summaryrefslogtreecommitdiffstats
path: root/meta-oe/recipes-devtools/php
Commit message (Collapse)AuthorAgeFilesLines
...
* php: CVE-2020-7069Zheng Ruoqin2020-12-152-0/+159
| | | | | | | | | | | Security Advisory References https://nvd.nist.gov/vuln/detail/CVE-2020-7069 https://bugs.php.net/patch-display.php?bug_id=79601&patch=openssl_aes_ccm_iv_fix&revision=latest Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: CVE-2020-7070Zheng Ruoqin2020-12-152-0/+25
| | | | | | | | | | | | Security Advisory References https://nvd.nist.gov/vuln/detail/CVE-2020-7070 https://bugs.php.net/patch-display.php?bug=79699&patch=fix-urldecode&revision=1600650364 https://github.com/php/php-src/blob/master/main/php_variables.c Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: remove the failing ${D}/${TMPDIR} codeMax Kellermann2020-11-231-9/+0
| | | | | | | | | | Appending ${TMPDIR} to ${D} doesn't make any sense, because both are absolute paths. And additionally, the code fails: rmdir: failed to remove '/usr/src/oe/tmp-musl/work/core2-64-oe-linux-musl/php/7.1.9-r0/image//usr': Directory not empty Signed-off-by: Max Kellermann <max.kellermann@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: use /run instead /var/run in systemd service fileQi.Chen@windriver.com2020-10-161-1/+1
| | | | | | | | /var/run has been deprecated by systemd, so use /run instead, as suggested by systemd. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: Upgrade 7.4.4 -> 7.4.9Leon Anavi2020-08-312-15/+17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Upgrade to release 7.4.9: - Fixed: Upgrade apache2handler's php_apache_sapi_get_request_time to return usec - Fixed: BSTR to PHP string conversion not binary safe - Fixed: DCOM does not work with Username, Password parameter - Fixed: serialize() and unserialize() methods can not be called statically - Fixed: Segfault in php_str_replace_common - Fixed: Assertion failure if dumping closure with unresolved static variable - Fixed: Assertion failure when assigning property of string offset by reference - Fixed: HT iterators not removed if empty array is destroyed - Fixed: Changing array during undef index RW error segfaults - Fixed: Use after free if changing array during undef var during array write fetch - Fixed: Use after free if string used in undefined index warning is changed - Fixed: Public non-static property in child should take priority over private static - Fixed: getimagesize function silently truncates after a null byte - Fixed: finfo_file crash (FILEINFO_MIME) - Fixed: ftp_size on large files - Fixed: mb_strimwidth does not trim string - Fixed: Use of freed hash key in the phar_parse_zipfile function - Fixed: ::getStaticProperties() ignores property modifications - Fixed: ::getStaticPropertyValue() throws on protected props - Fixed: Use after free when type duplicated into ReflectionProperty gets resolved - Fixed: Can't copy() large 'data://' with open_basedir - Fixed: dns_check_record() always return true on Alpine - Fixed: array_walk() does not respect property types Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: update fix for opcache link issue in 7.4.4Claude Bing2020-05-082-11/+13
| | | | | | | | | | The source of the issue is the update for PHP 7.4 support in 0001-opcache-config.m4-enable-opcache.patch (commit 7cc7a9ec). Instead of working around the issue in the recipe file, update the patch to restore the call to PHP_ADD_LIBRARY(). Signed-off-by: Claude Bing <cbing@cybernetics.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: fix opcache link error in 7.4Claude Bing2020-05-071-0/+11
| | | | | | | | | | Explicitly specifying -lrt is required for opcache to be linked against the proper dependencies. Additionally, PHP disables libdl when it detects a cross-compilation environment for some reason. In order to load any type of extension, re-enabling libdl is required. Signed-off-by: Claude Bing <cbing@cybernetics.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: fix PACKAGECONFIG for soapClaude Bing2020-05-061-1/+1
