summaryrefslogtreecommitdiffstats
path: root/meta-oe/recipes-devtools/php
Commit message (Collapse)AuthorAgeFilesLines
* php: Upgrade to 8.1.16Mingli Yu2023-03-071-1/+1
| | | | | | | | | | | Upgrade php to 8.1.16 [1]. [1] https://www.php.net/ChangeLog-8.php#8.1.16 Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit c20ae41fb9bdc8b6f0e3293ee9a2ce63a52e883d) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* php: upgrade 8.1.10 -> 8.1.11Wang Mingyu2022-10-091-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: upgrade 8.1.9 -> 8.1.10wangmy2022-09-131-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: upgrade 8.1.8 -> 8.1.9Wang Mingyu2022-08-231-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: upgrade 8.1.7 -> 8.1.8Wang Mingyu2022-07-191-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: ignore patched CVEsDavide Gardenal2022-07-181-0/+6
| | | | | | | | | CVE-2007-2728, CVE-2007-3205 and CVE-2007-4596 are patched in our version of php but they don't have a vulnerable version range in the NVD database, that's why they need to be ignored. Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: Fix absolute paths to php in phar.phar scriptsKhem Raj2022-07-032-8/+3
| | | | | | | | | | | | This patch is not only needed for target but also needed for native and nativesdk variants. Fixes do_populate_sysroot: QA Issue: : /work/x86_64-linux/php-native/8.1.7-r0/sysroot-destdir/ work/x86_64-linux/php-native/8.1.7-r0/recipe-sysroot-native/usr/bin/phar.phar maximum shebang size exceeded, the ma ximum size is 128. [shebang-size] Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: upgrade 8.1.6 -> 8.1.7wangmy2022-06-301-1/+1
| | | | | | | | | Changelog: ========== https://www.php.net/ChangeLog-8.php#8.1.7 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: upgrade 8.1.5 -> 8.1.6wangmy2022-05-161-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: upgrade 8.1.4 -> 8.1.5wangmy2022-05-091-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: upgrade 8.1.3 -> 8.1.4Wang Mingyu2022-03-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: Fix build on rv32/muslKhem Raj2022-03-171-5/+6
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: upgrade 8.1.2 -> 8.1.3Wang Mingyu2022-02-231-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========= Core: ------ Fixed bug #81430 (Attribute instantiation leaves dangling pointer). Fixed bug #7896 (Environment vars may be mangled on Windows). Fixed bug #7883 (Segfault when INI file is not readable). FFI: ----- Fixed bug #7867 (FFI::cast() from pointer to array is broken). Filter: ------ Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708) FPM: ----- Fixed memory leak on invalid port. Fixed bug #7842 (Invalid OpenMetrics response format returned by FPM status page. MBString: -------- Fixed bug #7902 (mb_send_mail may delimit headers with LF only). MySQLnd: -------- Fixed bug #7972 (MariaDB version prefix 5.5.5- is not stripped). pcntl: ------ Fixed pcntl_rfork build for DragonFlyBSD. Sockets: ------- Fixed bug #7978 (sockets extension compilation errors). Standard: --------- Fixed bug #7899 (Regression in unpack for negative int value). Fixed bug #7875 (mails are sent even if failure to log throws exception). Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: Update to 8.1.2Khem Raj2022-01-251-2/+6
| | | | | | | | | | | | | - Add fibers support for RISCV64 - Disable build on RISCV32 musl since getcontext/setcontext APIs do not exist on musl which are needed for fibers - Detailed changes are here [1] [1] https://www.php.net/ChangeLog-8.php#PHP_8_1 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: avoid textrel QA Issue warningMingli Yu2022-01-191-0/+5
| | | | | | | | | Fixes: WARNING: lib32-php-8.0.12-r0 do_package_qa: QA Issue: lib32-php: ELF binary /usr/libexec/apache2/modules/libphp.so has relocations in .text [textrel] WARNING: lib32-php-8.0.12-r0 do_package_qa: QA Issue: lib32-php-opcache: ELF binary /usr/lib/php8/extensions/no-debug-zts-20200930/opcache.so has relocations in .text [textrel] Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: Upgrade to 8.1.0Mingli Yu2021-12-213-47/+34
| | | | | | | | | | | | | | Rebase one patch to new version and enable openssl PACKAGECONFIG as OpenSSL 3.0 is now supported in the new version now [1] and remove one patch [2] as the related support for cross-compile env is already added in 8.1.0 [3]. [1] https://github.com/php/php-src/commit/7b34db0659dda933b1146a0ff249f25acca1d669 [2] https://git.openembedded.org/meta-openembedded/commit/?id=265bab83c9acbfa97117103dd5c35bbd8a9814d6 [3] https://github.com/php/php-src/commit/f1ad9199eff32dd805bb5b155002bdb6ca69bf01 Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: remove obsolete support for renamed libtoolRoss Burton2021-12-131-2/+2
| | | | | | | | libtool is now longer renamed to ${host}-libtool, so remove the changes to support this. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: correct module name and library nameChangqing Li2021-11-191-1/+1
