Commit Graph
2 Commits
Author SHA1 Message Date
Anuj Mittal 2768c1deb3 php7: upgrade to 7.2.4
* For changes, see:
http://www.php.net/ChangeLog-7.php#7.2.4

* Remove patches as they've been upstreamed:
- 0001-Specify-tag-with-libtool.patch
- CVE-2017-16642.patch
- CVE-2018-5711.patch

* mcrypt module has been deprecated and as such dependency has been moved
from php.inc to php5 recipe.

* Refresh patches to avoid fuzz warnings.

* New patches to:
- Make sure libxml is detected using pkg-config instead of binconfig.
- Fix link time warnings (backport, see patch for details)

* Move the following patches to php5 from inc as they were getting applied
out of context:
- acinclude-xml2-config.patch
- 0001-acinclude-use-pkgconfig-for-libxml2-config.patch

License-Update: License is same, just a change in copyright year to 2018.

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-08 17:00:06 -07:00
Andre McCurdy 5abacb2751 php: update stable version 5.6.31 -> 5.6.33
04 Jan 2017, PHP 5.6.33

 - GD:
   . Fixed bug #75571 (Potential infinite loop in gdImageCreateFromGifCtx). (cmb)

 - Phar:
   . Fixed bug #74782 (Reflected XSS in .phar 404 page). (Stas)

 26 Sep 2017, PHP 5.6.32

 - Date:
   . Fixed bug #75055 (Out-Of-Bounds Read in timelib_meridian()). (Derick)

 - mcrypt:
   . Fixed bug #72535 (arcfour encryption stream filter crashes php). (Leigh)

 - PCRE:
   . Fixed bug #75207 (applied upstream patch for CVE-2016-1283). (Anatol)

Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-23 20:28:55 -08:00