[packages/php/PHP_8_1] up to 8.1.33 (fixes CVE-2025-1735 CVE-2025-6491 CVE-2025-1220)
atler
atler at pld-linux.org
Thu Jul 3 20:09:02 CEST 2025
commit 622c082e36f7d0654b0b5afd3bd2f1b391c4e748
Author: Jan Palus <atler at pld-linux.org>
Date: Thu Jul 3 20:08:24 2025 +0200
up to 8.1.33 (fixes CVE-2025-1735 CVE-2025-6491 CVE-2025-1220)
icu74.patch | 74 -------------------------------------------------------------
php.spec | 6 ++---
2 files changed, 2 insertions(+), 78 deletions(-)
---
diff --git a/php.spec b/php.spec
index e4da079..90ad548 100644
--- a/php.spec
+++ b/php.spec
@@ -148,7 +148,7 @@ Summary(pt_BR.UTF-8): A linguagem de script PHP
Summary(ru.UTF-8): PHP - язык препроцессирования HTML-файлов, выполняемый на сервере
Summary(uk.UTF-8): PHP - мова препроцесування HTML-файлів, виконувана на сервері
Name: %{orgname}%{php_suffix}
-Version: 8.1.32
+Version: 8.1.33
Release: 1
Epoch: 4
# All files licensed under PHP version 3.01, except
@@ -157,7 +157,7 @@ Epoch: 4
License: PHP 3.01 and Zend and BSD
Group: Libraries
Source0: https://www.php.net/distributions/%{orgname}-%{version}.tar.xz
-# Source0-md5: 685eda239895545d75c124be537d34e4
+# Source0-md5: 36cd5b20659667cbddd171c6238dd64b
Source1: opcache.ini
Source2: %{orgname}-mod_php.conf
Source3: %{orgname}-cgi-fcgi.ini
@@ -205,7 +205,6 @@ Patch67: mysql-lib-ver-mismatch.patch
# https://bugs.php.net/bug.php?id=68344
Patch68: php-mysql-ssl-context.patch
Patch71: libdb-info.patch
-Patch72: icu74.patch
URL: https://www.php.net/
%{?with_pdo_firebird:%{!?with_interbase_inst:BuildRequires: Firebird-devel >= 1.0.2.908-2}}
%{?with_pspell:BuildRequires: aspell-devel >= 2:0.50.0}
@@ -1904,7 +1903,6 @@ cp -p php.ini-production php.ini
%patch -P67 -p1 -b .mysql-lib-ver-mismatch
#%%patch -P68 -p1 DROP or update to 7.0 APIs
%patch -P71 -p1 -b .libdb-info
-%patch -P72 -p1
sed -E -i -e '1s,#!\s*/usr/bin/env\s+(.*),#!%{__bindir}\1,' \
ext/ext_skel.php \
diff --git a/icu74.patch b/icu74.patch
deleted file mode 100644
index 01f5e88..0000000
--- a/icu74.patch
+++ /dev/null
@@ -1,74 +0,0 @@
-From cc46a4e6b5a413bab3e264c1dcaaf7052f54fbc4 Mon Sep 17 00:00:00 2001
-From: David Carlier <devnexen at gmail.com>
-Date: Sat, 17 Feb 2024 21:38:21 +0000
-Subject: [PATCH] ext/intl: level up c++ runtime std for icu 74 and onwards.
-
-to align with what is required to build icu 74 itself.
-
-Close GH-14002
----
- NEWS | 3 +++
- ext/intl/config.m4 | 11 ++++++++++-
- 2 files changed, 13 insertions(+), 1 deletion(-)
-
-diff --git a/ext/intl/config.m4 b/ext/intl/config.m4
-index dd687bcd97de3..48f5147ca7bbf 100644
---- a/ext/intl/config.m4
-+++ b/ext/intl/config.m4
-@@ -80,7 +80,16 @@ if test "$PHP_INTL" != "no"; then
- breakiterator/codepointiterator_methods.cpp"
-
- PHP_REQUIRE_CXX()
-- PHP_CXX_COMPILE_STDCXX(11, mandatory, PHP_INTL_STDCXX)
-+
-+ AC_MSG_CHECKING([if intl requires -std=gnu++17])
-+ AS_IF([test "$PKG_CONFIG icu-uc --atleast-version=74"],[
-+ AC_MSG_RESULT([yes])
-+ PHP_CXX_COMPILE_STDCXX(17, mandatory, PHP_INTL_STDCXX)
-+ ],[
-+ AC_MSG_RESULT([no])
-+ PHP_CXX_COMPILE_STDCXX(11, mandatory, PHP_INTL_STDCXX)
-+ ])
-+
- PHP_INTL_CXX_FLAGS="$INTL_COMMON_FLAGS $PHP_INTL_STDCXX $ICU_CXXFLAGS"
- case $host_alias in
- *cygwin*) PHP_INTL_CXX_FLAGS="$PHP_INTL_CXX_FLAGS -D_POSIX_C_SOURCE=200809L"
-From 4e21a26db24cfeb0c8a3ba43dba2d7d5599d2ee5 Mon Sep 17 00:00:00 2001
-From: Calvin Buckley <calvin at cmpct.info>
-Date: Fri, 10 May 2024 14:20:17 -0300
-Subject: [PATCH] Fix check for newer versions of ICU (#14186)
-
-* Fix check for newer versions of ICU
-
-The previous test would always trigger, even if the version of ICU
-installed didn't require C++17. This was because it incorrectly used
-the `test` program, which broke the build on systems without a C++17
-compiler.
-
-Tested with macOS 14 and i 7.2.
-
-* Fix broken ICU version check for definition
-
-Same as the previous fix for C++17.
-
----------
-
-Co-authored-by: Peter Kokot <peterkokot at gmail.com>
----
- build/php.m4 | 5 ++---
- ext/intl/config.m4 | 2 +-
- 2 files changed, 3 insertions(+), 4 deletions(-)
-
-diff --git a/ext/intl/config.m4 b/ext/intl/config.m4
-index 48f5147ca7bbf..78396dc416926 100644
---- a/ext/intl/config.m4
-+++ b/ext/intl/config.m4
-@@ -82,7 +82,7 @@ if test "$PHP_INTL" != "no"; then
- PHP_REQUIRE_CXX()
-
- AC_MSG_CHECKING([if intl requires -std=gnu++17])
-- AS_IF([test "$PKG_CONFIG icu-uc --atleast-version=74"],[
-+ AS_IF([$PKG_CONFIG icu-uc --atleast-version=74],[
- AC_MSG_RESULT([yes])
- PHP_CXX_COMPILE_STDCXX(17, mandatory, PHP_INTL_STDCXX)
- ],[
================================================================
---- gitweb:
http://git.pld-linux.org/gitweb.cgi/packages/php.git/commitdiff/622c082e36f7d0654b0b5afd3bd2f1b391c4e748
More information about the pld-cvs-commit
mailing list