Merge modphp into php and upgrade
v2 cover Merge modphp into php and upgrade
Finally resolve the overlap between the modphp and php recipes by merging the former into the latter. Along the way I fixed a few minor issues and upgraded related recipes.
I've taken a stepped approach to doing the php merge / upgrade so it's easier to see what's going on and easier for me to test - first upgrade php to the same version as modphp, then do the integration, then upgrade to the latest 5.5 release. I would appreciate someone testing PHP in CGI mode however since I don't have a convenient test setup for that (as I do for mod_php).
Changes since v1:
* Default mod_php building to disabled since we don't have apache2 in meta-oe where the php recipe is and meta-oe can't depend on meta-webserver
* Drop commented out line in uw-imap pam change
* Update meta-webserver README as appropriate
The following changes since commit 2ea3a19a478c526baa04d6b9a9e8c9f42aae9d34:
ctapi-common: Add new recipe (2014-12-31 16:38:22 +0100)
are available in the git repository at:
git://git.openembedded.org/meta-openembedded-contrib paule/php
http://cgit.openembedded.org/cgit.cgi/meta-openembedded-contrib/log/?h=paule/php
Paul Eggleton (12):
php: upgrade to 5.5.15
libc-client: rename to uw-imap, upgrade to 2007f
php: integrate modphp
php: upgrade to 5.5.20
modphp: remove
README: update for modphp merging into php
uw-imap: make libpam dependency dependent on DISTRO_FEATURES
php: add PACKAGECONFIG to fix implicit dependency on libpam
php: add PACKAGECONFIG for imap
xdebug: fix DEPENDS and un-blacklist
xdebug: update to 2.2.6
phpmyadmin: update to 4.3.4
.../recipes-devtools/php/php}/70_mod_php5.conf | 0
.../recipes-devtools/php/php}/configure.patch | 0
.../php/php}/pthread-check-threads-m4.patch | 0
meta-oe/recipes-devtools/php/php_5.4.33.bb | 150 -----------
meta-oe/recipes-devtools/php/php_5.5.20.bb | 234 +++++++++++++++++
.../uw-imap/uw-imap/imap-2007e-shared.patch | 82 ++++++
.../uw-imap/imap-2007f-format-security.patch | 20 ++
.../files => uw-imap/uw-imap}/quote_cctype.patch | 0
.../uw-imap_2007f.bb} | 23 +-
meta-webserver/README | 16 +-
.../0001-using-pkgconfig-to-check-libxml.patch | 74 ------
.../modphp/files/php-CVE-2014-3587.patch | 31 ---
.../modphp/files/php-CVE-2014-3597.patch | 282 ---------------------
.../modphp/files/php-CVE-2014-5120.patch | 35 ---
meta-webserver/recipes-php/modphp/modphp5.inc | 112 --------
meta-webserver/recipes-php/modphp/modphp_5.5.15.bb | 7 -
.../0001-Bug-4544-additional-fix-for-4.2.x.patch | 29 ---
...ug-4504-security-Self-XSS-in-query-charts.patch | 29 ---
...4505-security-XSS-in-view-operations-page.patch | 43 ----
.../{phpmyadmin_4.2.7.bb => phpmyadmin_4.3.4.bb} | 7 +-
.../xdebug/{xdebug_2.2.5.bb => xdebug_2.2.6.bb} | 8 +-
21 files changed, 372 insertions(+), 810 deletions(-)
rename {meta-webserver/recipes-php/modphp/files => meta-oe/recipes-devtools/php/php}/70_mod_php5.conf (100%)
rename {meta-webserver/recipes-php/modphp/files => meta-oe/recipes-devtools/php/php}/configure.patch (100%)
rename {meta-webserver/recipes-php/modphp/files => meta-oe/recipes-devtools/php/php}/pthread-check-threads-m4.patch (100%)
delete mode 100644 meta-oe/recipes-devtools/php/php_5.4.33.bb
create mode 100644 meta-oe/recipes-devtools/php/php_5.5.20.bb
create mode 100644 meta-oe/recipes-devtools/uw-imap/uw-imap/imap-2007e-shared.patch
create mode 100644 meta-oe/recipes-devtools/uw-imap/uw-imap/imap-2007f-format-security.patch
rename meta-oe/recipes-devtools/{libc-client/files => uw-imap/uw-imap}/quote_cctype.patch (100%)
rename meta-oe/recipes-devtools/{libc-client/libc-client_2007e.bb => uw-imap/uw-imap_2007f.bb} (55%)
delete mode 100644 meta-webserver/recipes-php/modphp/files/0001-using-pkgconfig-to-check-libxml.patch
delete mode 100644 meta-webserver/recipes-php/modphp/files/php-CVE-2014-3587.patch
delete mode 100644 meta-webserver/recipes-php/modphp/files/php-CVE-2014-3597.patch
delete mode 100644 meta-webserver/recipes-php/modphp/files/php-CVE-2014-5120.patch
delete mode 100644 meta-webserver/recipes-php/modphp/modphp5.inc
delete mode 100644 meta-webserver/recipes-php/modphp/modphp_5.5.15.bb
delete mode 100644 meta-webserver/recipes-php/phpmyadmin/phpmyadmin/0001-Bug-4544-additional-fix-for-4.2.x.patch
delete mode 100644 meta-webserver/recipes-php/phpmyadmin/phpmyadmin/0001-bug-4504-security-Self-XSS-in-query-charts.patch
delete mode 100644 meta-webserver/recipes-php/phpmyadmin/phpmyadmin/0001-bug-4505-security-XSS-in-view-operations-page.patch
rename meta-webserver/recipes-php/phpmyadmin/{phpmyadmin_4.2.7.bb => phpmyadmin_4.3.4.bb} (75%)
rename meta-webserver/recipes-php/xdebug/{xdebug_2.2.5.bb => xdebug_2.2.6.bb} (79%)Signature · 1 line
1.9.3
PATCH v2 1/12 php: upgrade to 5.5.15
Based on the corresponding changes to the modphp recipe in meta-webserver. From the commit message for the modphp upgrade:
* LIC_FILES_CHKSUM needed to change because the copyright year changed
* Enabled mcrypt since upstream recommend this for acceptable performance
* Disabled the opcache; this is a new feature in 5.5 and the configure check for it currently breaks when cross-compiling.
---
meta-oe/recipes-devtools/php/{php_5.4.33.bb => php_5.5.15.bb} | 11 ++++++-----
1 file changed, 6 insertions(+), 5 deletions(-)
rename meta-oe/recipes-devtools/php/{php_5.4.33.bb => php_5.5.15.bb} (94%)meta-oe/recipes-devtools/php/php_5.5.15.bb renamed from meta-oe/recipes-devtools/php/php_5.4.33.bb +6 -5
@@ -3,11 +3,11 @@ HOMEPAGE = "http://www.php.net" SECTION = "console/network" LICENSE = "PHP-3.0" -LIC_FILES_CHKSUM = "file://LICENSE;md5=cb564efdf78cce8ea6e4b5a4f7c05d97" +LIC_FILES_CHKSUM = "file://LICENSE;md5=52dd90569008fee5bcdbb22d945b1108" BBCLASSEXTEND = "native" DEPENDS = "zlib libxml2 virtual/libiconv php-native lemon-native \ - libc-client openssl" + libc-client openssl libmcrypt" DEPENDS_virtclass-native = "zlib-native libxml2-native" # The new PHP downloads server groups PHP releases by major version so find
@@ -30,8 +30,8 @@ SRC_URI_append_class-target += " \ file://php-fpm-apache.conf \ " -SRC_URI[md5sum] = "c6878bb1cdb46bfc1e1a5cd67a024737" -SRC_URI[sha256sum] = "1a75b2d0835e74b8886cd3980d9598a0e06691441bb7f91d19b74c2278e40bb5" +SRC_URI[md5sum] = "5cb5f2ed9099299f8a4c952d59d93812" +SRC_URI[sha256sum] = "00f24226b12fee27e332383b6304f1b9ed3f4d9173dd728a68c5c3f5a59b8ba7" S = "${WORKDIR}/php-${PV}"
@@ -40,7 +40,7 @@ inherit autotools pkgconfig pythonnative gettext SSTATE_SCAN_FILES += "build-defs.h" # Common EXTRA_OECONF -COMMON_EXTRA_OECONF = "--enable-sockets --enable-pcntl --enable-shared" +COMMON_EXTRA_OECONF = "--enable-sockets --enable-pcntl --enable-shared --disable-opcache" EXTRA_OECONF = "--enable-mbstring \ --enable-wddx \ --enable-fpm \
@@ -49,6 +49,7 @@ EXTRA_OECONF = "--enable-mbstring \ --with-imap-ssl=${STAGING_DIR_HOST} \ --with-zlib=${STAGING_LIBDIR}/.. \ --with-iconv=${STAGING_LIBDIR}/.. \ + --with-mcrypt=${STAGING_DIR_TARGET}${exec_prefix} \ ${COMMON_EXTRA_OECONF} \ " EXTRA_OECONF_virtclass-native = " \
Signature · 1 line
1.9.3
PATCH v3 1/1 php: upgrade to 5.5.15
Based on the corresponding changes to the modphp recipe in meta-webserver. From the commit message for the modphp upgrade:
* LIC_FILES_CHKSUM needed to change because the copyright year changed
* Enabled mcrypt since upstream recommend this for acceptable performance
* Disabled the opcache; this is a new feature in 5.5 and the configure check for it currently breaks when cross-compiling.
