diff mbox series

[meta-oe,04/11] php: update 8.1.16 -> 8.2.3

Message ID 1678428812-7622-4-git-send-email-wangmy@fujitsu.com
State Under Review
Headers show
Series [meta-networking,01/11] rp-pppoe: upgrade 3.14 -> 3.15 | expand

Commit Message

Mingyu Wang (Fujitsu) March 10, 2023, 6:13 a.m. UTC
From: Wang Mingyu <wangmy@fujitsu.com>

License-Update: Copyright year updated to 2022.

Changelog:
=========
- Core:
  . Fixed bug #81744 (Password_verify() always return true with some hash).
    (CVE-2023-0567)
  . Fixed bug #81746 (1-byte array overrun in common path resolve code).
    (CVE-2023-0568)

- FPM:
  . Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart
    request body). (CVE-2023-0662)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 meta-oe/recipes-devtools/php/{php_8.1.16.bb => php_8.2.3.bb} | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
 rename meta-oe/recipes-devtools/php/{php_8.1.16.bb => php_8.2.3.bb} (98%)

Comments

Khem Raj March 10, 2023, 7:45 p.m. UTC | #1
xdebug needs to be fixed with php 8.2.0+ see
https://errors.yoctoproject.org/Errors/Details/697775/

On Thu, Mar 9, 2023 at 10:13 PM wangmy <wangmy@fujitsu.com> wrote:
>
> From: Wang Mingyu <wangmy@fujitsu.com>
>
> License-Update: Copyright year updated to 2022.
>
> Changelog:
> =========
> - Core:
>   . Fixed bug #81744 (Password_verify() always return true with some hash).
>     (CVE-2023-0567)
>   . Fixed bug #81746 (1-byte array overrun in common path resolve code).
>     (CVE-2023-0568)
>
> - FPM:
>   . Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart
>     request body). (CVE-2023-0662)
>
> Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
> ---
>  meta-oe/recipes-devtools/php/{php_8.1.16.bb => php_8.2.3.bb} | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)
>  rename meta-oe/recipes-devtools/php/{php_8.1.16.bb => php_8.2.3.bb} (98%)
>
> diff --git a/meta-oe/recipes-devtools/php/php_8.1.16.bb b/meta-oe/recipes-devtools/php/php_8.2.3.bb
> similarity index 98%
> rename from meta-oe/recipes-devtools/php/php_8.1.16.bb
> rename to meta-oe/recipes-devtools/php/php_8.2.3.bb
> index 2f45ced95..f7639cd5f 100644
> --- a/meta-oe/recipes-devtools/php/php_8.1.16.bb
> +++ b/meta-oe/recipes-devtools/php/php_8.2.3.bb
> @@ -3,7 +3,7 @@ HOMEPAGE = "http://www.php.net"
>  SECTION = "console/network"
>
>  LICENSE = "PHP-3.0"
> -LIC_FILES_CHKSUM = "file://LICENSE;md5=99532e0f6620bc9bca34f12fadaee33c"
> +LIC_FILES_CHKSUM = "file://LICENSE;md5=5ebd5be8e2a89f634486445bd164bef0"
>
>  BBCLASSEXTEND = "native"
>  DEPENDS = "zlib bzip2 libxml2 virtual/libiconv php-native lemon-native"
> @@ -33,7 +33,7 @@ SRC_URI:append:class-target = " \
>            "
>
>  S = "${WORKDIR}/php-${PV}"
> -SRC_URI[sha256sum] = "cd9f0ea14d82d9455587a49a0b6c802a7b8d8ff79703f9f48b17db010fb633ce"
> +SRC_URI[sha256sum] = "87bb58865f38f5e2941813029152cea2102fe2961bb4d68b88f831ddd0548d0f"
>
>  CVE_CHECK_IGNORE += "\
>      CVE-2007-2728 \
> --
> 2.34.1
>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#101476): https://lists.openembedded.org/g/openembedded-devel/message/101476
> Mute This Topic: https://lists.openembedded.org/mt/97514448/1997914
> Group Owner: openembedded-devel+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [raj.khem@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
diff mbox series

Patch

diff --git a/meta-oe/recipes-devtools/php/php_8.1.16.bb b/meta-oe/recipes-devtools/php/php_8.2.3.bb
similarity index 98%
rename from meta-oe/recipes-devtools/php/php_8.1.16.bb
rename to meta-oe/recipes-devtools/php/php_8.2.3.bb
index 2f45ced95..f7639cd5f 100644
--- a/meta-oe/recipes-devtools/php/php_8.1.16.bb
+++ b/meta-oe/recipes-devtools/php/php_8.2.3.bb
@@ -3,7 +3,7 @@  HOMEPAGE = "http://www.php.net"
 SECTION = "console/network"
 
 LICENSE = "PHP-3.0"
-LIC_FILES_CHKSUM = "file://LICENSE;md5=99532e0f6620bc9bca34f12fadaee33c"
+LIC_FILES_CHKSUM = "file://LICENSE;md5=5ebd5be8e2a89f634486445bd164bef0"
 
 BBCLASSEXTEND = "native"
 DEPENDS = "zlib bzip2 libxml2 virtual/libiconv php-native lemon-native"
@@ -33,7 +33,7 @@  SRC_URI:append:class-target = " \
           "
 
 S = "${WORKDIR}/php-${PV}"
-SRC_URI[sha256sum] = "cd9f0ea14d82d9455587a49a0b6c802a7b8d8ff79703f9f48b17db010fb633ce"
+SRC_URI[sha256sum] = "87bb58865f38f5e2941813029152cea2102fe2961bb4d68b88f831ddd0548d0f"
 
 CVE_CHECK_IGNORE += "\
     CVE-2007-2728 \