Skip to contentSkip to conversation

package/php: security bump to version 7.2.5

PATCH New Bernd Kuhls 3 participants 3 messages Apr 28, 2018 – May 1, 2018

lore
Share & tools
lore

Bernd Kuhls

author
#0 lore raw

PATCH 1/1 package/php: security bump to version 7.2.5

Changelog: http://www.php.net/ChangeLog-7.php#7.2.5

This release fixes several security-related bugs for which no CVE id's are assigned at the time of writing:

https://bugs.php.net/bug.php?id=76129
https://bugs.php.net/bug.php?id=76130
https://bugs.php.net/bug.php?id=76248
https://bugs.php.net/bug.php?id=76249

Removed patch 0007, applied upstream:
https://github.com/php/php-src/commit/2842aa2a078eb1cad55540b61e7edf111395150d

Re-numbered patch 0009 -> 0007.

Signed-off-by Bernd Kuhls <[email protected]>
---
 ...expat_compat.h-add-missing-php.h-include.patch} |  0
 ...i.c-build-empty-php_load_zend_extension_c.patch | 62 ----------------------
 package/php/php.hash                               |  2 +-
 package/php/php.mk                                 |  2 +-
 4 files changed, 2 insertions(+), 64 deletions(-)
 rename package/php/{0009-ext-xml-expat_compat.h-add-missing-php.h-include.patch => 0007-ext-xml-expat_compat.h-add-missing-php.h-include.patch} (100%)
 delete mode 100644 package/php/0007-main-php_ini.c-build-empty-php_load_zend_extension_c.patch
package/php/0007-ext-xml-expat_compat.h-add-missing-php.h-include.patch renamed from package/php/0009-ext-xml-expat_compat.h-add-missing-php.h-include.patch +0 -0
similarity index 100%
rename from package/php/0009-ext-xml-expat_compat.h-add-missing-php.h-include.patch
rename to package/php/0007-ext-xml-expat_compat.h-add-missing-php.h-include.patch
package/php/0007-main-php_ini.c-build-empty-php_load_zend_extension_c.patch deleted +0 -62

62 lines not on this page · raw message

package/php/php.hash +1 -1
index 4cd5acaef9..4ddef44274 100644
@@ -1,5 +1,5 @@
 # From http://php.net/downloads.php
-sha256 7916b1bd148ddfd46d7f8f9a517d4b09cd8a8ad9248734e7c8dd91ef17057a88  php-7.2.4.tar.xz
+sha256 af70a33b3f7a51510467199b39af151333fbbe4cc21923bad9c7cf64268cddb2  php-7.2.5.tar.xz
 
 # License file
 sha256 00e567a8d50359d93ee1f9afdd9511277660c1e70a0cbf3229f84403aa9aebb1  LICENSE
package/php/php.mk +1 -1
index 91756794ee..4c3a87118e 100644
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-PHP_VERSION = 7.2.4
+PHP_VERSION = 7.2.5
 PHP_SITE = http://www.php.net/distributions
 PHP_SOURCE = php-$(PHP_VERSION).tar.xz
 PHP_INSTALL_STAGING = YES
Signature · 1 line
2.14.2
Applied
#1 lore raw

PATCH 1/1 package/php: security bump to version 7.2.5

Hello,

Quoted 16 lines · Bernd Kuhls

Changelog: http://www.php.net/ChangeLog-7.php#7.2.5

This release fixes several security-related bugs for which no CVE id's are assigned at the time of writing:

https://bugs.php.net/bug.php?id=76129
https://bugs.php.net/bug.php?id=76130
https://bugs.php.net/bug.php?id=76248
https://bugs.php.net/bug.php?id=76249

Removed patch 0007, applied upstream:
https://github.com/php/php-src/commit/2842aa2a078eb1cad55540b61e7edf111395150d

Re-numbered patch 0009 -> 0007.

Signed-off-by Bernd Kuhls <[email protected]>
Quoted 8 lines
---
 ...expat_compat.h-add-missing-php.h-include.patch} |  0
 ...i.c-build-empty-php_load_zend_extension_c.patch | 62 ----------------------
 package/php/php.hash                               |  2 +-
 package/php/php.mk                                 |  2 +-
 4 files changed, 2 insertions(+), 64 deletions(-)
 rename package/php/{0009-ext-xml-expat_compat.h-add-missing-php.h-include.patch => 0007-ext-xml-expat_compat.h-add-missing-php.h-include.patch} (100%)
 delete mode 100644 package/php/0007-main-php_ini.c-build-empty-php_load_zend_extension_c.patch

Applied to master, thanks.

Thomas

Signature · 3 lines
Thomas Petazzoni, CTO, Bootlin (formerly Free Electrons)
Embedded Linux and Kernel engineering
https://bootlin.com
#2 lore raw

PATCH 1/1 package/php: security bump to version 7.2.5

In reply to Bernd Kuhls
Quoted 11 lines
Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line

"Bernd" == Bernd Kuhls <[email protected]> writes:

Changelog: http://www.php.net/ChangeLog-7.php#7.2.5
This release fixes several security-related bugs for which no CVE id's are assigned at the time of writing:

https://bugs.php.net/bug.php?id=76129
https://bugs.php.net/bug.php?id=76130
https://bugs.php.net/bug.php?id=76248
https://bugs.php.net/bug.php?id=76249

Quoted 6 lines

Removed patch 0007, applied upstream:
https://github.com/php/php-src/commit/2842aa2a078eb1cad55540b61e7edf111395150d

Re-numbered patch 0009 -> 0007.

Signed-off-by Bernd Kuhls <[email protected]>

Committed to 2018.02.x, thanks.

Signature · 1 line
Bye, Peter Korsgaard