Also fix an issue with the "phar" script which ended up with a shebang pointing into the workdir on the host.
---
.../recipes-devtools/php/{php_5.4.33.bb => php_5.5.15.bb} | 12 +++++++-----
1 file changed, 7 insertions(+), 5 deletions(-)
rename meta-oe/recipes-devtools/php/{php_5.4.33.bb => php_5.5.15.bb} (93%)meta-oe/recipes-devtools/php/php_5.5.15.bb renamed from meta-oe/recipes-devtools/php/php_5.4.33.bb +7 -5
@@ -3,11 +3,11 @@ HOMEPAGE = "http://www.php.net" SECTION = "console/network" LICENSE = "PHP-3.0" -LIC_FILES_CHKSUM = "file://LICENSE;md5=cb564efdf78cce8ea6e4b5a4f7c05d97" +LIC_FILES_CHKSUM = "file://LICENSE;md5=52dd90569008fee5bcdbb22d945b1108" BBCLASSEXTEND = "native" DEPENDS = "zlib libxml2 virtual/libiconv php-native lemon-native \ - libc-client openssl" + libc-client openssl libmcrypt" DEPENDS_virtclass-native = "zlib-native libxml2-native" # The new PHP downloads server groups PHP releases by major version so find
@@ -30,8 +30,8 @@ SRC_URI_append_class-target += " \ file://php-fpm-apache.conf \ " -SRC_URI[md5sum] = "c6878bb1cdb46bfc1e1a5cd67a024737" -SRC_URI[sha256sum] = "1a75b2d0835e74b8886cd3980d9598a0e06691441bb7f91d19b74c2278e40bb5" +SRC_URI[md5sum] = "5cb5f2ed9099299f8a4c952d59d93812" +SRC_URI[sha256sum] = "00f24226b12fee27e332383b6304f1b9ed3f4d9173dd728a68c5c3f5a59b8ba7" S = "${WORKDIR}/php-${PV}"
@@ -40,7 +40,7 @@ inherit autotools pkgconfig pythonnative gettext SSTATE_SCAN_FILES += "build-defs.h" # Common EXTRA_OECONF -COMMON_EXTRA_OECONF = "--enable-sockets --enable-pcntl --enable-shared" +COMMON_EXTRA_OECONF = "--enable-sockets --enable-pcntl --enable-shared --disable-opcache" EXTRA_OECONF = "--enable-mbstring \ --enable-wddx \ --enable-fpm \
@@ -49,6 +49,7 @@ EXTRA_OECONF = "--enable-mbstring \ --with-imap-ssl=${STAGING_DIR_HOST} \ --with-zlib=${STAGING_LIBDIR}/.. \ --with-iconv=${STAGING_LIBDIR}/.. \ + --with-mcrypt=${STAGING_DIR_TARGET}${exec_prefix} \ ${COMMON_EXTRA_OECONF} \ " EXTRA_OECONF_virtclass-native = " \
@@ -111,6 +112,7 @@ do_install_append_class-target() { rmdir ${TMP} TMP=`dirname ${TMP}`; done + sed -i 's:^#!/.*/php:#!${bindir}/php:' ${D}${bindir}/phar.phar } PACKAGES = "${PN}-dbg ${PN}-cli ${PN}-cgi ${PN}-fpm ${PN}-fpm-apache2 ${PN}-pear ${PN}-dev ${PN}-staticdev ${PN}-doc ${PN}"
Signature · 1 line
1.9.3
PATCH v2 2/12 libc-client: rename to uw-imap, upgrade to 2007f
In reply to Paul Eggleton* Upgrade to 2007f
* Rename to uw-imap; this is the name used by Fedora and is much more sensible than libc-client
* Fix errors when linking the library against code compiled with -fPIC such as mod-php (patch from Fedora).
* Add a security patch from Fedora
* Rename files directory to uw-imap
---
.../uw-imap/uw-imap/imap-2007e-shared.patch | 82 ++++++++++++++++++++++
.../uw-imap/imap-2007f-format-security.patch | 20 ++++++
.../files => uw-imap/uw-imap}/quote_cctype.patch | 0
.../uw-imap_2007f.bb} | 16 +++--
4 files changed, 113 insertions(+), 5 deletions(-)
create mode 100644 meta-oe/recipes-devtools/uw-imap/uw-imap/imap-2007e-shared.patch
create mode 100644 meta-oe/recipes-devtools/uw-imap/uw-imap/imap-2007f-format-security.patch
rename meta-oe/recipes-devtools/{libc-client/files => uw-imap/uw-imap}/quote_cctype.patch (100%)
rename meta-oe/recipes-devtools/{libc-client/libc-client_2007e.bb => uw-imap/uw-imap_2007f.bb} (66%)meta-oe/recipes-devtools/uw-imap/uw-imap/imap-2007e-shared.patch new file +82 -0
@@ -0,0 +1,82 @@ +Fix linking libraries built with -fPIC with this library + +Patch borrowed from Fedora + +Signed-off-by: Paul Eggleton <[email protected]> + +Upstream-Status: Pending + +diff -up imap-2007e/src/osdep/unix/Makefile.shared imap-2007e/src/osdep/unix/Makefile +--- imap-2007e/src/osdep/unix/Makefile.shared 2009-07-07 19:28:02.909755512 -0500 ++++ imap-2007e/src/osdep/unix/Makefile 2009-07-07 19:29:35.870006799 -0500 +@@ -170,6 +170,10 @@ BUILD=$(MAKE) build EXTRACFLAGS='$(EXTRA + EXTRADRIVERS='$(EXTRADRIVERS)' EXTRAAUTHENTICATORS='$(EXTRAAUTHENTICATORS)'\ + PASSWDTYPE=$(PASSWDTYPE) SSLTYPE=$(SSLTYPE) IP=$(IP) + ++# Need this for the shared library rule to work correctly ++.SUFFIXES: .o .so ++SOFILES=${BINARIES:.o=.so} ++ + + # Here if no make argument established + +@@ -845,18 +849,24 @@ vu2: # VAX Ultrix 2.3, etc. + + # Build it! + +-build: clean once $(ARCHIVE) ++build: clean once $(ARCHIVE) $(SHLIBNAME) + +-all: $(ARCHIVE) ++all: $(ARCHIVE) $(SHLIBNAME) + + $(ARCHIVE): $(BINARIES) + sh -c '$(RM) $(ARCHIVE) || true' + @$(CAT) ARCHIVE + @$(SH) ARCHIVE + +-.c.o: +- `$(CAT) CCTYPE` -c `$(CAT) CFLAGS` $*.c ++$(SHLIBNAME): $(SOFILES) ++ gcc -shared -Wl,-soname,$(SHLIBNAME) -o $(SHLIBNAME) $(SOFILES) `cat LDFLAGS` ++ ln -s $(SHLIBNAME) lib$(SHLIBBASE).so + ++.c.so: osdep.h ++ $(CC) -fPIC -DPIC -D_REENTRANT -c `$(CAT) CFLAGS` ${@:.so=.c} -o $@ ++ ++.c.o: ++ $(CC) -fPIC -DPIC -D_REENTRANT -c `$(CAT) CFLAGS` $*.c + + # Cleanup + +@@ -895,8 +905,7 @@ utf8aux.o: mail.h misc.h osdep.h utf8.h + + + # OS-dependent +- +-osdep.o:mail.h misc.h env.h fs.h ftl.h nl.h tcp.h \ ++OSDEPS= mail.h misc.h env.h fs.h ftl.h nl.h tcp.h \ + osdep.h env_unix.h tcp_unix.h \ + osdep.c env_unix.c fs_unix.c ftl_unix.c nl_unix.c tcp_unix.c ip_unix.c\ + auths.c crexcl.c flockcyg.c flocklnx.c flocksim.c fsync.c \ +@@ -910,12 +919,19 @@ osdep.o:mail.h misc.h env.h fs.h ftl.h n + write.c sslstdio.c \ + strerror.c strpbrk.c strstr.c strtok.c strtoul.c \ + OSCFLAGS ++ ++osdep.o: $(OSDEPS) ++ $(CC) -fPIC -DPIC -D_REENTRANT `$(CAT) CFLAGS` `$(CAT) OSCFLAGS` -c osdep.c ++ @echo ======================================================================== + @echo Building OS-dependent module + @echo If you get No such file error messages for files x509.h, ssl.h, + @echo pem.h, buffer.h, bio.h, and crypto.h, that means that OpenSSL + @echo is not installed on your system. Either install OpenSSL first + @echo or build with command: make `$(CAT) OSTYPE` SSLTYPE=none +- `$(CAT) CCTYPE` -c `$(CAT) CFLAGS` `$(CAT) OSCFLAGS` -c osdep.c ++ @echo ======================================================================== ++ ++osdep.so: $(OSDEPS) ++ $(CC) -fPIC -DPIC -D_REENTRANT `$(CAT) CFLAGS` `cat OSCFLAGS` -c osdep.c -o $@ + + osdep.c: osdepbas.c osdepckp.c osdeplog.c osdepssl.c + $(CAT) osdepbas.c osdepckp.c osdeplog.c osdepssl.c > osdep.c
meta-oe/recipes-devtools/uw-imap/uw-imap/imap-2007f-format-security.patch new file +20 -0
