109 Commits

Author SHA1 Message Date
Richard Fussenegger
ee45480f55 Added phpdbg to executables (#1950) 2018-01-13 13:11:19 +01:00
Richard Kuhnt
d046bd00be Update php to version 7.2.1 2018-01-04 07:00:18 +00:00
Richard Kuhnt
93621cc2c8 Update php to version 7.2.0 2017-12-10 16:45:38 +01:00
Richard Kuhnt
d8d0ee2104 Update php to version 7.1.12 2017-11-23 18:00:39 +00:00
Richard Kuhnt
de9d9859f9 Update php to version 7.1.11 2017-10-25 23:00:26 +00:00
Richard Kuhnt
806409171f Update php to version 7.1.10 2017-09-26 22:01:47 +00:00
Richard Kuhnt
c33c99feb2 Update php to version 7.1.9 2017-08-30 20:00:16 +00:00
Richard Kuhnt
e3af4685b0 Update php to version 7.1.8 2017-08-01 23:00:29 +00:00
Richard Kuhnt
dfffc0f688 Update php to version 7.1.7 2017-07-06 18:00:15 +00:00
Richard Kuhnt
6797cb1c88 php: update hash to sha256 2017-06-28 13:45:52 +02:00
Richard Kuhnt
5f3eefcf38 php/php-nts: Fix license URL 2017-06-19 12:08:27 +02:00
Ross Smith II
0ac6745382 HTTPS everywhere 2017-06-17 19:54:35 -07:00
Richard Kuhnt
f32459b7e6 Update php to version 7.1.6 2017-06-08 07:00:29 +02:00
Richard Kuhnt
6ecd8d9eb3 Introducing $baseurl variable for hash file downloads 2017-05-14 14:53:25 +02:00
Richard Kuhnt
2e7a16f5c6 Update php to version 7.1.5 2017-05-10 00:01:11 +02:00
Richard Kuhnt
e5f2c03b12 Remove unnecessary type, mode and find definitions 2017-04-14 18:01:22 +02:00
Richard Kuhnt
777c78f115 Update php to version 7.1.4 2017-04-12 04:00:47 +02:00
Richard Kuhnt
15d8b1576a Add vcredist suggestions to php and dig 2017-04-02 23:23:41 +02:00
Rémy
7ff63ebcee fix php config migration / show full path
Check for old configs to migrate before creating an empty directory for
the new config files

Show the full path inside the notice instead of $dir/cli/conf.d
2017-03-31 01:03:26 +02:00
Richard Kuhnt
06b9ce1b84 Improve PHP configuration persistence by using multiple directories in PHP_INI_SCAN_DIR 2017-03-30 20:00:00 +02:00
Richard Kuhnt
c5985c1057 More suggested persist changes for php and nginx 2017-03-30 14:43:42 +02:00
Luke Sampson
057d7e7e87 Suggested persist changes (see #1410) 2017-03-30 15:14:20 +11:00
Rémy
0e88faa326 Merge remote-tracking branch 'upstream/master' into persist 2017-03-30 00:15:29 +02:00
Rémy
423fd3cb88 persist php conf: migrate old configuration to new persist directory on
post_install
2017-03-26 14:23:27 +02:00
Rémy
4807b20bcb normalize persist terms 2017-03-26 14:08:58 +02:00
Richard Kuhnt
6c011ed6c7 Fix vcruntime140 urls for php
Fix php-nts manifest
2017-03-26 12:57:50 +02:00
Rémy
5bfd9daff8 php: remove configuration transfer (would not work) 2017-03-25 16:28:05 +01:00
Rémy
de9034d5a6 php: use data_dir for configuration scan_dir 2017-03-25 16:28:05 +01:00
Richard Kuhnt
7925f55c09 Update php to version 7.1.3 2017-03-16 01:01:11 +01:00
Richard
98b93fbc24 Update php to version 7.1.2 2017-02-15 12:15:18 +01:00
Martin Lindhe
e8211d0a67 php 7.1.1 2017-01-19 00:21:36 +01:00
Rémy
a5c054ea9e Breaking, change autoupdate definition to use the same logic as the
architecture by the core / update the affected manifests / ability to
change extract_dir based on arch / add nssm autoupdate
2017-01-01 17:30:18 +01:00
Rémy
e4da0f4307 php autoupdate / update php 7.1 2016-12-11 11:43:28 +01:00
Luke Sampson
6099785c80 fixes #1148 2016-12-09 21:20:13 +11:00
Maximilian Füsslin
623a32022b updated php 2016-12-08 17:29:40 +01:00
Rémy
badaddd646 Update outdated apps (#1116)
* update aria2 1.28.0