| | | | | | | | | | wrong name make service apache2 start failed with failure: httpd: Syntax error on line 511 of /etc/apache2/httpd.conf: Syntax error on line 1 of /etc/apache2/modules.d/70_mod_php8.conf: Cannot load /usr/libexec/apache2/modules/libphp7.so into server: /usr/libexec/apache2/modules/libphp7.so: cannot open shared object file: No such file or directory httpd: Syntax error on line 511 of /etc/apache2/httpd.conf: Syntax error on line 1 of /etc/apache2/modules.d/70_mod_php8.conf: Can't locate API module structure `php7_module' in file /usr/libexec/apache2/modules/libphp.so: /usr/libexec/apache2/modules/libphp.so: undefined symbol: php7_module Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: use qemu wrapper to build miniluaClaude Bing2021-11-163-23/+25
| | | | | | | | | | | | | | minilua, by default, is compiled by the host machine as a dependency for compiling the JIT/opcache extension. To successfully cross-compile, this needs to be run under QEMU to match the target architecture. According to the [RFC](https://wiki.php.net/rfc/jit), only x86 and x86_64 targets are supported. Signed-off-by: Ashley Cox <ashleyc@cybernetics.com> Signed-off-by: Claude Bing <cbing@cybernetics.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: Build minilua for build hostKhem Raj2021-11-133-35/+22
| | | | | | see https://bugs.php.net/bug.php?id=80717&edit=1 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: update from 7.4.21 to 8.0.12Claude Bing2021-11-1115-161/+193
| | | | | | | | | | | | Various security and bug fixes; adds support for the JIT compiler. * Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703). https://www.php.net/ChangeLog-8.php#8.0.0 Signed-off-by: Claude Bing <cbing@cybernetics.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: disable openssl PACKAGECONFIGAlexander Kanavin2021-10-141-1/+1
| | | | | | | Until upstream addresses openssl 3.x compatibility issues. Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Convert to new override syntaxMartin Jansa2021-08-031-43/+43
| | | | | | | | | | This is the result of automated script (0.9.1) conversion: oe-core/scripts/contrib/convert-overrides.py . converting the metadata to use ":" as the override character instead of "_". Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* php: move to version 7.4.21Joe Slater2021-07-271-1/+2
| | | | | | | | | Lots of bug fixes. CVE: CVE-2021-21704 CVE-2021-21705 Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: Upgrade to 7.4.16Mingli Yu2021-04-213-187/+2
| | | | | | | | | | License-Update: License updated (year updated) Fix some security issues such as CVE-2021-21702 and remove two cve patches which already included in the new version. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: allow php as emptyChangqing Li2021-03-111-0/+2
| | | | | | | | | Since commit c4ffcaa2[php: split out phpdbg into a separate package], package php is empty, we might met error: nothing provides php needed by php-cli-7.4.9-r0.corei7_64 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: split out phpdbg into a separate packageDiego Santa Cruz2021-02-251-1/+2
| | | | | | | | | Since PHP 7.0 the phpdbg debugger is built by default and gets shipped in the main php package, increasing its size by several MB; split it out into a php-phpdbg package, following Debian naming. Signed-off-by: Diego Santa Cruz <Diego.SantaCruz@spinetix.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: CVE-2020-7069Zheng Ruoqin2020-12-152-0/+159
| | | | | | | | | | | Security Advisory References https://nvd.nist.gov/vuln/detail/CVE-2020-7069 https://bugs.php.net/patch-display.php?bug_id=79601&patch=openssl_aes_ccm_iv_fix&revision=latest Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: CVE-2020-7070Zheng Ruoqin2020-12-152-0/+25
| | | | | | | | | | | | Security Advisory References https://nvd.nist.gov/vuln/detail/CVE-2020-7070 https://bugs.php.net/patch-display.php?bug=79699&patch=fix-urldecode&revision=1600650364 https://github.com/php/php-src/blob/master/main/php_variables.c Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: remove the failing ${D}/${TMPDIR} codeMax Kellermann2020-11-231-9/+0
| | | | | | | | | | Appending ${TMPDIR} to ${D} doesn't make any sense, because both are absolute paths. And additionally, the code fails: rmdir: failed to remove '/usr/src/oe/tmp-musl/work/core2-64-oe-linux-musl/php/7.1.9-r0/image//usr': Directory not empty Signed-off-by: Max Kellermann <max.kellermann@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: use /run instead /var/run in systemd service fileQi.Chen@windriver.com2020-10-161-1/+1
| | | | | | | | /var/run has been deprecated by systemd, so use /run instead, as suggested by systemd. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: Upgrade 7.4.4 -> 7.4.9Leon Anavi2020-08-312-15/+17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Upgrade to release 7.4.9: - Fixed: Upgrade apache2handler's php_apache_sapi_get_request_time to return usec - Fixed: BSTR to PHP string conversion not binary safe - Fixed: DCOM does not work with Username, Password parameter - Fixed: serialize() and unserialize() methods can not be called statically - Fixed: Segfault in php_str_replace_common - Fixed: Assertion failure if dumping closure with unresolved static variable - Fixed: Assertion failure when assigning property of string offset by reference - Fixed: HT iterators not removed if empty array is destroyed - Fixed: Changing array during undef index RW error segfaults - Fixed: Use after free if changing array during undef var during array write fetch - Fixed: Use after free if string used in undefined index warning is changed - Fixed: Public non-static property in child should take priority over private static - Fixed: getimagesize function silently truncates after a null byte - Fixed: finfo_file crash (FILEINFO_MIME) - Fixed: ftp_size on large files - Fixed: mb_strimwidth does not trim string - Fixed: Use of freed hash key in the phar_parse_zipfile function - Fixed: ::getStaticProperties() ignores property modifications - Fixed: ::getStaticPropertyValue() throws on protected props - Fixed: Use after free when type duplicated into ReflectionProperty gets resolved - Fixed: Can't copy() large 'data://' with open_basedir - Fixed: dns_check_record() always return true on Alpine - Fixed: array_walk() does not respect property types Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: update fix for opcache link issue in 7.4.4Claude Bing2020-05-082-11/+13