@@ -0,0 +1,20 @@ +Fix error found with "-Werror=format-security" flag + +Patch borrowed from Fedora + +Signed-off-by: Paul Eggleton <[email protected]> + +Upstream-Status: Pending + +diff -Naur imap-2007f.orig/src/osdep/unix/flocklnx.c imap-2007f/src/osdep/unix/flocklnx.c +--- imap-2007f.orig/src/osdep/unix/flocklnx.c 2011-07-23 02:20:11.000000000 +0200 ++++ imap-2007f/src/osdep/unix/flocklnx.c 2014-04-14 19:17:46.429000000 +0200 +@@ -57,7 +57,7 @@ + case ENOLCK: /* lock table is full */ + sprintf (tmp,"File locking failure: %s",strerror (errno)); + mm_log (tmp,WARN); /* give the user a warning of what happened */ +- if (!logged++) syslog (LOG_ERR,tmp); ++ if (!logged++) syslog (LOG_ERR, "%s", tmp); + /* return failure if non-blocking lock */ + if (op & LOCK_NB) return -1; + sleep (5); /* slow down in case it loops */
meta-oe/recipes-devtools/uw-imap/uw-imap/quote_cctype.patch renamed from meta-oe/recipes-devtools/libc-client/files/quote_cctype.patch +0 -0
meta-oe/recipes-devtools/uw-imap/uw-imap_2007f.bb renamed from meta-oe/recipes-devtools/libc-client/libc-client_2007e.bb +11 -5
@@ -6,13 +6,14 @@ LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=a6a4ddbb7cd2999f6827ee143f6fcd97" DEPENDS = "openssl libpam" -PR = "r1" - SRC_URI = "ftp://ftp.cac.washington.edu/imap/imap-${PV}.tar.gz \ - file://quote_cctype.patch" + file://quote_cctype.patch \ + file://imap-2007e-shared.patch \ + file://imap-2007f-format-security.patch \ + " -SRC_URI[md5sum] = "7903800dc2604000016de070e0c55840" -SRC_URI[sha256sum] = "4b1137b87249782496ec3eeacaf83bbf09312a7d2ae3aead262179041b55565f" +SRC_URI[md5sum] = "2126fd125ea26b73b20f01fcd5940369" +SRC_URI[sha256sum] = "53e15a2b5c1bc80161d42e9f69792a3fa18332b7b771910131004eb520004a28" S = "${WORKDIR}/imap-${PV}"
@@ -32,4 +33,9 @@ do_install() { install c-client/c-client.a ${D}${libdir}/libc-client.a } +RPROVIDES_${PN} = "libc-client" +RREPLACES_${PN} = "libc-client" +RCONFLICTS_${PN} = "libc-client" + ALLOW_EMPTY_${PN} = "1" +
Signature · 1 line
1.9.3
PATCH v2 3/12 php: integrate modphp
In reply to Paul EggletonBuild the mod_php Apache module within the main php recipe; this avoids files in the sysroot from stepping on eachother and therefore avoids the resulting build failure.
Changes made:
* Add an "apache2" PACKAGECONFIG, default disabled. This means that if you previously used the modphp recipe you now need to set PACKAGECONFIG for php to include "apache2".
* Bring in most patches and configure options from the modphp recipe.
* Specify ${libdir}/php5 as libdir. This avoids the PHP extensions directory being /usr/lib/extensions by default which is ugly.
* Tidy up some superfluous/malformed entries in FILES_${PN}-pear
* Drop obsolete PHP_MAJVER
* Replace virtclass- override with class-
--- meta-oe/recipes-devtools/php/php/70_mod_php5.conf | 12 ++ meta-oe/recipes-devtools/php/php/configure.patch | 11 ++ .../php/php/pthread-check-threads-m4.patch | 30 +++++ meta-oe/recipes-devtools/php/php_5.5.15.bb | 142 ++++++++++++++++----- 4 files changed, 163 insertions(+), 32 deletions(-) create mode 100644 meta-oe/recipes-devtools/php/php/70_mod_php5.conf create mode 100644 meta-oe/recipes-devtools/php/php/configure.patch create mode 100644 meta-oe/recipes-devtools/php/php/pthread-check-threads-m4.patch
meta-oe/recipes-devtools/php/php/70_mod_php5.conf new file +12 -0
@@ -0,0 +1,12 @@ +# vim: ft=apache sw=4 ts=4 +<IfDefine PHP5> + # Load the module first + <IfModule !sapi_apache2.c> + LoadModule php5_module lib/apache2/modules/libphp5.so + </IfModule> + + # Set it to handle the files + AddHandler php5-script .php .phtml .php3 .php4 .php5 + AddType application/x-httpd-php-source .phps + DirectoryIndex index.html index.html.var index.php index.phtml +</IfDefine>
meta-oe/recipes-devtools/php/php/configure.patch new file +11 -0
@@ -0,0 +1,11 @@ +--- php-5.1.6/configure.old 2006-09-12 07:54:14.000000000 -0700 ++++ php-5.1.6/configure 2006-09-12 07:54:37.000000000 -0700 +@@ -14715,8 +14715,6 @@ + + + +- unset ac_cv_func_dlopen +- unset ac_cv_func___dlopen + unset found + + echo $ac_n "checking for dlopen""... $ac_c" 1>&6
meta-oe/recipes-devtools/php/php/pthread-check-threads-m4.patch new file +30 -0
@@ -0,0 +1,30 @@ +From d8067ceacbf54e79c9c6b68675332c09eaa0b55d Mon Sep 17 00:00:00 2001 +From: Jackie Huang <[email protected]> +Date: Mon, 8 Apr 2013 14:29:51 +0800 +Subject: [PATCH] pthread-check + +Enable pthreads support when cross-compiling + +Upstream-Status: Inapproprate [config] + +Signed-off-by: Jackie Huang <[email protected]> +--- + TSRM/threads.m4 | 2 +- + 1 files changed, 1 insertions(+), 1 deletions(-) + +diff --git a/TSRM/threads.m4 b/TSRM/threads.m4 +index 38494ce..15d9454 100644 +--- a/TSRM/threads.m4 ++++ b/TSRM/threads.m4 +@@ -86,7 +86,7 @@ int main() { + pthreads_working=no + ], [ + dnl For cross compiling running this test is of no use. NetWare supports pthreads +- pthreads_working=no ++ pthreads_working=yes + case $host_alias in + *netware*) + pthreads_working=yes +-- +1.7.4.1 +
meta-oe/recipes-devtools/php/php_5.5.15.bb +110 -32
219 lines not on this page · raw message
Signature · 1 line
1.9.3
PATCH v2 4/12 php: upgrade to 5.5.20
In reply to Paul EggletonAmong many fixes since 5.5.15, the following security issues were fixed:
CVE-2014-8142
CVE-2014-3710
CVE-2014-3669
CVE-2014-3670
CVE-2014-3668
CVE-2014-3538
CVE-2014-3587
CVE-2014-2497
CVE-2014-5120
CVE-2014-3597
For more details please see the upstream changelog:
http://php.net/ChangeLog-5.php
---
meta-oe/recipes-devtools/php/{php_5.5.15.bb => php_5.5.20.bb} | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
rename meta-oe/recipes-devtools/php/{php_5.5.15.bb => php_5.5.20.bb} (98%)meta-oe/recipes-devtools/php/php_5.5.20.bb renamed from meta-oe/recipes-devtools/php/php_5.5.15.bb +2 -2
@@ -29,8 +29,8 @@ SRC_URI_append_class-target += " \ file://70_mod_php5.conf \ " -SRC_URI[md5sum] = "5cb5f2ed9099299f8a4c952d59d93812" -SRC_URI[sha256sum] = "00f24226b12fee27e332383b6304f1b9ed3f4d9173dd728a68c5c3f5a59b8ba7" +SRC_URI[md5sum] = "9dfc1d4d2b44fb7e2b4ee9651d032203" +SRC_URI[sha256sum] = "f28a150d1cd8991bd1a41dce4fdff4e343d1dbe01a48b9b44bea74532ce0391a" S = "${WORKDIR}/php-${PV}"
Signature · 1 line
1.9.3
PATCH v2 5/12 modphp: remove
In reply to Paul EggletonThis is now built out of the standard php recipe.