| | | | | | | PHP 7.4 enables libxml by default and removed it as a configurable option. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: add multibyte string support configKonrad Weihmann2020-05-041-0/+1
| | | | | | | | Add mbstring to PACKAGECONFIG to enable multibyte string support in php Signed-off-by: Konrad Weihmann <kweihmann@outlook.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: fix zip package configKonrad Weihmann2020-05-041-1/+1
| | | | | | | | --enable-zip and --with-libzip were removed in PHP 7.x. These are replaced by --with-zip --with-zlib-dir. Signed-off-by: Konrad Weihmann <kweihmann@outlook.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: upgrade 7.3.16 -> 7.4.4Changqing Li2020-04-2712-498/+132
| | | | | | | | | | License-Update: License updated (year updated) note: for 7.4, pear is disabled by default, and it will be deprecated in future. Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: upgrade 7.3.11 -> 7.3.16Changqing Li2020-04-169-471/+2
| | | | | | | | * upgrade to 7.3.16 * remove unuseful patches Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: CVE-2019-11045.patch CVE-2019-11046.patch CVE-2019-11047.patch ↵Wang Mingyu2020-03-185-0/+251
| | | | | | | | | | | | | | | CVE-2019-11050.patch Security Advisory References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11045 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11046 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11047 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11050 Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: Security Advisory - php - CVE-2020-7059Li Zhou2020-02-212-0/+87
| | | | | | | | | | | Backport the patch <http://git.php.net/?p=php-src.git;a=commit; h=0f79b1bf301f455967676b5129240140c5c45b09> to solve CVE-2020-7059. Because of the version context, this porting mainly refers to the version merging commit <http://git.php.net/?p=php-src.git;a=commit; h=a8a6242db7c01bb2d87f29e9b8d5ff3f0f847645> Signed-off-by: Li Zhou <li.zhou@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* meta-oe: Remove using python2Khem Raj2020-01-221-1/+1
| | | | | | | This change makes the parsing go though, we still might have build issues, which will be reported in world builds seprately Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: Upgrade 7.3.9 -> 7.3.11Adrian Bunk2019-11-013-181/+12
| | | | | | | | Patch for issue fixed upstream removed. Also merge the inc into the recipe. Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: fix CVE-2019-6978Trevor Gamblin2019-10-042-0/+193
| | | | | | | | | Patch for php to sync with the fix for the same issue in libgd. CVE: CVE-2019-6978 Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: Move more into php.inc after php5 removalAdrian Bunk2019-09-102-13/+5
| | | | | Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: Remove no longer needed CFLAGS_append_aarch64Adrian Bunk2019-09-101-1/+0
| | | | | Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: fix module path in mod_php.confYi Zhao2019-09-102-3/+3
| | | | | | | | | The apache2 module's path has been changed from ${libdir} to ${libexecdir} in commit 8d4d608b4e937bb3b8e3b260bd75338c3ff7e8fd. Update mod_php.conf to adapt it. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: Turn PCRE JIT off for riscvKhem Raj2019-09-101-0/+3
| | | | | | Its not yet supported Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: sync with apache2's changeKai Kang2019-09-051-4/+2
| | | | | | | It redefines apache2's libexecdir. Update php to sync with that change. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: upgrade 7.3.8 -> 7.3.9Yuan Chao2019-09-031-2/+2
| | | | | Signed-off-by: Yuan Chao <yuanc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: zlib and zip supportSlater, Joseph2019-08-151-1/+3
| | | | | | | Add back zlib support. Define zip support but do not enable it. Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: upgrade 7.3.7 -> 7.3.8Zang Ruochen2019-08-081-2/+2