| | | | | | | | | | The source of the issue is the update for PHP 7.4 support in 0001-opcache-config.m4-enable-opcache.patch (commit 7cc7a9ec). Instead of working around the issue in the recipe file, update the patch to restore the call to PHP_ADD_LIBRARY(). Signed-off-by: Claude Bing <cbing@cybernetics.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: fix opcache link error in 7.4Claude Bing2020-05-071-0/+11
| | | | | | | | | | Explicitly specifying -lrt is required for opcache to be linked against the proper dependencies. Additionally, PHP disables libdl when it detects a cross-compilation environment for some reason. In order to load any type of extension, re-enabling libdl is required. Signed-off-by: Claude Bing <cbing@cybernetics.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: fix PACKAGECONFIG for soapClaude Bing2020-05-061-1/+1
| | | | | | | PHP 7.4 enables libxml by default and removed it as a configurable option. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: add multibyte string support configKonrad Weihmann2020-05-041-0/+1
| | | | | | | | Add mbstring to PACKAGECONFIG to enable multibyte string support in php Signed-off-by: Konrad Weihmann <kweihmann@outlook.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: fix zip package configKonrad Weihmann2020-05-041-1/+1
| | | | | | | | --enable-zip and --with-libzip were removed in PHP 7.x. These are replaced by --with-zip --with-zlib-dir. Signed-off-by: Konrad Weihmann <kweihmann@outlook.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: upgrade 7.3.16 -> 7.4.4Changqing Li2020-04-2712-498/+132
| | | | | | | | | | License-Update: License updated (year updated) note: for 7.4, pear is disabled by default, and it will be deprecated in future. Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: upgrade 7.3.11 -> 7.3.16Changqing Li2020-04-169-471/+2
| | | | | | | | * upgrade to 7.3.16 * remove unuseful patches Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: CVE-2019-11045.patch CVE-2019-11046.patch CVE-2019-11047.patch ↵Wang Mingyu2020-03-185-0/+251
| | | | | | | | | | | | | | | CVE-2019-11050.patch Security Advisory References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11045 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11046 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11047 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11050 Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: Security Advisory - php - CVE-2020-7059Li Zhou2020-02-212-0/+87
| | | | | | | | | | | Backport the patch <http://git.php.net/?p=php-src.git;a=commit; h=0f79b1bf301f455967676b5129240140c5c45b09> to solve CVE-2020-7059. Because of the version context, this porting mainly refers to the version merging commit <http://git.php.net/?p=php-src.git;a=commit; h=a8a6242db7c01bb2d87f29e9b8d5ff3f0f847645> Signed-off-by: Li Zhou <li.zhou@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* meta-oe: Remove using python2Khem Raj2020-01-221-1/+1
| | | | | | | This change makes the parsing go though, we still might have build issues, which will be reported in world builds seprately Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: Upgrade 7.3.9 -> 7.3.11Adrian Bunk2019-11-013-181/+12
| | | | | | | | Patch for issue fixed upstream removed. Also merge the inc into the recipe. Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: fix CVE-2019-6978Trevor Gamblin2019-10-042-0/+193
| | | | | | | | | Patch for php to sync with the fix for the same issue in libgd. CVE: CVE-2019-6978 Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: Move more into php.inc after php5 removalAdrian Bunk2019-09-102-13/+5
| | | | | Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: Remove no longer needed CFLAGS_append_aarch64Adrian Bunk2019-09-101-1/+0
| | | | | Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: fix module path in mod_php.confYi Zhao2019-09-102-3/+3
| | | | | | | | | The apache2 module's path has been changed from ${libdir} to ${libexecdir} in commit 8d4d608b4e937bb3b8e3b260bd75338c3ff7e8fd. Update mod_php.conf to adapt it. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: Turn PCRE JIT off for riscvKhem Raj2019-09-101-0/+3
| | | | | | Its not yet supported Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: sync with apache2's changeKai Kang2019-09-051-4/+2
| | | | | | | It redefines apache2's libexecdir. Update php to sync with that change. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: upgrade 7.3.8 -> 7.3.9Yuan Chao2019-09-031-2/+2
| | | | | Signed-off-by: Yuan Chao <yuanc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>