--- .../0001-using-pkgconfig-to-check-libxml.patch | 74 ------ .../recipes-php/modphp/files/70_mod_php5.conf | 12 - .../recipes-php/modphp/files/configure.patch | 11 - .../modphp/files/php-CVE-2014-3587.patch | 31 --- .../modphp/files/php-CVE-2014-3597.patch | 282 --------------------- .../modphp/files/php-CVE-2014-5120.patch | 35 --- .../modphp/files/pthread-check-threads-m4.patch | 30 --- meta-webserver/recipes-php/modphp/modphp5.inc | 112 -------- meta-webserver/recipes-php/modphp/modphp_5.5.15.bb | 7 - 9 files changed, 594 deletions(-) delete mode 100644 meta-webserver/recipes-php/modphp/files/0001-using-pkgconfig-to-check-libxml.patch delete mode 100644 meta-webserver/recipes-php/modphp/files/70_mod_php5.conf delete mode 100644 meta-webserver/recipes-php/modphp/files/configure.patch delete mode 100644 meta-webserver/recipes-php/modphp/files/php-CVE-2014-3587.patch delete mode 100644 meta-webserver/recipes-php/modphp/files/php-CVE-2014-3597.patch delete mode 100644 meta-webserver/recipes-php/modphp/files/php-CVE-2014-5120.patch delete mode 100644 meta-webserver/recipes-php/modphp/files/pthread-check-threads-m4.patch delete mode 100644 meta-webserver/recipes-php/modphp/modphp5.inc delete mode 100644 meta-webserver/recipes-php/modphp/modphp_5.5.15.bb
meta-webserver/recipes-php/modphp/files/0001-using-pkgconfig-to-check-libxml.patch deleted +0 -74
@@ -1,74 +0,0 @@ -[PATCH] using pkgconfig to check libxml - -Upstream-Status: Pending - -Use pkg-config for the libxml2 dependency, not the -config script. - -Signed-off-by: Roy.Li <[email protected]> ---- - acinclude.m4 | 48 ++++++------------------------------------------ - 1 file changed, 6 insertions(+), 42 deletions(-) - -diff --git a/acinclude.m4 b/acinclude.m4 -index d348f57..9f691a5 100644 ---- a/acinclude.m4 -+++ b/acinclude.m4 -@@ -2530,49 +2530,13 @@ dnl - dnl Common setup macro for libxml - dnl - AC_DEFUN([PHP_SETUP_LIBXML], [ --AC_CACHE_CHECK([for xml2-config path], ac_cv_php_xml2_config_path, --[ -- for i in $PHP_LIBXML_DIR /usr/local /usr; do -- if test -x "$i/bin/xml2-config"; then -- ac_cv_php_xml2_config_path="$i/bin/xml2-config" -- break -- fi -- done --]) -+ PKG_CHECK_MODULES(PKG_XML2, [libxml-2.0],,) -+ if test "x$PKG_XML2_CFLAGS" != "x"; then -+ PHP_EVAL_INCLINE($PKG_XML2_CFLAGS, $1) -+ PHP_EVAL_LIBLINE($PKG_XML2_LIBS) -+ AC_DEFINE(HAVE_LIBXML, 1, [ ]) -+ $2 - -- if test -x "$ac_cv_php_xml2_config_path"; then -- XML2_CONFIG="$ac_cv_php_xml2_config_path" -- libxml_full_version=`$XML2_CONFIG --version` -- ac_IFS=$IFS -- IFS="." -- set $libxml_full_version -- IFS=$ac_IFS -- LIBXML_VERSION=`expr [$]1 \* 1000000 + [$]2 \* 1000 + [$]3` -- if test "$LIBXML_VERSION" -ge "2006011"; then -- LIBXML_LIBS=`$XML2_CONFIG --libs` -- LIBXML_INCS=`$XML2_CONFIG --cflags` -- PHP_EVAL_LIBLINE($LIBXML_LIBS, $1) -- PHP_EVAL_INCLINE($LIBXML_INCS) -- -- dnl Check that build works with given libs -- AC_CACHE_CHECK(whether libxml build works, php_cv_libxml_build_works, [ -- PHP_TEST_BUILD(xmlInitParser, -- [ -- php_cv_libxml_build_works=yes -- ], [ -- AC_MSG_RESULT(no) -- AC_MSG_ERROR([build test failed. Please check the config.log for details.]) -- ], [ -- [$]$1 -- ]) -- ]) -- if test "$php_cv_libxml_build_works" = "yes"; then -- AC_DEFINE(HAVE_LIBXML, 1, [ ]) -- fi -- $2 -- else -- AC_MSG_ERROR([libxml2 version 2.6.11 or greater required.]) -- fi - ifelse([$3],[],,[else $3]) - fi - ]) --- -1.9.1 -
meta-webserver/recipes-php/modphp/files/70_mod_php5.conf deleted +0 -12
@@ -1,12 +0,0 @@ -# vim: ft=apache sw=4 ts=4 -<IfDefine PHP5> - # Load the module first - <IfModule !sapi_apache2.c> - LoadModule php5_module lib/apache2/modules/libphp5.so - </IfModule> - - # Set it to handle the files - AddHandler php5-script .php .phtml .php3 .php4 .php5 - AddType application/x-httpd-php-source .phps - DirectoryIndex index.html index.html.var index.php index.phtml -</IfDefine>
meta-webserver/recipes-php/modphp/files/configure.patch deleted +0 -11
@@ -1,11 +0,0 @@ ---- php-5.1.6/configure.old 2006-09-12 07:54:14.000000000 -0700 -+++ php-5.1.6/configure 2006-09-12 07:54:37.000000000 -0700 -@@ -14715,8 +14715,6 @@ - - - -- unset ac_cv_func_dlopen -- unset ac_cv_func___dlopen - unset found - - echo $ac_n "checking for dlopen""... $ac_c" 1>&6
meta-webserver/recipes-php/modphp/files/php-CVE-2014-3587.patch deleted +0 -31
@@ -1,31 +0,0 @@ -modphp: Security Advisory - php - CVE-2014-3587 - -Upstream-Status: Backport - -Signed-off-by: Yue Tao <[email protected]> - -From 7ba1409a1aee5925180de546057ddd84ff267947 Mon Sep 17 00:00:00 2001 -From: Remi Collet <[email protected]> -Date: Thu, 14 Aug 2014 17:19:03 -0700 -Subject: [PATCH] Fix bug #67716 - Segfault in cdf.c - ---- - ext/fileinfo/libmagic/cdf.c | 2 +- - 2 files changed, 2 insertions(+), 1 deletion(-) - -diff --git a/ext/fileinfo/libmagic/cdf.c b/ext/fileinfo/libmagic/cdf.c -index 429f3b9..2c0a2d9 100644 ---- a/ext/fileinfo/libmagic/cdf.c -+++ b/ext/fileinfo/libmagic/cdf.c -@@ -820,7 +820,7 @@ cdf_read_property_info(const cdf_stream_t *sst, const cdf_header_t *h, - q = (const uint8_t *)(const void *) - ((const char *)(const void *)p + ofs - - 2 * sizeof(uint32_t)); -- if (q > e) { -+ if (q < p || q > e) { - DPRINTF(("Ran of the end %p > %p\n", q, e)); - goto out; - } --- -1.7.9.5 -
meta-webserver/recipes-php/modphp/files/php-CVE-2014-3597.patch deleted +0 -282
282 lines not on this page · raw message
meta-webserver/recipes-php/modphp/files/php-CVE-2014-5120.patch deleted +0 -35
@@ -1,35 +0,0 @@ -modphp: Security Advisory - php - CVE-2014-5120 - -Upstream-Status: Backport - -Signed-off-by Yue Tao <[email protected]> - -From 706aefb78112a44d4932d4c9430c6a898696f51f Mon Sep 17 00:00:00 2001 -From: Stanislav Malyshev <[email protected]> -Date: Mon, 18 Aug 2014 22:49:10 -0700 -Subject: [PATCH] Fix bug #67730 - Null byte injection possible with imagexxx - functions - ---- - ext/gd/gd_ctx.c | 5 +++++ - 2 files changed, 7 insertions(+) - -diff --git a/ext/gd/gd_ctx.c b/ext/gd/gd_ctx.c -index bff691f..eafbab5 100644 ---- a/ext/gd/gd_ctx.c -+++ b/ext/gd/gd_ctx.c -@@ -124,6 +124,11 @@ static void _php_image_output_ctx(INTERNAL_FUNCTION_PARAMETERS, int image_type, - RETURN_FALSE; - } - } else if (Z_TYPE_P(to_zval) == IS_STRING) { -+ if (CHECK_ZVAL_NULL_PATH(to_zval)) { -+ php_error_docref(NULL TSRMLS_CC, E_WARNING, "Invalid 2nd parameter, filename must not contain null bytes"); -+ RETURN_FALSE; -+ } -+ - stream = php_stream_open_wrapper(Z_STRVAL_P(to_zval), "wb", REPORT_ERRORS|IGNORE_PATH|IGNORE_URL_WIN, NULL); - if (stream == NULL) { - RETURN_FALSE; --- -1.7.9.5 -
