[packages/php-pecl-grpc] Up to 1.84.0

arekm arekm at pld-linux.org
Wed Oct 14 21:44:31 CEST 2026


commit 27bac1e2ee1c078a03ed620f22cd58623ade2ae8
Author: Arkadiusz Miśkiewicz <arekm at maven.pl>
Date:   Wed Oct 14 21:38:56 2026 +0200

    Up to 1.84.0
    
    Fixes CVE-2023-32731, CVE-2023-32732, CVE-2023-33953, CVE-2023-4785,
    CVE-2024-7246 and GHSA-hf3w-6hpw-qp67.

 flags.patch        | 14 ++++++++++++++
 php-pecl-grpc.spec | 19 ++++++++++---------
 x32.patch          | 15 ++-------------
 3 files changed, 26 insertions(+), 22 deletions(-)
---
diff --git a/php-pecl-grpc.spec b/php-pecl-grpc.spec
index fb34e7b..84a310a 100644
--- a/php-pecl-grpc.spec
+++ b/php-pecl-grpc.spec
@@ -1,6 +1,6 @@
 # TODO
 # - use system openssl instead of boringssl
-# - use system nanopb package
+# - use system abseil-cpp, re2, zlib, upb, utf8_range, xxhash
 #
 # Conditional build:
 %bcond_without	tests		# build without tests
@@ -9,16 +9,16 @@
 %define		modname	grpc
 Summary:	A high performance, general RPC framework that puts mobile and HTTP/2 first
 Name:		%{php_name}-pecl-%{modname}
-Version:        1.54.0
-Release:	2
-License:	BSD
+Version:	1.84.0
+Release:	1
+License:	Apache v2.0
 Group:		Development/Languages/PHP
-Source0:	http://pecl.php.net/get/%{modname}-%{version}.tgz
-# Source0-md5:	8c1912166e74799f2905fc1897e418b5
+Source0:	https://pecl.php.net/get/%{modname}-%{version}.tgz
+# Source0-md5:	2217b47971b81e6a7afc9dd191e48967
 Patch0:		x32.patch
-URL:		http://pecl.php.net/package/grpc/
-%{?with_tests:BuildRequires:    %{php_name}-cli}
-BuildRequires:	%{php_name}-devel >= 4:5.5
+Patch1:		flags.patch
+URL:		https://pecl.php.net/package/grpc
+BuildRequires:	%{php_name}-devel >= 4:7.0
 BuildRequires:	rpmbuild(macros) >= 1.666
 %if %{with tests}
 BuildRequires:	%{php_name}-cli
@@ -40,6 +40,7 @@ clients and servers using any combination of the supported languages.
 %setup -qc
 %{__mv} %{modname}-%{version}/* .
 %patch -P0 -p1
+%patch -P1 -p1
 
 %build
 phpize
diff --git a/flags.patch b/flags.patch
new file mode 100644
index 0000000..c69ca3a
--- /dev/null
+++ b/flags.patch
@@ -0,0 +1,14 @@
+config.m4 overwrites CFLAGS/CXXFLAGS, dropping the distribution compiler flags
+--- grpc-1.84.0.orig/config.m4	2026-09-11 01:07:20.000000000 +0200
++++ grpc-1.84.0/config.m4	2026-10-14 21:18:10.463109415 +0200
+@@ -20,8 +20,8 @@
+   LIBS="-lpthread $LIBS"
+ 
+   dnl -Wno-error=attributes needed by UPB https://github.com/grpc/grpc/issues/42192
+-  CFLAGS="-std=c11 -g -O2 -Wno-error=attributes"
+-  CXXFLAGS="-std=c++17 -fno-exceptions -fno-rtti -g -O2 -Wno-error=attributes"
++  CFLAGS="$CFLAGS -std=c11 -Wno-error=attributes"
++  CXXFLAGS="$CXXFLAGS -std=c++17 -fno-exceptions -fno-rtti -Wno-error=attributes"
+   GRPC_SHARED_LIBADD="-lpthread $GRPC_SHARED_LIBADD"
+   PHP_REQUIRE_CXX()
+   PHP_ADD_LIBRARY(pthread)
diff --git a/x32.patch b/x32.patch
index ea8b391..529b281 100644
--- a/x32.patch
+++ b/x32.patch
@@ -1,5 +1,5 @@
---- php82-pecl-grpc-1.54.0/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/getrandom_fillin.h~	2023-04-17 20:46:47.000000000 +0200
-+++ php82-pecl-grpc-1.54.0/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/getrandom_fillin.h	2023-06-11 14:11:10.444771738 +0200
+--- grpc-1.84.0.orig/third_party/boringssl-with-bazel/crypto/rand/getrandom_fillin.h	2026-09-11 01:07:20.000000000 +0200
++++ grpc-1.84.0/third_party/boringssl-with-bazel/crypto/rand/getrandom_fillin.h	2026-10-14 21:18:10.461605578 +0200
 @@ -23,7 +23,11 @@
  #include <sys/syscall.h>
  
@@ -12,14 +12,3 @@
  #elif defined(OPENSSL_X86)
  #define EXPECTED_NR_getrandom 355
  #elif defined(OPENSSL_AARCH64)
---- php82-pecl-grpc-1.54.0/src/core/lib/gpr/wrap_memcpy.cc~	2023-04-17 20:46:47.000000000 +0200
-+++ php82-pecl-grpc-1.54.0/src/core/lib/gpr/wrap_memcpy.cc	2023-06-11 14:19:36.499513469 +0200
-@@ -28,7 +28,7 @@
- 
- extern "C" {
- #ifdef __linux__
--#if defined(__x86_64__) && !defined(GPR_MUSL_LIBC_COMPAT) && \
-+#if defined(__x86_64__) && !defined(__ILP32__) && !defined(GPR_MUSL_LIBC_COMPAT) && \
-     !defined(__ANDROID__)
- __asm__(".symver memcpy,memcpy at GLIBC_2.2.5");
- void* __wrap_memcpy(void* destination, const void* source, size_t num) {
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/php-pecl-grpc.git/commitdiff/27bac1e2ee1c078a03ed620f22cd58623ade2ae8



More information about the pld-cvs-commit mailing list