From 96d9f031ba22958e416b31278d5cd043863c8b3b Mon Sep 17 00:00:00 2001 From: Yogita Urade Date: Tue, 26 Nov 2024 04:40:52 +0000 Subject: [PATCH] php: upgrade 8.2.20 -> 8.2.24 Includes fix for CVE-2024-8925, CVE-2024-8926, CVE-2024-8927 and CVE-2024-9026 Changelog: https://www.php.net/ChangeLog-8.php#8.2.24 Rebase 0001-ext-opcache-config.m4-enable-opcache.patch to new version Signed-off-by: Yogita Urade Signed-off-by: Armin Kuster --- ...001-ext-opcache-config.m4-enable-opcache.patch | 15 +++++++++------ .../php/{php_8.2.20.bb => php_8.2.24.bb} | 2 +- 2 files changed, 10 insertions(+), 7 deletions(-) rename meta-oe/recipes-devtools/php/{php_8.2.20.bb => php_8.2.24.bb} (99%) diff --git a/meta-oe/recipes-devtools/php/php/0001-ext-opcache-config.m4-enable-opcache.patch b/meta-oe/recipes-devtools/php/php/0001-ext-opcache-config.m4-enable-opcache.patch index c743697469..496213540b 100644 --- a/meta-oe/recipes-devtools/php/php/0001-ext-opcache-config.m4-enable-opcache.patch +++ b/meta-oe/recipes-devtools/php/php/0001-ext-opcache-config.m4-enable-opcache.patch @@ -1,6 +1,6 @@ -From 889583912ddd7abc628f2703892ec4884db6419a Mon Sep 17 00:00:00 2001 -From: Soumya Sambu -Date: Tue, 7 May 2024 08:39:16 +0000 +From aa99f9db92817358d6b91040cc555f5ca31b727c Mon Sep 17 00:00:00 2001 +From: Yogita Urade +Date: Mon, 25 Nov 2024 07:07:38 +0000 Subject: [PATCH 01/11] ext/opcache/config.m4: enable opcache We can't use AC_TRY_RUN to run programs in a cross compile @@ -23,12 +23,15 @@ Signed-off-by: Mingli Yu update patch to version 8.2.18 Signed-off-by: Soumya Sambu + +update patch to version 8.2.24 +Signed-off-by: Yogita Urade --- ext/opcache/config.m4 | 204 ++---------------------------------------- 1 file changed, 8 insertions(+), 196 deletions(-) diff --git a/ext/opcache/config.m4 b/ext/opcache/config.m4 -index 6bf07ad3..5d645b86 100644 +index b3929382..ba1a9aff 100644 --- a/ext/opcache/config.m4 +++ b/ext/opcache/config.m4 @@ -113,209 +113,21 @@ if test "$PHP_OPCACHE" != "no"; then @@ -247,8 +250,8 @@ index 6bf07ad3..5d645b86 100644 + have_shm_mmap_posix=yes + PHP_CHECK_LIBRARY(rt, shm_unlink, [PHP_ADD_LIBRARY(rt,1,OPCACHE_SHARED_LIBADD)]) - PHP_NEW_EXTENSION(opcache, - ZendAccelerator.c \ + AX_CHECK_COMPILE_FLAG([-Wno-implicit-fallthrough], + [PHP_OPCACHE_CFLAGS="$PHP_OPCACHE_CFLAGS -Wno-implicit-fallthrough"],, -- 2.40.0 diff --git a/meta-oe/recipes-devtools/php/php_8.2.20.bb b/meta-oe/recipes-devtools/php/php_8.2.24.bb similarity index 99% rename from meta-oe/recipes-devtools/php/php_8.2.20.bb rename to meta-oe/recipes-devtools/php/php_8.2.24.bb index f807f67a23..034f3bef17 100644 --- a/meta-oe/recipes-devtools/php/php_8.2.20.bb +++ b/meta-oe/recipes-devtools/php/php_8.2.24.bb @@ -34,7 +34,7 @@ SRC_URI:append:class-target = " \ " S = "${WORKDIR}/php-${PV}" -SRC_URI[sha256sum] = "5dec6fa61c7b9c47aa1d76666be651f2642ed2bcf6cd8638c57e3571ce2aac61" +SRC_URI[sha256sum] = "4cc76ec644eee97d17c92bfe8d0e84714fedf299a538b7dfadc0639dd0dc432f" CVE_STATUS_GROUPS += "CVE_STATUS_PHP" CVE_STATUS_PHP[status] = "fixed-version: The name of this product is exactly the same as github.com/emlog/emlog. CVE can be safely ignored."