meta-webserver/recipes-php/modphp/files/pthread-check-threads-m4.patch deleted +0 -30
@@ -1,30 +0,0 @@ -From d8067ceacbf54e79c9c6b68675332c09eaa0b55d Mon Sep 17 00:00:00 2001 -From: Jackie Huang <[email protected]> -Date: Mon, 8 Apr 2013 14:29:51 +0800 -Subject: [PATCH] pthread-check - -Enable pthreads support when cross-compiling - -Upstream-Status: Inapproprate [config] - -Signed-off-by: Jackie Huang <[email protected]> ---- - TSRM/threads.m4 | 2 +- - 1 files changed, 1 insertions(+), 1 deletions(-) - -diff --git a/TSRM/threads.m4 b/TSRM/threads.m4 -index 38494ce..15d9454 100644 ---- a/TSRM/threads.m4 -+++ b/TSRM/threads.m4 -@@ -86,7 +86,7 @@ int main() { - pthreads_working=no - ], [ - dnl For cross compiling running this test is of no use. NetWare supports pthreads -- pthreads_working=no -+ pthreads_working=yes - case $host_alias in - *netware*) - pthreads_working=yes --- -1.7.4.1 -
meta-webserver/recipes-php/modphp/modphp5.inc deleted +0 -112
112 lines not on this page · raw message
meta-webserver/recipes-php/modphp/modphp_5.5.15.bb deleted +0 -7
@@ -1,7 +0,0 @@ -include modphp5.inc - -EXTRA_OECONF += "--disable-opcache" - -SRC_URI[md5sum] = "5cb5f2ed9099299f8a4c952d59d93812" -SRC_URI[sha256sum] = "00f24226b12fee27e332383b6304f1b9ed3f4d9173dd728a68c5c3f5a59b8ba7" -
Signature · 1 line
1.9.3
PATCH v2 6/12 README: update for modphp merging into php
In reply to Paul Eggleton--- meta-webserver/README | 16 +++++++++++++++- 1 file changed, 15 insertions(+), 1 deletion(-)
meta-webserver/README +15 -1
@@ -29,10 +29,24 @@ Layout ------ recipes-httpd/ Web servers -recipes-php/ PHP and PHP applications +recipes-php/ PHP applications +recipes-support/ Miscellaneous support recipes recipes-webadmin/ Standalone web administration interfaces +Notes +----- + +* This layer used to provide a modphp recipe that built mod_php, but + this is now built as part of the php recipe in meta-oe. However, since + apache2 is required to build mod_php, and apache2 recipe is in this + layer and recipes in meta-oe can't depend on it, mod_php is not built + by default. If you do wish to use mod_php, you need to add "apache2" + to the PACKAGECONFIG value for the php recipe in order to enable it. + See here for info on how to do that: + + http://www.yoctoproject.org/docs/current/ref-manual/ref-manual.html#var-PACKAGECONFIG + Maintenance -----------
Signature · 1 line
1.9.3
PATCH v2 7/12 uw-imap: make libpam dependency dependent on DISTRO_FEATURES
In reply to Paul EggletonIf pam is not in DISTRO_FEATURES, we shouldn't be building it.
--- meta-oe/recipes-devtools/uw-imap/uw-imap_2007f.bb | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-)
meta-oe/recipes-devtools/uw-imap/uw-imap_2007f.bb +5 -2
@@ -4,7 +4,7 @@ SECTION = "devel" LICENSE = "Apache-2.0" LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=a6a4ddbb7cd2999f6827ee143f6fcd97" -DEPENDS = "openssl libpam" +DEPENDS = "openssl" SRC_URI = "ftp://ftp.cac.washington.edu/imap/imap-${PV}.tar.gz \ file://quote_cctype.patch \
@@ -17,13 +17,16 @@ SRC_URI[sha256sum] = "53e15a2b5c1bc80161d42e9f69792a3fa18332b7b771910131004eb520 S = "${WORKDIR}/imap-${PV}" +PACKAGECONFIG ??= "${@bb.utils.contains('DISTRO_FEATURES', 'pam', 'pam', '', d)}" +PACKAGECONFIG[pam] = ",,libpam" + EXTRA_OEMAKE = "CC='${CC}'" HEADERS = "src/c-client/*.h src/osdep/unix/*.h c-client/auths.c c-client/linkage.c c-client/linkage.h c-client/osdep.h" do_compile() { echo "SSLINCLUDE=${STAGING_INCDIR} SSLLIB=${STAGING_LIBDIR}" > ${S}/SPECIALS - oe_runmake lnp + oe_runmake ${@bb.utils.contains('PACKAGECONFIG', 'pam', 'lnp', 'slx', d)} } do_install() {
Signature · 1 line
1.9.3
PATCH v2 8/12 php: add PACKAGECONFIG to fix implicit dependency on libpam
In reply to Paul EggletonAdd a pam PACKAGECONFIG option defaulted from the pam DISTRO_FEATURES item, so that if pam isn't in DISTRO_FEATURES, it is explicitly disabled (and conversely if it is in DISTRO_FEATURES that we have an explicit dependency on libpam).
--- meta-oe/recipes-devtools/php/php_5.5.20.bb | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-)
meta-oe/recipes-devtools/php/php_5.5.20.bb +4 -1
@@ -65,6 +65,7 @@ EXTRA_OECONF = "--enable-mbstring \ --with-bz2=${STAGING_DIR_TARGET}${exec_prefix} \ --with-config-file-path=${sysconfdir}/php/apache2-php5 \ ${@base_conditional('SITEINFO_ENDIANNESS', 'le', 'ac_cv_c_bigendian_php=no', 'ac_cv_c_bigendian_php=yes', d)} \ + ${@bb.utils.contains('PACKAGECONFIG', 'pam', '', 'ac_cv_lib_pam_pam_start=no', d)} \ ${COMMON_EXTRA_OECONF} \ " EXTRA_OECONF_class-native = " \
@@ -73,7 +74,8 @@ EXTRA_OECONF_class-native = " \ ${COMMON_EXTRA_OECONF} \ " -PACKAGECONFIG ??= "mysql sqlite3" +PACKAGECONFIG ??= "mysql sqlite3 \ + ${@bb.utils.contains('DISTRO_FEATURES', 'pam', 'pam', '', d)}" PACKAGECONFIG_class-native = "" PACKAGECONFIG[mysql] = "--with-mysql=${STAGING_DIR_TARGET}${prefix} \
@@ -89,6 +91,7 @@ PACKAGECONFIG[sqlite3] = "--with-sqlite3=${STAGING_LIBDIR}/.. \ PACKAGECONFIG[pgsql] = "--with-pgsql=${STAGING_DIR_TARGET}${exec_prefix},--without-pgsql,postgresql" PACKAGECONFIG[soap] = "--enable-libxml --enable-soap, --disable-soap, libxml2" PACKAGECONFIG[apache2] = "--with-apxs2=${STAGING_BINDIR_CROSS}/apxs,,apache2-native apache2" +PACKAGECONFIG[pam] = ",,libpam" export PHP_NATIVE_DIR = "${STAGING_BINDIR_NATIVE}"
Signature · 1 line
1.9.3
PATCH v2 9/12 php: add PACKAGECONFIG for imap
In reply to Paul EggletonAllow imap support to be easily disabled; default it to enabled based on previous configuration.
--- meta-oe/recipes-devtools/php/php_5.5.20.bb | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-)
meta-oe/recipes-devtools/php/php_5.5.20.bb +6 -4
@@ -7,7 +7,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=52dd90569008fee5bcdbb22d945b1108" BBCLASSEXTEND = "native" DEPENDS = "zlib bzip2 libxml2 virtual/libiconv php-native lemon-native \ - uw-imap openssl libmcrypt" + openssl libmcrypt" DEPENDS_class-native = "zlib-native libxml2-native" SRC_URI = "http://php.net/distributions/php-${PV}.tar.bz2 \
@@ -56,9 +56,7 @@ EXTRA_OECONF = "--enable-mbstring \ --enable-wddx \ --enable-fpm \ --enable-zip \ - --with-imap=${STAGING_DIR_HOST} \ --with-gettext=${STAGING_LIBDIR}/.. \ - --with-imap-ssl=${STAGING_DIR_HOST} \ --with-zlib=${STAGING_LIBDIR}/.. \ --with-iconv=${STAGING_LIBDIR}/.. \ --with-mcrypt=${STAGING_DIR_TARGET}${exec_prefix} \
@@ -74,7 +72,7 @@ EXTRA_OECONF_class-native = " \ ${COMMON_EXTRA_OECONF} \ " -PACKAGECONFIG ??= "mysql sqlite3 \ +PACKAGECONFIG ??= "mysql sqlite3 imap \ ${@bb.utils.contains('DISTRO_FEATURES', 'pam', 'pam', '', d)}" PACKAGECONFIG_class-native = ""
@@ -92,6 +90,10 @@ PACKAGECONFIG[pgsql] = "--with-pgsql=${STAGING_DIR_TARGET}${exec_prefix},--witho PACKAGECONFIG[soap] = "--enable-libxml --enable-soap, --disable-soap, libxml2" PACKAGECONFIG[apache2] = "--with-apxs2=${STAGING_BINDIR_CROSS}/apxs,,apache2-native apache2" PACKAGECONFIG[pam] = ",,libpam" +PACKAGECONFIG[imap] = "--with-imap=${STAGING_DIR_HOST} \ + --with-imap-ssl=${STAGING_DIR_HOST} \ + ,--without-imap --without-imap-ssl \ + ,uw-imap" export PHP_NATIVE_DIR = "${STAGING_BINDIR_NATIVE}"
Signature · 1 line
1.9.3
PATCH v2 10/12 xdebug: fix DEPENDS and un-blacklist
In reply to Paul EggletonNow we use a single php recipe there is no conflict.
--- meta-webserver/recipes-php/xdebug/xdebug_2.2.5.bb | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-)
meta-webserver/recipes-php/xdebug/xdebug_2.2.5.bb +1 -3
@@ -2,9 +2,7 @@ SUMMARY = "Debugging and profiling extension for PHP" LICENSE = "Xdebug" LIC_FILES_CHKSUM = "file://LICENSE;md5=34df3a274aa12b795417c65634c07f16" -DEPENDS = "modphp" - -PNBLACKLIST[xdebug] ?= "CONFLICT: depends on blocked modphp" +DEPENDS = "php" SRC_URI = "http://xdebug.org/files/xdebug-${PV}.tgz"
Signature · 1 line
1.9.3
PATCH v2 11/12 xdebug: update to 2.2.6
In reply to Paul Eggleton---
.../recipes-php/xdebug/{xdebug_2.2.5.bb => xdebug_2.2.6.bb} | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
rename meta-webserver/recipes-php/xdebug/{xdebug_2.2.5.bb => xdebug_2.2.6.bb} (85%)meta-webserver/recipes-php/xdebug/xdebug_2.2.6.bb renamed from meta-webserver/recipes-php/xdebug/xdebug_2.2.5.bb +2 -2
@@ -6,8 +6,8 @@ DEPENDS = "php" SRC_URI = "http://xdebug.org/files/xdebug-${PV}.tgz" -SRC_URI[md5sum] = "7e571ce8eb6fa969fd8263969019849d" -SRC_URI[sha256sum] = "adc6fe92dcff2368be94d20a5997aadb4d46d74551e2dd6602a704a35a195a6f" +SRC_URI[md5sum] = "f216356861e27284580d0208060ea7fa" +SRC_URI[sha256sum] = "6dd1cba0605e75009331aa3625a19ef49ade5a75aa9fe2ff8a818108d2cce84e" inherit autotools
Signature · 1 line
1.9.3
PATCH v2 12/12 phpmyadmin: update to 4.3.4
In reply to Paul EggletonDrop patches merged upstream.
---
.../0001-Bug-4544-additional-fix-for-4.2.x.patch | 29 ---------------
...ug-4504-security-Self-XSS-in-query-charts.patch | 29 ---------------
...4505-security-XSS-in-view-operations-page.patch | 43 ----------------------
.../{phpmyadmin_4.2.7.bb => phpmyadmin_4.3.4.bb} | 7 +---
4 files changed, 2 insertions(+), 106 deletions(-)
delete mode 100644 meta-webserver/recipes-php/phpmyadmin/phpmyadmin/0001-Bug-4544-additional-fix-for-4.2.x.patch
delete mode 100644 meta-webserver/recipes-php/phpmyadmin/phpmyadmin/0001-bug-4504-security-Self-XSS-in-query-charts.patch
delete mode 100644 meta-webserver/recipes-php/phpmyadmin/phpmyadmin/0001-bug-4505-security-XSS-in-view-operations-page.patch
rename meta-webserver/recipes-php/phpmyadmin/{phpmyadmin_4.2.7.bb => phpmyadmin_4.3.4.bb} (75%)meta-webserver/recipes-php/phpmyadmin/phpmyadmin/0001-Bug-4544-additional-fix-for-4.2.x.patch deleted +0 -29
@@ -1,29 +0,0 @@ -From 304fb2b645b36a39e03b954fdbd567173ebe6448 Mon Sep 17 00:00:00 2001 -From: Marc Delisle <[email protected]> -Date: Wed, 1 Oct 2014 08:09:12 -0400 -Subject: [PATCH] Bug 4544: additional fix for 4.2.x - -Upstream-Status: Backport - -Signed-off-by: Marc Delisle <[email protected]> ---- - libraries/TableSearch.class.php | 3 ++- - 1 file changed, 2 insertions(+), 1 deletion(-) - -diff --git a/libraries/TableSearch.class.php b/libraries/TableSearch.class.php -index a0b3fa4..b7eb42f 100644 ---- a/libraries/TableSearch.class.php -+++ b/libraries/TableSearch.class.php -@@ -992,7 +992,8 @@ EOT; - $html_output .= '<td>' . $properties['collation'] . '</td>'; - $html_output .= '<td>' . $properties['func'] . '</td>'; - // here, the data-type attribute is needed for a date/time picker -- $html_output .= '<td data-type="' . $properties['type'] . '"' -+ $html_output .= '<td data-type="' -+ . htmlspecialchars($properties['type']) . '"' - . '>' . $properties['value'] . '</td>'; - $html_output .= '</tr>'; - //Displays hidden fields --- -1.7.10.4 -
meta-webserver/recipes-php/phpmyadmin/phpmyadmin/0001-bug-4504-security-Self-XSS-in-query-charts.patch deleted +0 -29
@@ -1,29 +0,0 @@ -From 90ddeecf60fc029608b972e490b735f3a65ed0cb Mon Sep 17 00:00:00 2001 -From: Madhura Jayaratne <[email protected]> -Date: Sun, 17 Aug 2014 08:52:05 -0400 -Subject: [PATCH] bug #4504 [security] Self-XSS in query charts - -Upstream-status: Backport - -Signed-off-by: Marc Delisle <[email protected]> ---- - js/tbl_chart.js | 2 +- - 2 files changed, 2 insertions(+), 1 deletion(-) - - 4.2.7.0 (2014-07-31) -diff --git a/js/tbl_chart.js b/js/tbl_chart.js -index 943d4ae..04c9c40 100644 ---- a/js/tbl_chart.js -+++ b/js/tbl_chart.js -@@ -47,7 +47,7 @@ function PMA_queryChart(data, columnNames, settings) { - }, - axes : { - xaxis : { -- label : settings.xaxisLabel -+ label : escapeHtml(settings.xaxisLabel) - }, - yaxis : { - label : settings.yaxisLabel --- -1.7.10.4 -
meta-webserver/recipes-php/phpmyadmin/phpmyadmin/0001-bug-4505-security-XSS-in-view-operations-page.patch deleted +0 -43
43 lines not on this page · raw message
meta-webserver/recipes-php/phpmyadmin/phpmyadmin_4.3.4.bb renamed from meta-webserver/recipes-php/phpmyadmin/phpmyadmin_4.2.7.bb +2 -5
@@ -6,13 +6,10 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=eb723b61539feef013de476e68b5c50a \ file://libraries/tcpdf/LICENSE.TXT;md5=5c87b66a5358ebcc495b03e0afcd342c" SRC_URI = "${SOURCEFORGE_MIRROR}/phpmyadmin/phpMyAdmin/${PV}/phpMyAdmin-${PV}-all-languages.tar.xz \ - file://0001-bug-4504-security-Self-XSS-in-query-charts.patch \ - file://0001-bug-4505-security-XSS-in-view-operations-page.patch \ - file://0001-Bug-4544-additional-fix-for-4.2.x.patch \ file://apache.conf" -SRC_URI[md5sum] = "0dcd755450dac819f33502590c88ad29" -SRC_URI[sha256sum] = "5d101dd88a99a869bc0c684a7f687cf290abc4bf306daac73337cbde2d7743e4" +SRC_URI[md5sum] = "f811243e241ee81defb97e014ca713ef" +SRC_URI[sha256sum] = "91258e07e04e25c5e49284b194ebff8ffa807ad38832fbe802cc6af3f7cb96d3" S = "${WORKDIR}/phpMyAdmin-${PV}-all-languages"
Signature · 1 line
1.9.3
Thanks for v2
Please remember to update your old series as superseded when pushing newer version, it would help me a lot when sorting the pending patches.