* update packer 0.11.0

* update php 7.0.13

* update git 2.10.2

* update nodejs 7.1.0

* update sqlite 3.15.1

* update cmake 3.6.3

* update r 3.3.2

* update perl 5.24.0.1

* update terraform 0.7.10 / migrate to 0.7

previous version was broken, since version 0.7 all the providers are in
the main binary
https://www.terraform.io/upgrade-guides/0-7.html

* update vagrant 1.8.7

* update sbcl 1.3.11

* update imagemagick

* update ffmpeg 20161108

* update git-lfs 1.4.4
2016-11-10 07:58:56 +11:00
rrelmy
9a16242c68 Update php version to 7.0.12 (#1088) 2016-10-17 05:45:30 +10:00
Richard Kuhnt
5295cc0a44 Use https everywhere possible (#1086)
* Use https everywhere possible

* Update version checks
2016-10-15 08:25:02 +10:00
gysi
e135760b86 upped php version to 7.0.11 (#1034) 2016-09-18 22:42:24 +12:00
Atrox
190e62409f Update PHP to 7.0.10 (#1008)
Fixes #1005
2016-08-23 08:32:28 +10:00
Christophe
a60c0534e5 fixing hash issue (#968)
When sha1 is used, we need to specify "sha1:" in the hash
2016-07-27 07:38:40 +10:00
Christophe
2bf6a65d72 Upgrade PHP to 7.0.9 (#967)
- Core:
  - Fixed bug #72508 (strange references after recursive function call and "switch" statement).
  - Fixed bug #72513 (Stack-based buffer overflow vulnerability in virtual_file_ex).
  - Fixed bug #72573 (HTTP_PROXY is improperly trusted by some PHP libraries and applications).
- bz2:
  - Fixed bug #72613 (Inadequate error handling in bzread()).
- CLI:
  - Fixed bug #72484 (SCRIPT_FILENAME shows wrong path if the user specify router.php).
- COM:
  - Fixed bug #72498 (variant_date_from_timestamp null dereference).
- Curl:
  - Fixed bug #72541 (size_t overflow lead to heap corruption).
- Exif:
  - Fixed bug #72603 (Out of bound read in exif_process_IFD_in_MAKERNOTE).
  - Fixed bug #72618 (NULL Pointer Dereference in exif_process_user_comment).
- GD:
  - Fixed bug #43475 (Thick styled lines have scrambled patterns).
  - Fixed bug #53640 (XBM images require width to be multiple of 8).
  - Fixed bug #64641 (imagefilledpolygon doesn't draw horizontal line).
  - Fixed bug #72512 (gdImageTrueColorToPaletteBody allows arbitrary write/read access).
  - Fixed bug #72519 (imagegif/output out-of-bounds access).
  - Fixed bug #72558 (Integer overflow error within _gdContributionsAlloc()).
  - Fixed bug #72482 (Ilegal write/read access caused by gdImageAALine overflow).
  - Fixed bug #72494 (imagecropauto out-of-bounds access).
- Intl:
  - Fixed bug #72533 (locale_accept_from_http out-of-bounds access).
- Mbstring:
  - Fixed bug #72405 (mb_ereg_replace - mbc_to_code (oniguruma) - oob read access).
  - Fixed bug #72399 (Use-After-Free in MBString (search_re)).
- mcrypt:
  - Fixed bug #72551, bug #72552 (Incorrect casting from size_t to int lead to heap overflow in mdecrypt_generic).
- PDO_pgsql:
  - Fixed bug #72570 (Segmentation fault when binding parameters on a query without placeholders).
- PCRE:
  - Fixed bug #72476 (Memleak in jit_stack).
  - Fixed bug #72463 (mail fails with invalid argument).
- Readline:
  - Fixed bug #72538 (readline_redisplay crashes php).
- Standard:
  - Fixed bug #72505 (readfile() mangles files larger than 2G).
  - Fixed bug #72306 (Heap overflow through proc_open and $env parameter).
- Session:
  - Fixed bug #72531 (ps_files_cleanup_dir Buffer overflow).
  - Fixed bug #72562 (Use After Free in unserialize() with Unexpected Session Deserialization).
- SNMP:
  - Fixed bug #72479 (Use After Free Vulnerability in SNMP with GC and unserialize()).
- Streams:
  - Fixed bug #72439 (Stream socket with remote address leads to a segmentation fault).
- XMLRPC:
  - Fixed bug #72606 (heap-buffer-overflow (write) simplestring_addn simplestring.c).
- Zip:
  - Fixed bug #72520 (Stack-based buffer overflow vulnerability in php_stream_zip_opener).
2016-07-25 08:29:11 +10:00
Martin Lindhe
b99143499b php: sha256 hash (#943) 2016-07-07 08:11:21 +10:00
Christophe
1e1b405b97 Add the ability to have an additional php.ini file (#913)
When upgrading PHP version, the php.ini file is reset. So, I used PHP_INI_SCAN_DIR $env var to add an additional path to load php config files: /php/conf/.