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: remove host specific info from header fileSlater, Joseph2019-07-212-0/+32
| | | | | | | Import patch from Debian. Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: remove 5.6.40Hongxu Jia2019-07-1611-2057/+0
| | | | | | | | Lets remove it directly, since October would be a year after EOL so waiting until then would make it quite stale Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: upgrade 7.3.6 -> 7.3.7Zang Ruochen2019-07-101-2/+2
| | | | | | | -Upgrade from php_7.3.6.bb to php_7.3.7.bb. Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: upgrade 7.3.4 -> 7.3.6Changqing Li2019-06-151-2/+2
| | | | | Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php-fpm-apache: fix module pathChangqing Li2019-06-151-2/+2
| | | | | | | | | | | | | with configuration: IMAGE_INSTALL_append = " apache2 php-fpm-apache2" systemctl status apache2.service report error: httpd: Syntax error on line 509 of /etc/apache2/httpd.conf: Syntax error on line 3 of /etc/apache2/conf.d/php-fpm.conf: Cannot load lib/apache fix by correct the module path Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php-7: mark two tests as expected to failSlater, Joseph2019-05-212-0/+35
| | | | | | | The output is reasonable, but not what is expected. Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: correct httpd pathChangqing Li2019-05-051-1/+1
| | | | | | | | | | | | | | | | | | Configuration: IMAGE_INSTALL_append = " modphp apache2 phpmyadmin xdebug" PACKAGECONFIG_append_pn-php = " apache2" Apache2 service start up with error: [php7:crit] [pid 3943:tid 140477147074880] Apache is running a threaded MPM, but your PHP Module is not compiled to be threadsafe. Fix: after apache2 is upgraded from 2.4.34 to 2.4.39, apache2-native installs httpd into STAGING_SBINDIR_NATIVE, correct it so that ZTS feature is open, and php is compiled to be threadsafe. Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: upgrade 7.3.2 -> 7.3.4Changqing Li2019-04-303-121/+118
| | | | | Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php_7.3.2.bb: Switch to mysqlndKhem Raj2019-03-071-2/+2
| | | | | | | | | With mariadb 10.x it fails to find headers in right location during builds https://bugs.php.net/bug.php?id=75612 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: upgrade 7.2.10 -> 7.3.2 / 5.3.39 -> 5.6.40Changqing Li2019-02-1512-205/+331
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | License-Update: 7.x version trim trailing whitespace 7.x: * drop CVE-2017-9120.patch since it cannot resolve the CVE * use recommand option --with-libzip, bundled libzip is deprecated * update patches 5.x: * use recommand option --with-libzip, bundled libzip is deprecated * update patches * Fix php 7.x cross build on hosts which have libxml2 installed libxml2 is not detected properly, it pokes at host and takes the libraries and header files added to build which links in libraries like libicu which may not be available in sysroot causing configure failures like checking for sqlite3 files in default path... found in TOPDIR/build/tmp/work/aarch64-yoe-linux/php/7.3.2-r0/recipe-sysroot/usr/lib/.. checking for SQLite 3.3.9+... checking for sqlite3_prepare_v2 in -lsqlite3... no not found configure: error: Please install SQLite 3.3.9 first or check libsqlite3 is present the reason is configure test fails to find icu libraries since they were added based on build host's libxml2.pc Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: upgrade to 5.6.39Hong Liu2019-01-301-2/+2
| | | | | | | 1.Upgrade php from 5.6.38 to 5.6.39. Signed-off-by: Hong Liu <hongl.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* meta-oe: remove True option to getVar calls (again)André Draszik2019-01-131-1/+1