Quoted 93 lines · Paul Eggleton
Finally resolve the overlap between the modphp and php recipes by merging the former into the latter. Along the way I fixed a few minor issues and upgraded related recipes.
I've taken a stepped approach to doing the php merge / upgrade so it's easier to see what's going on and easier for me to test - first upgrade php to the same version as modphp, then do the integration, then upgrade to the latest 5.5 release. I would appreciate someone testing PHP in CGI mode however since I don't have a convenient test setup for that (as I do for
mod_php).Changes since v1:
* Defaultmod_phpbuilding to disabled since we don't have apache2 in meta-oe where the php recipe is and meta-oe can't depend on meta-webserver
* Drop commented out line in uw-imap pam change
* Update meta-webserver README as appropriateThe following changes since commit
2ea3a19a478c526baa04d6b9a9e8c9f42aae9d34:ctapi-common: Add new recipe (2014-12-31 16:38:22 +0100)
are available in the git repository at:
git://git.openembedded.org/meta-openembedded-contribpaule/php
http://cgit.openembedded.org/cgit.cgi/meta-openembedded-contrib/log/?h=paule/phpPaul Eggleton (12):
php: upgrade to 5.5.15
libc-client: rename to uw-imap, upgrade to 2007f
php: integrate modphp
php: upgrade to 5.5.20
modphp: remove
README: update for modphp merging into php
uw-imap: make libpam dependency dependent onDISTRO_FEATURES
php: add PACKAGECONFIG to fix implicit dependency on libpam
php: add PACKAGECONFIG for imap
xdebug: fix DEPENDS and un-blacklist
xdebug: update to 2.2.6
phpmyadmin: update to 4.3.4.../recipes-devtools/php/php}/70_mod_php5.conf | 0 .../recipes-devtools/php/php}/configure.patch | 0 .../php/php}/pthread-check-threads-m4.patch | 0 meta-oe/recipes-devtools/php/php_5.4.33.bb | 150 ----------- meta-oe/recipes-devtools/php/php_5.5.20.bb | 234 +++++++++++++++++ .../uw-imap/uw-imap/imap-2007e-shared.patch | 82 ++++++ .../uw-imap/imap-2007f-format-security.patch | 20 ++ .../files => uw-imap/uw-imap}/quote_cctype.patch | 0 .../uw-imap_2007f.bb} | 23 +- meta-webserver/README | 16 +- .../0001-using-pkgconfig-to-check-libxml.patch | 74 ------ .../modphp/files/php-CVE-2014-3587.patch | 31 --- .../modphp/files/php-CVE-2014-3597.patch | 282 --------------------- .../modphp/files/php-CVE-2014-5120.patch | 35 --- meta-webserver/recipes-php/modphp/modphp5.inc | 112 -------- meta-webserver/recipes-php/modphp/modphp_5.5.15.bb | 7 - .../0001-Bug-4544-additional-fix-for-4.2.x.patch | 29 --- ...ug-4504-security-Self-XSS-in-query-charts.patch | 29 --- ...4505-security-XSS-in-view-operations-page.patch | 43 ---- .../{phpmyadmin_4.2.7.bb => phpmyadmin_4.3.4.bb} | 7 +- .../xdebug/{xdebug_2.2.5.bb => xdebug_2.2.6.bb} | 8 +- 21 files changed, 372 insertions(+), 810 deletions(-) rename {meta-webserver/recipes-php/modphp/files => meta-oe/recipes-devtools/php/php}/70_mod_php5.conf (100%) rename {meta-webserver/recipes-php/modphp/files => meta-oe/recipes-devtools/php/php}/configure.patch (100%) rename {meta-webserver/recipes-php/modphp/files => meta-oe/recipes-devtools/php/php}/pthread-check-threads-m4.patch (100%) delete mode 100644 meta-oe/recipes-devtools/php/php_5.4.33.bb create mode 100644 meta-oe/recipes-devtools/php/php_5.5.20.bb create mode 100644 meta-oe/recipes-devtools/uw-imap/uw-imap/imap-2007e-shared.patch create mode 100644 meta-oe/recipes-devtools/uw-imap/uw-imap/imap-2007f-format-security.patch rename meta-oe/recipes-devtools/{libc-client/files => uw-imap/uw-imap}/quote_cctype.patch (100%) rename meta-oe/recipes-devtools/{libc-client/libc-client_2007e.bb => uw-imap/uw-imap_2007f.bb} (55%) delete mode 100644 meta-webserver/recipes-php/modphp/files/0001-using-pkgconfig-to-check-libxml.patch delete mode 100644 meta-webserver/recipes-php/modphp/files/php-CVE-2014-3587.patch delete mode 100644 meta-webserver/recipes-php/modphp/files/php-CVE-2014-3597.patch delete mode 100644 meta-webserver/recipes-php/modphp/files/php-CVE-2014-5120.patch delete mode 100644 meta-webserver/recipes-php/modphp/modphp5.inc delete mode 100644 meta-webserver/recipes-php/modphp/modphp_5.5.15.bb delete mode 100644 meta-webserver/recipes-php/phpmyadmin/phpmyadmin/0001-Bug-4544-additional-fix-for-4.2.x.patch delete mode 100644 meta-webserver/recipes-php/phpmyadmin/phpmyadmin/0001-bug-4504-security-Self-XSS-in-query-charts.patch delete mode 100644 meta-webserver/recipes-php/phpmyadmin/phpmyadmin/0001-bug-4505-security-XSS-in-view-operations-page.patch rename meta-webserver/recipes-php/phpmyadmin/{phpmyadmin_4.2.7.bb => phpmyadmin_4.3.4.bb} (75%) rename meta-webserver/recipes-php/xdebug/{xdebug_2.2.5.bb => xdebug_2.2.6.bb} (79%)Signature · 7 lines
1.9.3 -- _______________________________________________ Openembedded-devel mailing list [email protected] http://lists.openembedded.org/mailman/listinfo/openembedded-devel
Signature · 1 line
Martin 'JaMa' Jansa jabber: [email protected]
Quoted 4 lines · Martin Jansa
Thanks for v2
Please remember to update your old series as superseded when pushing newer version, it would help me a lot when sorting the pending patches.
Something is wrong:
php-5.5.20: php requires /tmp/work/core2-64-oe-linux/php/5.5.20-r0/image/usr/bin/php, but no providers in its RDEPENDS [file-rdeps]
Quoted 98 lines · Paul Eggleton
Quoted 93 lines
Finally resolve the overlap between the modphp and php recipes by merging the former into the latter. Along the way I fixed a few minor issues and upgraded related recipes.
I've taken a stepped approach to doing the php merge / upgrade so it's easier to see what's going on and easier for me to test - first upgrade php to the same version as modphp, then do the integration, then upgrade to the latest 5.5 release. I would appreciate someone testing PHP in CGI mode however since I don't have a convenient test setup for that (as I do for
mod_php).Changes since v1:
* Defaultmod_phpbuilding to disabled since we don't have apache2 in meta-oe where the php recipe is and meta-oe can't depend on meta-webserver
* Drop commented out line in uw-imap pam change
* Update meta-webserver README as appropriateThe following changes since commit
2ea3a19a478c526baa04d6b9a9e8c9f42aae9d34:ctapi-common: Add new recipe (2014-12-31 16:38:22 +0100)
are available in the git repository at:
git://git.openembedded.org/meta-openembedded-contribpaule/php
http://cgit.openembedded.org/cgit.cgi/meta-openembedded-contrib/log/?h=paule/phpPaul Eggleton (12):
php: upgrade to 5.5.15
libc-client: rename to uw-imap, upgrade to 2007f
php: integrate modphp
php: upgrade to 5.5.20
modphp: remove
README: update for modphp merging into php
uw-imap: make libpam dependency dependent onDISTRO_FEATURES
php: add PACKAGECONFIG to fix implicit dependency on libpam
php: add PACKAGECONFIG for imap
xdebug: fix DEPENDS and un-blacklist
xdebug: update to 2.2.6
phpmyadmin: update to 4.3.4.../recipes-devtools/php/php}/70_mod_php5.conf | 0 .../recipes-devtools/php/php}/configure.patch | 0 .../php/php}/pthread-check-threads-m4.patch | 0 meta-oe/recipes-devtools/php/php_5.4.33.bb | 150 ----------- meta-oe/recipes-devtools/php/php_5.5.20.bb | 234 +++++++++++++++++ .../uw-imap/uw-imap/imap-2007e-shared.patch | 82 ++++++ .../uw-imap/imap-2007f-format-security.patch | 20 ++ .../files => uw-imap/uw-imap}/quote_cctype.patch | 0 .../uw-imap_2007f.bb} | 23 +- meta-webserver/README | 16 +- .../0001-using-pkgconfig-to-check-libxml.patch | 74 ------ .../modphp/files/php-CVE-2014-3587.patch | 31 --- .../modphp/files/php-CVE-2014-3597.patch | 282 --------------------- .../modphp/files/php-CVE-2014-5120.patch | 35 --- meta-webserver/recipes-php/modphp/modphp5.inc | 112 -------- meta-webserver/recipes-php/modphp/modphp_5.5.15.bb | 7 - .../0001-Bug-4544-additional-fix-for-4.2.x.patch | 29 --- ...ug-4504-security-Self-XSS-in-query-charts.patch | 29 --- ...4505-security-XSS-in-view-operations-page.patch | 43 ---- .../{phpmyadmin_4.2.7.bb => phpmyadmin_4.3.4.bb} | 7 +- .../xdebug/{xdebug_2.2.5.bb => xdebug_2.2.6.bb} | 8 +- 21 files changed, 372 insertions(+), 810 deletions(-) rename {meta-webserver/recipes-php/modphp/files => meta-oe/recipes-devtools/php/php}/70_mod_php5.conf (100%) rename {meta-webserver/recipes-php/modphp/files => meta-oe/recipes-devtools/php/php}/configure.patch (100%) rename {meta-webserver/recipes-php/modphp/files => meta-oe/recipes-devtools/php/php}/pthread-check-threads-m4.patch (100%) delete mode 100644 meta-oe/recipes-devtools/php/php_5.4.33.bb create mode 100644 meta-oe/recipes-devtools/php/php_5.5.20.bb create mode 100644 meta-oe/recipes-devtools/uw-imap/uw-imap/imap-2007e-shared.patch create mode 100644 meta-oe/recipes-devtools/uw-imap/uw-imap/imap-2007f-format-security.patch rename meta-oe/recipes-devtools/{libc-client/files => uw-imap/uw-imap}/quote_cctype.patch (100%) rename meta-oe/recipes-devtools/{libc-client/libc-client_2007e.bb => uw-imap/uw-imap_2007f.bb} (55%) delete mode 100644 meta-webserver/recipes-php/modphp/files/0001-using-pkgconfig-to-check-libxml.patch delete mode 100644 meta-webserver/recipes-php/modphp/files/php-CVE-2014-3587.patch delete mode 100644 meta-webserver/recipes-php/modphp/files/php-CVE-2014-3597.patch delete mode 100644 meta-webserver/recipes-php/modphp/files/php-CVE-2014-5120.patch delete mode 100644 meta-webserver/recipes-php/modphp/modphp5.inc delete mode 100644 meta-webserver/recipes-php/modphp/modphp_5.5.15.bb delete mode 100644 meta-webserver/recipes-php/phpmyadmin/phpmyadmin/0001-Bug-4544-additional-fix-for-4.2.x.patch delete mode 100644 meta-webserver/recipes-php/phpmyadmin/phpmyadmin/0001-bug-4504-security-Self-XSS-in-query-charts.patch delete mode 100644 meta-webserver/recipes-php/phpmyadmin/phpmyadmin/0001-bug-4505-security-XSS-in-view-operations-page.patch rename meta-webserver/recipes-php/phpmyadmin/{phpmyadmin_4.2.7.bb => phpmyadmin_4.3.4.bb} (75%) rename meta-webserver/recipes-php/xdebug/{xdebug_2.2.5.bb => xdebug_2.2.6.bb} (79%)Signature · 7 lines
1.9.3 -- _______________________________________________ Openembedded-devel mailing list [email protected] http://lists.openembedded.org/mailman/listinfo/openembedded-develSignature · 1 line
Martin 'JaMa' Jansa jabber: [email protected]
Signature · 1 line
Martin 'JaMa' Jansa jabber: [email protected]
Quoted 11 lines · On Wednesday 07 January 2015 11:14:23 Martin Jansa wrote:
Quoted 4 lines · Martin Jansa
Thanks for v2
Please remember to update your old series as superseded when pushing newer version, it would help me a lot when sorting the pending patches.
Something is wrong:
php-5.5.20: php requires
/tmp/work/core2-64-oe-linux/php/5.5.20-r0/image/usr/bin/php, but no providers in its RDEPENDS [file-rdeps]
That is very strange. Do you perhaps have any information on how you might reproduce that? I did not receive any QA warnings when building this.
Cheers,
Paul
Signature · 2 lines
Paul Eggleton Intel Open Source Technology Centre
Quoted 7 lines · On Wednesday 07 January 2015 10:34:43 Paul Eggleton wrote:
Quoted 6 lines · On Wednesday 07 January 2015 11:14:23 Martin Jansa wrote:
Quoted 4 lines · Martin Jansa
Thanks for v2
Please remember to update your old series as superseded when pushing newer version, it would help me a lot when sorting the pending patches.
Quoted 8 lines
Quoted 5 lines
Something is wrong:
php-5.5.20: php requires
/tmp/work/core2-64-oe-linux/php/5.5.20-r0/image/usr/bin/php, but no providers in its RDEPENDS [file-rdeps]That is very strange. Do you perhaps have any information on how you might reproduce that? I did not receive any QA warnings when building this.
Actually I know why - for some reason poky.conf does not have file-rdeps in WARN_QA or ERROR_QA. Investigating.
Cheers,
Paul
Signature · 2 lines
Paul Eggleton Intel Open Source Technology Centre
Quoted 7 lines · Paul Eggleton
Quoted 6 lines · On Wednesday 07 January 2015 11:14:23 Martin Jansa wrote:
Quoted 4 lines · Martin Jansa
Thanks for v2
Please remember to update your old series as superseded when pushing newer version, it would help me a lot when sorting the pending patches.
Quoted 8 lines
Quoted 5 lines
Something is wrong:
php-5.5.20: php requires
/tmp/work/core2-64-oe-linux/php/5.5.20-r0/image/usr/bin/php, but no providers in its RDEPENDS [file-rdeps]That is very strange. Do you perhaps have any information on how you might reproduce that? I did not receive any QA warnings when building this.
Nothing special, it's shown in world builds as described in
http://www.openembedded.org/wiki/Bitbake_World_Status_Setup
Quoted 8 lines
Cheers,
PaulSignature · 2 lines
Paul Eggleton Intel Open Source Technology Centre
Signature · 1 line
Martin 'JaMa' Jansa jabber: [email protected]
Quoted 11 lines · On Wednesday 07 January 2015 11:14:23 Martin Jansa wrote:
Quoted 4 lines · Martin Jansa
Thanks for v2
Please remember to update your old series as superseded when pushing newer version, it would help me a lot when sorting the pending patches.
Something is wrong:
php-5.5.20: php requires
/tmp/work/core2-64-oe-linux/php/5.5.20-r0/image/usr/bin/php, but no providers in its RDEPENDS [file-rdeps]
OK, I've sent a v3 of just the offending patch, and pushed a new rebased paule/php branch.
Cheers,
Paul
Signature · 2 lines
Paul Eggleton Intel Open Source Technology Centre
Quoted 7 lines · On Wednesday 07 January 2015 11:55:08 Paul Eggleton wrote:
Quoted 6 lines · On Wednesday 07 January 2015 11:14:23 Martin Jansa wrote:
Quoted 4 lines · Martin Jansa
Thanks for v2
Please remember to update your old series as superseded when pushing newer version, it would help me a lot when sorting the pending patches.
Quoted 8 lines
Quoted 5 lines
Something is wrong:
php-5.5.20: php requires
/tmp/work/core2-64-oe-linux/php/5.5.20-r0/image/usr/bin/php, but no providers in its RDEPENDS [file-rdeps]OK, I've sent a v3 of just the offending patch, and pushed a new rebased paule/php branch.
Actually, after rebuilding again, that hasn't fixed the warning despite the fact that the shebang is now correct. Sigh...
Cheers,
Paul
Signature · 2 lines
Paul Eggleton Intel Open Source Technology Centre