buildroot/package/php, branch 2017.11-op-build

package/php: security bump to 7.1.13

2018-01-08T21:36:11+00:00

Removed 0008-fix-asm-constraints-in-aarch64-multiply-macro.patch, patch was applied upstream: https://github.com/php/php-src/commit/d6d4f2a9b38cd7fa7e938142e49e5a514d612e52 Renumbered patch 0009. Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni (cherry picked from commit 2c59323b846f9eefafb0d3c5d892119d2aa7becd) Signed-off-by: Peter Korsgaard

package/php: bump version to 7.1.12

2018-01-08T21:36:03+00:00

Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni (cherry picked from commit ab01a1279c4990d201e6a560dbe9cc5b25a20fae) Signed-off-by: Peter Korsgaard

package/php: bump version to 7.1.11

2017-10-28T12:19:32+00:00

Changelog: http://www.php.net/ChangeLog-7.php#7.1.11 Signed-off-by: Bernd Kuhls Signed-off-by: Peter Korsgaard

package/php: bump version to 7.1.10

2017-10-03T12:18:37+00:00

Changelog: http://www.php.net/ChangeLog-7.php#7.1.10 Signed-off-by: Bernd Kuhls Signed-off-by: Peter Korsgaard

package/php: bump version to 7.1.9

2017-09-07T19:41:59+00:00

Signed-off-by: Bernd Kuhls Signed-off-by: Peter Korsgaard

php: security bump to version 7.1.7

2017-07-11T19:30:52+00:00

Fixes the following security issues: CVE-2017-7890 - Buffer over-read into uninitialized memory. The GIF decoding function gdImageCreateFromGifCtx in gd_gif_in.c (which can be reached with a call to the imagecreatefromstring() function) uses constant-sized color tables of size 3 * 256, but does not zero-out these arrays before use. CVE-2017-9224, CVE-2017-9226, CVE-2017-9227, CVE-2017-9228, CVE-2017-9229 - Out-of-bonds access in oniguruma regexp library. CVE-2017-11144 - In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM sealing code did not check the return value of the OpenSSL sealing function, which could lead to a crash of the PHP interpreter, related to an interpretation conflict for a negative number in ext/openssl/openssl.c, and an OpenSSL documentation omission. CVE-2017-11145 - In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, lack of a bounds check in the date extension's timelib_meridian parsing code could be used by attackers able to supply date strings to leak information from the interpreter, related to an ext/date/lib/parse_date.c out-of-bounds read affecting the php_parse_date function. CVE-2017-11146 - In PHP through 5.6.31, 7.x through 7.0.21, and 7.1.x through 7.1.7, lack of bounds checks in the date extension's timelib_meridian parsing code could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-11145. While we're at it, add a hash for the license file. Signed-off-by: Peter Korsgaard

php: use the new gettext logic

2017-07-04T23:34:03+00:00

This commit switches to use the new gettext logic, which involves: - using TARGET_NLS_DEPENDENCIES instead of hand-encoded dependencies on gettext/host-gettext - dropping BR2_PACKAGE_GETTEXT selection. Thanks to this, we can drop the BR2_USE_WCHAR dependency Signed-off-by: Thomas Petazzoni

package/php: fix icu support

2017-06-10T21:03:52+00:00

Propagate icu reverse dependencies. Php lacks "-std=c++11", provided by icu-config, when compiling icu support leading to a build failure: /home/peko/autobuild/instance-1/output/host/usr/sh4-buildroot-linux-uclibc/sysroot/usr/include/unicode/umachine.h:347:13: error: 'char16_t' does not name a type typedef char16_t UChar; Fixes http://autobuild.buildroot.net/results/238/238d0e4bb205c0e7288903c6498e6c1787d86a1b/ Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni

package/php: bump version to 7.1.6

2017-06-10T21:02:47+00:00

Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni

php: bump version to 7.1.5

2017-05-15T21:07:48+00:00

Signed-off-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard