112 Commits

Author SHA1 Message Date
Ross Smith II
0cebab89c4 Add https to 7zip, lynx, php & red (#2127) 2018-03-15 16:38:43 +01:00
Richard Kuhnt
34d56accfe Update php to version 7.2.3 2018-03-01 06:00:41 +00:00
Richard Kuhnt
5b8353d49e Update php to version 7.2.2 2018-01-31 23:00:17 +00:00
Richard Fussenegger
ee45480f55 Added phpdbg to executables (#1950) 2018-01-13 13:11:19 +01:00
Richard Kuhnt
d046bd00be Update php to version 7.2.1 2018-01-04 07:00:18 +00:00
Richard Kuhnt
93621cc2c8 Update php to version 7.2.0 2017-12-10 16:45:38 +01:00
Richard Kuhnt
d8d0ee2104 Update php to version 7.1.12 2017-11-23 18:00:39 +00:00
Richard Kuhnt
de9d9859f9 Update php to version 7.1.11 2017-10-25 23:00:26 +00:00
Richard Kuhnt
806409171f Update php to version 7.1.10 2017-09-26 22:01:47 +00:00
Richard Kuhnt
c33c99feb2 Update php to version 7.1.9 2017-08-30 20:00:16 +00:00
Richard Kuhnt
e3af4685b0 Update php to version 7.1.8 2017-08-01 23:00:29 +00:00
Richard Kuhnt
dfffc0f688 Update php to version 7.1.7 2017-07-06 18:00:15 +00:00
Richard Kuhnt
6797cb1c88 php: update hash to sha256 2017-06-28 13:45:52 +02:00
Richard Kuhnt
5f3eefcf38 php/php-nts: Fix license URL 2017-06-19 12:08:27 +02:00
Ross Smith II
0ac6745382 HTTPS everywhere 2017-06-17 19:54:35 -07:00
Richard Kuhnt
f32459b7e6 Update php to version 7.1.6 2017-06-08 07:00:29 +02:00
Richard Kuhnt
6ecd8d9eb3 Introducing $baseurl variable for hash file downloads 2017-05-14 14:53:25 +02:00
Richard Kuhnt
2e7a16f5c6 Update php to version 7.1.5 2017-05-10 00:01:11 +02:00
Richard Kuhnt
e5f2c03b12 Remove unnecessary type, mode and find definitions 2017-04-14 18:01:22 +02:00
Richard Kuhnt
777c78f115 Update php to version 7.1.4 2017-04-12 04:00:47 +02:00
Richard Kuhnt
15d8b1576a Add vcredist suggestions to php and dig 2017-04-02 23:23:41 +02:00
Rémy
7ff63ebcee fix php config migration / show full path
Check for old configs to migrate before creating an empty directory for
the new config files

Show the full path inside the notice instead of $dir/cli/conf.d
2017-03-31 01:03:26 +02:00
Richard Kuhnt
06b9ce1b84 Improve PHP configuration persistence by using multiple directories in PHP_INI_SCAN_DIR 2017-03-30 20:00:00 +02:00
Richard Kuhnt
c5985c1057 More suggested persist changes for php and nginx 2017-03-30 14:43:42 +02:00
Luke Sampson
057d7e7e87 Suggested persist changes (see #1410) 2017-03-30 15:14:20 +11:00
Rémy
0e88faa326 Merge remote-tracking branch 'upstream/master' into persist 2017-03-30 00:15:29 +02:00
Rémy
423fd3cb88 persist php conf: migrate old configuration to new persist directory on
post_install
2017-03-26 14:23:27 +02:00
Rémy
4807b20bcb normalize persist terms 2017-03-26 14:08:58 +02:00
Richard Kuhnt
6c011ed6c7 Fix vcruntime140 urls for php
Fix php-nts manifest
2017-03-26 12:57:50 +02:00
Rémy
5bfd9daff8 php: remove configuration transfer (would not work) 2017-03-25 16:28:05 +01:00
Rémy
de9034d5a6 php: use data_dir for configuration scan_dir 2017-03-25 16:28:05 +01:00
Richard Kuhnt
7925f55c09 Update php to version 7.1.3 2017-03-16 01:01:11 +01:00
Richard
98b93fbc24 Update php to version 7.1.2 2017-02-15 12:15:18 +01:00
Martin Lindhe
e8211d0a67 php 7.1.1 2017-01-19 00:21:36 +01:00
Rémy
a5c054ea9e Breaking, change autoupdate definition to use the same logic as the
architecture by the core / update the affected manifests / ability to
change extract_dir based on arch / add nssm autoupdate
2017-01-01 17:30:18 +01:00
Rémy
e4da0f4307 php autoupdate / update php 7.1 2016-12-11 11:43:28 +01:00
Luke Sampson
6099785c80 fixes #1148 2016-12-09 21:20:13 +11:00
Maximilian Füsslin
623a32022b updated php 2016-12-08 17:29:40 +01:00
Rémy
badaddd646 Update outdated apps (#1116)
* update aria2 1.28.0

* update packer 0.11.0

* update php 7.0.13

* update git 2.10.2

* update nodejs 7.1.0

* update sqlite 3.15.1

* update cmake 3.6.3

* update r 3.3.2

* update perl 5.24.0.1

* update terraform 0.7.10 / migrate to 0.7

previous version was broken, since version 0.7 all the providers are in
the main binary
https://www.terraform.io/upgrade-guides/0-7.html

* update vagrant 1.8.7

* update sbcl 1.3.11

* update imagemagick

* update ffmpeg 20161108

* update git-lfs 1.4.4
2016-11-10 07:58:56 +11:00
rrelmy
9a16242c68 Update php version to 7.0.12 (#1088) 2016-10-17 05:45:30 +10:00
Richard Kuhnt
5295cc0a44 Use https everywhere possible (#1086)
* Use https everywhere possible

* Update version checks
2016-10-15 08:25:02 +10:00
gysi
e135760b86 upped php version to 7.0.11 (#1034) 2016-09-18 22:42:24 +12:00
Atrox
190e62409f Update PHP to 7.0.10 (#1008)
Fixes #1005
2016-08-23 08:32:28 +10:00
Christophe
a60c0534e5 fixing hash issue (#968)
When sha1 is used, we need to specify "sha1:" in the hash
2016-07-27 07:38:40 +10:00
Christophe
2bf6a65d72 Upgrade PHP to 7.0.9 (#967)
- Core:
  - Fixed bug #72508 (strange references after recursive function call and "switch" statement).
  - Fixed bug #72513 (Stack-based buffer overflow vulnerability in virtual_file_ex).
  - Fixed bug #72573 (HTTP_PROXY is improperly trusted by some PHP libraries and applications).
- bz2:
  - Fixed bug #72613 (Inadequate error handling in bzread()).
- CLI:
  - Fixed bug #72484 (SCRIPT_FILENAME shows wrong path if the user specify router.php).
- COM:
  - Fixed bug #72498 (variant_date_from_timestamp null dereference).
- Curl:
  - Fixed bug #72541 (size_t overflow lead to heap corruption).
- Exif:
  - Fixed bug #72603 (Out of bound read in exif_process_IFD_in_MAKERNOTE).
  - Fixed bug #72618 (NULL Pointer Dereference in exif_process_user_comment).
- GD:
  - Fixed bug #43475 (Thick styled lines have scrambled patterns).
  - Fixed bug #53640 (XBM images require width to be multiple of 8).
  - Fixed bug #64641 (imagefilledpolygon doesn't draw horizontal line).
  - Fixed bug #72512 (gdImageTrueColorToPaletteBody allows arbitrary write/read access).
  - Fixed bug #72519 (imagegif/output out-of-bounds access).
  - Fixed bug #72558 (Integer overflow error within _gdContributionsAlloc()).
  - Fixed bug #72482 (Ilegal write/read access caused by gdImageAALine overflow).
  - Fixed bug #72494 (imagecropauto out-of-bounds access).
- Intl:
  - Fixed bug #72533 (locale_accept_from_http out-of-bounds access).
- Mbstring:
  - Fixed bug #72405 (mb_ereg_replace - mbc_to_code (oniguruma) - oob read access).
  - Fixed bug #72399 (Use-After-Free in MBString (search_re)).
- mcrypt:
  - Fixed bug #72551, bug #72552 (Incorrect casting from size_t to int lead to heap overflow in mdecrypt_generic).
- PDO_pgsql:
  - Fixed bug #72570 (Segmentation fault when binding parameters on a query without placeholders).
- PCRE:
  - Fixed bug #72476 (Memleak in jit_stack).
  - Fixed bug #72463 (mail fails with invalid argument).
- Readline:
  - Fixed bug #72538 (readline_redisplay crashes php).
- Standard:
  - Fixed bug #72505 (readfile() mangles files larger than 2G).
  - Fixed bug #72306 (Heap overflow through proc_open and $env parameter).
- Session:
  - Fixed bug #72531 (ps_files_cleanup_dir Buffer overflow).
  - Fixed bug #72562 (Use After Free in unserialize() with Unexpected Session Deserialization).
- SNMP:
  - Fixed bug #72479 (Use After Free Vulnerability in SNMP with GC and unserialize()).
- Streams:
  - Fixed bug #72439 (Stream socket with remote address leads to a segmentation fault).
- XMLRPC:
  - Fixed bug #72606 (heap-buffer-overflow (write) simplestring_addn simplestring.c).
- Zip:
  - Fixed bug #72520 (Stack-based buffer overflow vulnerability in php_stream_zip_opener).
2016-07-25 08:29:11 +10:00
Martin Lindhe
b99143499b php: sha256 hash (#943) 2016-07-07 08:11:21 +10:00
Christophe
1e1b405b97 Add the ability to have an additional php.ini file (#913)
When upgrading PHP version, the php.ini file is reset. So, I used PHP_INI_SCAN_DIR $env var to add an additional path to load php config files: /php/conf/.

I think this little change can simplify the PHP upgrading process.
2016-06-26 14:59:28 +10:00
Christophe
25c4cfae5a Update PHP to 7.0.8 (#910)
- Core:
  - Fixed bug #72218 (If host name cannot be resolved then PHP 7 crashes).
  - Fixed bug #72221 (segfault, past-the-end access).
  - Fixed bug #72268 (Integer Overflow in nl2br()).
  - Fixed bug #72275 (Integer Overflow in json_encode()/json_decode()/ json_utf8_to_utf16()).
  - Fixed bug #72400 (Integer Overflow in addcslashes/addslashes).
  - Fixed bug #72403 (Integer Overflow in Length of String-typed ZVAL).
- FPM:
  - Fixed bug #72308 (fastcgi_finish_request and logging environment variables).
- GD:
  - Fixed bug #72298 (pass2_no_dither out-of-bounds access).
  - Fixed bug #72337 (invalid dimensions can lead to crash) (Pierre)
  - Fixed bug #72339 (Integer Overflow in _gd2GetHeader() resulting in heap overflow).
  - Fixed bug #72407 (NULL Pointer Dereference at _gdScaleVert).
- Intl:
  - Fixed bug #64524 (Add intl.use_exceptions to php.ini-*).
- mbstring:
  - Fixed bug #72402 (_php_mb_regex_ereg_replace_exec - double free).
- mcrypt:
  - Fixed bug #72455 (Heap Overflow due to integer overflows).
- PCRE:
  - Fixed bug #72143 (preg_replace uses int instead of size_t).
- PDO_pgsql:
  - Fixed bug #71573 (Segfault (core dumped) if paramno beyond bound).
  - Fixed bug #72294 (Segmentation fault/invalid pointer in connection with pgsql_stmt_dtor).
- Phpdbg:
  - Fixed bug #72284 (phpdbg fatal errors with coverage).
- Postgres:
  - Fixed bug #72195 (pg_pconnect/pg_connect cause use-after-free).
  - Fixed bug #72197 (pg_lo_create arbitrary read).
- SPL:
  - Fixed bug #72262 (int/size_t confusion in SplFileObject::fread).
  - Fixed bug #72433 (Use After Free Vulnerability in PHP's GC algorithm and unserialize).
- Standard:
  - Fixed bug #72017 (range() with float step produces unexpected result).
  - Fixed bug #72193 (dns_get_record returns array containing elements of type 'unknown').
  - Fixed bug #72229 (Wrong reference when serialize/unserialize an object).
  - Fixed bug #72300 (ignore_user_abort(false) has no effect).
- XML:
  - Fixed bug #72206 (xml_parser_create/xml_parser_free leaks mem).
- XMLRPC:
  - Fixed bug #72155 (use-after-free caused by get_zval_xmlrpc_type).
- WDDX:
  - Fixed bug #72340 (Double Free Courruption in wddx_deserialize).
- Zip:
  - Fixed bug #72258 (ZipArchive converts filenames to unrecoverable form).
  - Fixed bug #72434 (ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and unserialize).
2016-06-24 07:08:03 +10:00
Christophe
f494df578a Update to php 7.0.7 (#880)
- Core:
  - Fixed bug #72162 (use-after-free - error_reporting).
  - Add compiler option to disable special case function calls.
  - Fixed bug #72101 (crash on complex code).
  - Fixed bug #72100 (implode() inserts garbage into resulting string when joins very big integer).
  - Fixed bug #72057 (PHP Hangs when using custom error handler and typehint).
  - Fixed bug #72038 (Function calls with values to a by-ref parameter don't always throw a notice).
  - Fixed bug #71737 (Memory leak in closure with parameter named $this).
  - Fixed bug #72059 (?? is not allowed on constant expressions).
  - Fixed bug #72159 (Imported Class Overrides Local Class Name).
- Curl:
  - Fixed bug #68658 (Define CURLE_SSL_CACERT_BADFILE).
- DBA:
  - Fixed bug #72157 (use-after-free caused by dba_open).
- GD:
  - Fixed bug #72227 (imagescale out-of-bounds read). (CVE-2013-7456)
- Intl:
  - Fixed bug #72241 (get_icu_value_internal out-of-bounds read). (CVE-2016-5093)
- JSON:
  - Fixed bug #72069 (Behavior \JsonSerializable different from json_encode).
- Mbstring:
  - Fixed bug #72164 (Null Pointer Dereference - mb_ereg_replace).
- OCI8:
  - Fixed bug #71600 (oci_fetch_all segfaults when selecting more than eight columns).
- Opcache:
  - Fixed bug #72014 (Including a file with anonymous classes multiple times leads to fatal error).
- OpenSSL:
  - Fixed bug #72165 (Null pointer dereference - openssl_csr_new).
- PCNTL:
  - Fixed bug #72154 (pcntl_wait/pcntl_waitpid array internal structure overwrite).
- POSIX:
  - Fixed bug #72133 (php_posix_group_to_array crashes if gr_passwd is NULL).
- Postgres:
  - Fixed bug #72028 (pg_query_params(): NULL converts to empty string).
  - Fixed bug #71062 (pg_convert() doesn't accept ISO 8601 for datatype timestamp).
  - Fixed bug #72151 (mysqli_fetch_object changed behaviour).
- Reflection:
  - Fixed bug #72174 (ReflectionProperty#getValue() causes __isset call).
- Session:
  - Fixed bug #71972 (Cyclic references causing session_start(): Failed to decode session object).
- Sockets:
  - Added socket_export_stream() function for getting a stream compatible resource from a socket resource.
- SPL:
  - Fixed bug #72051 (The reference in CallbackFilterIterator doesn't work as expected).
- SQLite3:
  - Fixed bug #68849 (bindValue is not using the right data type).
- Standard:
  - Fixed bug #72075 (Referencing socket resources breaks stream_select).
  - Fixed bug #72031 (array_column() against an array of objects discards all values matching null).
2016-05-31 20:52:14 +10:00
Christophe
bc8ad95404 Update PHP to 7.0.6 (#806)
- add php-cgi as available command
2016-05-04 08:48:34 +10:00