github.com/php-build/php-build/issues/101). Legacy handling is added for the two options that are removed, and the appropriate new options are selected. Signed-off-by: Fabrice Fontaine Signed-off-by: Thomas Petazzoni

php: security bump to version 7.0.12

2016-10-14T07:26:35+00:00

See http://www.php.net/ChangeLog-7.php#7.0.12 since there are no CVEs out yet. And drop upstream patch. Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

package/php: set MySQL socket path

2016-09-18T17:36:04+00:00

Set the PHP default MySQL socket path to match what the mysql package is using. Signed-off-by: Floris Bos Signed-off-by: Thomas Petazzoni

php: bump to 7.0.11

2016-09-17T12:05:41+00:00

Signed-off-by: Tatsuyuki Ishi Signed-off-by: Thomas Petazzoni

package/php: explicitly disable phpdbg

2016-09-08T19:59:03+00:00

When building php, the package will also build/install phpdbg. This patch explicitly disables this behaviour. Signed-off-by: Theo Debrouwere Signed-off-by: Thomas Petazzoni

package/php: switch from libmysqlclient to mysqlnd

2016-09-06T21:21:50+00:00

The Mysql Native Driver has been the default mysql driver since PHP 5.4, but buildroot was still using libmysqlclient. Mysqlnd has several advantages such as improved memory management and the more favorable PHP licensing terms. (can combine it with proprietary PHP extensions like Ioncube loader, while libmysqlclient requires commercial licensing if you link to it and do not fall under their GPL/FOSS license exception) Signed-off-by: Floris Bos Reviewed-by: Arnout Vandecappelle (Essensium/Mind) Signed-off-by: Thomas Petazzoni

php: bump version to 7.0.9

2016-07-21T11:55:57+00:00

Signed-off-by: Vicente Olivert Riera Signed-off-by: Thomas Petazzoni

package/php: security bump version to 7.0.8

2016-06-26T12:58:07+00:00

Changelog is available here: http://php.net/ChangeLog-7.php#7.0.8 Fixes CVE-2015-8874 http://bugs.php.net/66387 Fixes CVE-2016-5766 http://bugs.php.net/72339 Fixes CVE-2016-5767 http://bugs.php.net/72446 Fixes CVE-2016-5768 http://bugs.php.net/72402 Fixes CVE-2016-5769 http://bugs.php.net/72455 Fixes CVE-2016-5772 http://bugs.php.net/72340 Fixes CVE-2016-5773 http://bugs.php.net/72434 Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni