[meta-oe] [PATCH 04/11] php: update 8.1.16 -> 8.2.3


wangmy
 

From: Wang Mingyu <wangmy@...>

License-Update: Copyright year updated to 2022.

Changelog:
=========
- Core:
. Fixed bug #81744 (Password_verify() always return true with some hash).
(CVE-2023-0567)
. Fixed bug #81746 (1-byte array overrun in common path resolve code).
(CVE-2023-0568)

- FPM:
. Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart
request body). (CVE-2023-0662)

Signed-off-by: Wang Mingyu <wangmy@...>
---
meta-oe/recipes-devtools/php/{php_8.1.16.bb => php_8.2.3.bb} | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
rename meta-oe/recipes-devtools/php/{php_8.1.16.bb => php_8.2.3.bb} (98%)

diff --git a/meta-oe/recipes-devtools/php/php_8.1.16.bb b/meta-oe/recipes-devtools/php/php_8.2.3.bb
similarity index 98%
rename from meta-oe/recipes-devtools/php/php_8.1.16.bb
rename to meta-oe/recipes-devtools/php/php_8.2.3.bb
index 2f45ced95..f7639cd5f 100644
--- a/meta-oe/recipes-devtools/php/php_8.1.16.bb
+++ b/meta-oe/recipes-devtools/php/php_8.2.3.bb
@@ -3,7 +3,7 @@ HOMEPAGE = "http://www.php.net"
SECTION = "console/network"

LICENSE = "PHP-3.0"
-LIC_FILES_CHKSUM = "file://LICENSE;md5=99532e0f6620bc9bca34f12fadaee33c"
+LIC_FILES_CHKSUM = "file://LICENSE;md5=5ebd5be8e2a89f634486445bd164bef0"

BBCLASSEXTEND = "native"
DEPENDS = "zlib bzip2 libxml2 virtual/libiconv php-native lemon-native"
@@ -33,7 +33,7 @@ SRC_URI:append:class-target = " \
"

S = "${WORKDIR}/php-${PV}"
-SRC_URI[sha256sum] = "cd9f0ea14d82d9455587a49a0b6c802a7b8d8ff79703f9f48b17db010fb633ce"
+SRC_URI[sha256sum] = "87bb58865f38f5e2941813029152cea2102fe2961bb4d68b88f831ddd0548d0f"

CVE_CHECK_IGNORE += "\
CVE-2007-2728 \
--
2.34.1


Khem Raj
 

xdebug needs to be fixed with php 8.2.0+ see
https://errors.yoctoproject.org/Errors/Details/697775/

On Thu, Mar 9, 2023 at 10:13 PM wangmy <wangmy@...> wrote:

From: Wang Mingyu <wangmy@...>

License-Update: Copyright year updated to 2022.

Changelog:
=========
- Core:
. Fixed bug #81744 (Password_verify() always return true with some hash).
(CVE-2023-0567)
. Fixed bug #81746 (1-byte array overrun in common path resolve code).
(CVE-2023-0568)

- FPM:
. Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart
request body). (CVE-2023-0662)

Signed-off-by: Wang Mingyu <wangmy@...>
---
meta-oe/recipes-devtools/php/{php_8.1.16.bb => php_8.2.3.bb} | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
rename meta-oe/recipes-devtools/php/{php_8.1.16.bb => php_8.2.3.bb} (98%)

diff --git a/meta-oe/recipes-devtools/php/php_8.1.16.bb b/meta-oe/recipes-devtools/php/php_8.2.3.bb
similarity index 98%
rename from meta-oe/recipes-devtools/php/php_8.1.16.bb
rename to meta-oe/recipes-devtools/php/php_8.2.3.bb
index 2f45ced95..f7639cd5f 100644
--- a/meta-oe/recipes-devtools/php/php_8.1.16.bb
+++ b/meta-oe/recipes-devtools/php/php_8.2.3.bb
@@ -3,7 +3,7 @@ HOMEPAGE = "http://www.php.net"
SECTION = "console/network"

LICENSE = "PHP-3.0"
-LIC_FILES_CHKSUM = "file://LICENSE;md5=99532e0f6620bc9bca34f12fadaee33c"
+LIC_FILES_CHKSUM = "file://LICENSE;md5=5ebd5be8e2a89f634486445bd164bef0"

BBCLASSEXTEND = "native"
DEPENDS = "zlib bzip2 libxml2 virtual/libiconv php-native lemon-native"
@@ -33,7 +33,7 @@ SRC_URI:append:class-target = " \
"

S = "${WORKDIR}/php-${PV}"
-SRC_URI[sha256sum] = "cd9f0ea14d82d9455587a49a0b6c802a7b8d8ff79703f9f48b17db010fb633ce"
+SRC_URI[sha256sum] = "87bb58865f38f5e2941813029152cea2102fe2961bb4d68b88f831ddd0548d0f"

CVE_CHECK_IGNORE += "\
CVE-2007-2728 \
--
2.34.1