I think this little change can simplify the PHP upgrading process.
2016-06-26 14:59:28 +10:00
Christophe
25c4cfae5a Update PHP to 7.0.8 (#910)
- Core:
  - Fixed bug #72218 (If host name cannot be resolved then PHP 7 crashes).
  - Fixed bug #72221 (segfault, past-the-end access).
  - Fixed bug #72268 (Integer Overflow in nl2br()).
  - Fixed bug #72275 (Integer Overflow in json_encode()/json_decode()/ json_utf8_to_utf16()).
  - Fixed bug #72400 (Integer Overflow in addcslashes/addslashes).
  - Fixed bug #72403 (Integer Overflow in Length of String-typed ZVAL).
- FPM:
  - Fixed bug #72308 (fastcgi_finish_request and logging environment variables).
- GD:
  - Fixed bug #72298 (pass2_no_dither out-of-bounds access).
  - Fixed bug #72337 (invalid dimensions can lead to crash) (Pierre)
  - Fixed bug #72339 (Integer Overflow in _gd2GetHeader() resulting in heap overflow).
  - Fixed bug #72407 (NULL Pointer Dereference at _gdScaleVert).
- Intl:
  - Fixed bug #64524 (Add intl.use_exceptions to php.ini-*).
- mbstring:
  - Fixed bug #72402 (_php_mb_regex_ereg_replace_exec - double free).
- mcrypt:
  - Fixed bug #72455 (Heap Overflow due to integer overflows).
- PCRE:
  - Fixed bug #72143 (preg_replace uses int instead of size_t).
- PDO_pgsql:
  - Fixed bug #71573 (Segfault (core dumped) if paramno beyond bound).
  - Fixed bug #72294 (Segmentation fault/invalid pointer in connection with pgsql_stmt_dtor).
- Phpdbg:
  - Fixed bug #72284 (phpdbg fatal errors with coverage).
- Postgres:
  - Fixed bug #72195 (pg_pconnect/pg_connect cause use-after-free).
  - Fixed bug #72197 (pg_lo_create arbitrary read).
- SPL:
  - Fixed bug #72262 (int/size_t confusion in SplFileObject::fread).
  - Fixed bug #72433 (Use After Free Vulnerability in PHP's GC algorithm and unserialize).
- Standard:
  - Fixed bug #72017 (range() with float step produces unexpected result).
  - Fixed bug #72193 (dns_get_record returns array containing elements of type 'unknown').
  - Fixed bug #72229 (Wrong reference when serialize/unserialize an object).
  - Fixed bug #72300 (ignore_user_abort(false) has no effect).
- XML:
  - Fixed bug #72206 (xml_parser_create/xml_parser_free leaks mem).
- XMLRPC:
  - Fixed bug #72155 (use-after-free caused by get_zval_xmlrpc_type).
- WDDX:
  - Fixed bug #72340 (Double Free Courruption in wddx_deserialize).
- Zip:
  - Fixed bug #72258 (ZipArchive converts filenames to unrecoverable form).
  - Fixed bug #72434 (ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and unserialize).
2016-06-24 07:08:03 +10:00
Christophe
f494df578a Update to php 7.0.7 (#880)
- Core:
  - Fixed bug #72162 (use-after-free - error_reporting).
  - Add compiler option to disable special case function calls.
  - Fixed bug #72101 (crash on complex code).
  - Fixed bug #72100 (implode() inserts garbage into resulting string when joins very big integer).
