buildroot/package/php, branch 2017.08

php: security bump to version 7.1.7

2017-07-11T19:30:52+00:00

Fixes the following security issues: CVE-2017-7890 - Buffer over-read into uninitialized memory. The GIF decoding function gdImageCreateFromGifCtx in gd_gif_in.c (which can be reached with a call to the imagecreatefromstring() function) uses constant-sized color tables of size 3 * 256, but does not zero-out these arrays before use. CVE-2017-9224, CVE-2017-9226, CVE-2017-9227, CVE-2017-9228, CVE-2017-9229 - Out-of-bonds access in oniguruma regexp library. CVE-2017-11144 - In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM sealing code did not check the return value of the OpenSSL sealing function, which could lead to a crash of the PHP interpreter, related to an interpretation conflict for a negative number in ext/openssl/openssl.c, and an OpenSSL documentation omission. CVE-2017-11145 - In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, lack of a bounds check in the date extension's timelib_meridian parsing code could be used by attackers able to supply date strings to leak information from the interpreter, related to an ext/date/lib/parse_date.c out-of-bounds read affecting the php_parse_date function. CVE-2017-11146 - In PHP through 5.6.31, 7.x through 7.0.21, and 7.1.x through 7.1.7, lack of bounds checks in the date extension's timelib_meridian parsing code could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-11145. While we're at it, add a hash for the license file. Signed-off-by: Peter Korsgaard

php: use the new gettext logic

2017-07-04T23:34:03+00:00

This commit switches to use the new gettext logic, which involves: - using TARGET_NLS_DEPENDENCIES instead of hand-encoded dependencies on gettext/host-gettext - dropping BR2_PACKAGE_GETTEXT selection. Thanks to this, we can drop the BR2_USE_WCHAR dependency Signed-off-by: Thomas Petazzoni

package/php: fix icu support

2017-06-10T21:03:52+00:00

Propagate icu reverse dependencies. Php lacks "-std=c++11", provided by icu-config, when compiling icu support leading to a build failure: /home/peko/autobuild/instance-1/output/host/usr/sh4-buildroot-linux-uclibc/sysroot/usr/include/unicode/umachine.h:347:13: error: 'char16_t' does not name a type typedef char16_t UChar; Fixes http://autobuild.buildroot.net/results/238/238d0e4bb205c0e7288903c6498e6c1787d86a1b/ Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni

package/php: bump version to 7.1.6

2017-06-10T21:02:47+00:00

Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni

php: bump version to 7.1.5

2017-05-15T21:07:48+00:00

Signed-off-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard

package/p*/Config.in: fix ordering of statements

2017-05-01T17:01:15+00:00

The check-package script when ran gives warnings on ordering issues on all of these Config files. This patch cleans up all warnings related to the ordering in the Config files for packages starting with the letter p in the package directory. The appropriate ordering is: type, default, depends on, select, help See http://nightly.buildroot.org/#_config_files for more information. Signed-off-by: Adam Duskett Signed-off-by: Thomas Petazzoni

php: bump version to 7.1.4

2017-04-18T15:39:20+00:00

Signed-off-by: Vicente Olivert Riera Signed-off-by: Thomas Petazzoni

php: add version to license string

2017-04-01T20:39:19+00:00

As per LICENSE file, php uses PHP license version 3.01. Signed-off-by: Rahul Bedarkar Signed-off-by: Thomas Petazzoni

php: bump version to 7.1.3

2017-03-16T21:11:44+00:00

Signed-off-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard

php: bump to version 7.1.2

2017-03-10T16:19:02+00:00

7.1.2 is a bugfix release, fixing a number of issues: http://www.php.net/ChangeLog-7.php#7.1.2 Signed-off-by: Peter Korsgaard