| | | | | | | | | | | | | | A couple have still been missed in the past despite multiple attempts at doing so (or simply have re-appeared?). Search & replace made using the following command: sed -e 's|\(d\.getVar \?\)( \?\([^,()]*\), \?True)|\1(\2)|g' \ -i $(git grep -E 'getVar ?\( ?([^,()]*), ?True\)' \ | cut -d':' -f1 \ | sort -u) Signed-off-by: André Draszik <andre.draszik@jci.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: fix linker errors by setting `ac_cv_func_dlopen=no`Max Kellermann2018-09-271-1/+1
| | | | | | | | | | | | | The autoconf variable `ac_cv_func_dlopen` controls whether `dlopen()` is available without linking `libdl.so`. But that doesn't work: tmp-glibc/work/aarch64-oe-linux/php/7.2.10-r0/recipe-sysroot-native/usr/bin/aarch64-oe-linux/../../libexec/aarch64-oe-linux/gcc/aarch64-oe-linux/8.2.0/ld: ext/sqlite3/libsqlite/sqlite3.o: undefined reference to symbol 'dlsym@@GLIBC_2.17' tmp-glibc/work/aarch64-oe-linux/php/7.2.10-r0/recipe-sysroot-native/usr/bin/aarch64-oe-linux/../../libexec/aarch64-oe-linux/gcc/aarch64-oe-linux/8.2.0/ld: tmp-glibc/work/aarch64-oe-linux/php/7.2.10-r0/recipe-sysroot/lib/libdl.so.2: error adding symbols: DSO missing from command line Leave `ac_cv_lib_dl_dlopen=yes`, because that's the one which controls whether `-ldl` is needed. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: add "--without-sqlite3 --without-pdo-sqlite"Max Kellermann2018-09-271-1/+1
| | | | | | | | Removing "sqlite3" from `PACKAGECONFIG` doesn't actually disable SQLite, because those options default to "yes". It just switches from the system SQLite to PHP's internal SQLite copy. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php5: 5.6.36 -> 5.6.38Hongxu Jia2018-09-262-2/+1288
| | | | | | | | | | | | | | | | 1. Support openssl 1.1.x 2. 5.6.38 ChangeLog (http://php.net/ChangeLog-5.php#5.6.38) - Fixed bug #76582 (XSS due to the header Transfer-Encoding: chunked). - Fixed bug #76423 (Int Overflow lead to Heap OverFlow in exif_thumbnail_extract of exif.c). (CVE-2018-14883) - Fixed bug #76557 (heap-buffer-overflow (READ of size 48) while reading exif data). (CVE-2018-14851) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: Upgrade 7.2.9 -< 7.2.10Changqing Li2018-09-242-3/+3
| | | | | | | | 1. Upgrade 7.2.9 -> 7.2.10 2. php 5.x not support valgrind config, so move it to php_7.x.bb Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Revert "php: actually enable openssl"Khem Raj2018-09-051-1/+1
| | | | | | This reverts commit ff33f477c7288c8d619a129fdaf49bb57deb6282. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: define PACKAGECONFIG[] for valgrindSlater, Joseph2018-08-281-0/+1
| | | | | | | | | | | configure will look by default for valgrind.h in some host directories. We override this by setting --with-valgrind even if we do not want it. The default value of PACKAGECONFIG does not enable valgrind support. Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: 7.2.8 -> 7.2.9Hong Liu2018-08-281-2/+2
| | | | | | | Upgrade php from 7.2.8 to 7.2.9 Signed-off-by: Hong Liu <hongl.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: fix CVE-2017-9120Changqing Li2018-08-212-0/+22
| | | | | Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: upgrade 7.2.7 -> 7.2.8Changqing Li2018-08-111-2/+2
| | | | | Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: actually enable opensslRoss Burton2018-07-221-1/+1
| | | | | | | | The PHP recipe depends on OpenSSL but support is disabled unless you pass --with-openssl. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: actually enable opensslRoss Burton2018-07-121-4/+4
| | | | | | | | | | The PHP recipe depends on OpenSSL but support is disabled unless you pass --with-openssl. Add a PACKAGECONFIG for openssl and enable it by default. Also for clarity pass --enable-opcache when the opcache is enabled. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: upgrade 5.6.35 -> 5.6.36Changqing Li2018-07-121-2/+2
| | | | | Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: upgrade 7.2.4 -> 7.2.7changqing.li@windriver.com2018-06-298-10/+9
| | | | | Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>