  - Fixed bug #72057 (PHP Hangs when using custom error handler and typehint).
  - Fixed bug #72038 (Function calls with values to a by-ref parameter don't always throw a notice).
  - Fixed bug #71737 (Memory leak in closure with parameter named $this).
  - Fixed bug #72059 (?? is not allowed on constant expressions).
  - Fixed bug #72159 (Imported Class Overrides Local Class Name).
- Curl:
  - Fixed bug #68658 (Define CURLE_SSL_CACERT_BADFILE).
- DBA:
  - Fixed bug #72157 (use-after-free caused by dba_open).
- GD:
  - Fixed bug #72227 (imagescale out-of-bounds read). (CVE-2013-7456)
- Intl:
  - Fixed bug #72241 (get_icu_value_internal out-of-bounds read). (CVE-2016-5093)
- JSON:
  - Fixed bug #72069 (Behavior \JsonSerializable different from json_encode).
- Mbstring:
  - Fixed bug #72164 (Null Pointer Dereference - mb_ereg_replace).
- OCI8:
  - Fixed bug #71600 (oci_fetch_all segfaults when selecting more than eight columns).
- Opcache:
  - Fixed bug #72014 (Including a file with anonymous classes multiple times leads to fatal error).
- OpenSSL:
  - Fixed bug #72165 (Null pointer dereference - openssl_csr_new).
- PCNTL:
  - Fixed bug #72154 (pcntl_wait/pcntl_waitpid array internal structure overwrite).
- POSIX:
  - Fixed bug #72133 (php_posix_group_to_array crashes if gr_passwd is NULL).
- Postgres:
  - Fixed bug #72028 (pg_query_params(): NULL converts to empty string).
  - Fixed bug #71062 (pg_convert() doesn't accept ISO 8601 for datatype timestamp).
  - Fixed bug #72151 (mysqli_fetch_object changed behaviour).
- Reflection:
  - Fixed bug #72174 (ReflectionProperty#getValue() causes __isset call).
- Session:
  - Fixed bug #71972 (Cyclic references causing session_start(): Failed to decode session object).
- Sockets:
  - Added socket_export_stream() function for getting a stream compatible resource from a socket resource.
- SPL:
  - Fixed bug #72051 (The reference in CallbackFilterIterator doesn't work as expected).
- SQLite3:
  - Fixed bug #68849 (bindValue is not using the right data type).
- Standard:
  - Fixed bug #72075 (Referencing socket resources breaks stream_select).
  - Fixed bug #72031 (array_column() against an array of objects discards all values matching null).
2016-05-31 20:52:14 +10:00
Christophe
bc8ad95404 Update PHP to 7.0.6 (#806)
- add php-cgi as available command
2016-05-04 08:48:34 +10:00
Lucas Tadeu Teixeira
afc8a9f4cc Fix URL to 64-bit vcruntime140.dll in php.json (#798)
The repository that used to hold the .dll file no longer exists.

This changes the URL to the .dll file and updates the hash to
the new file's md5 hash.
2016-04-20 12:10:31 +10:00
MPLew-is
ec32a4fe27 Update PHP to 7.0.5 2016-03-31 17:15:48 -04:00
Mike Lewis
f372234d5f Revert "Restore separate app for Apache/PHP Visual C++ dependency" 2016-03-29 04:50:55 -04:00