PHP, which stands for "PHP: Hypertext Preprocessor" is a widely-used Open
Source general-purpose scripting language that is especially suited for
Web development and can be embedded into HTML. Its syntax draws upon C,
Java, and Perl, and is easy to learn. The main goal of the language is to
allow web developers to write dynamically generated webpages quickly, but
you can do much more with PHP.
WWW: https://www.php.net/
===> The following configuration options are available for php72-7.2.34:
CLI=on: Build CLI version
CGI=on: Build CGI version
FPM=on: Build FPM version
EMBED=on: Build embedded library
PHPDBG=off: Interactive PHP debugger
DEBUG=off: Build with debugging support
DTRACE=on: Build with DTrace probes
IPV6=on: IPv6 protocol support
MYSQLND=on: Build with MySQL Native Driver
LINKTHR=on: Link thread lib (for threaded extensions)
ZTS=off: Force Zend Thread Safety (ZTS) build
===> Use 'make config' to modify these settings
Remove PHP 7.2 which expired today, use PHP 7.4 instead.
2020-12-31 ./net/php72-soap: Security Support ends on 30 Nov 2020
2020-12-31 ./net/php72-sockets: Security Support ends on 30 Nov 2020
2020-12-31 ./net/php72-xmlrpc: Security Support ends on 30 Nov 2020
2020-12-31 ./net/php72-ldap: Security Support ends on 30 Nov 2020
2020-12-31 ./textproc/php72-xmlwriter: Security Support ends on 30 Nov 2020
2020-12-31 ./textproc/php72-pspell: Security Support ends on 30 Nov 2020
2020-12-31 ./textproc/php72-enchant: Security Support ends on 30 Nov 2020
2020-12-31 ./textproc/php72-wddx: Security Support ends on 30 Nov 2020
2020-12-31 ./textproc/php72-xsl: Security Support ends on 30 Nov 2020
2020-12-31 ./textproc/php72-dom: Security Support ends on 30 Nov 2020
2020-12-31 ./textproc/php72-ctype: Security Support ends on 30 Nov 2020
2020-12-31 ./textproc/php72-xml: Security Support ends on 30 Nov 2020
2020-12-31 ./textproc/php72-simplexml: Security Support ends on 30 Nov 2020
(Only the first 15 lines of the commit message are shown above )
lang/php72: Update from 7.2.33 to 7.2.34
Core:
Fixed bug #79699 (PHP parses encoded cookie names so malicious `__Host-`
cookies can be sent). (CVE-2020-7070)
OpenSSL:
Fixed bug #79601 (Wrong ciphertext/tag in AES-CCM encryption for a 12
bytes IV). (CVE-2020-7069)
Sponsored by: Bounce Experts
lang/php72: Update from 7.2.22 to 7.2.23
The last log entry is the same, because i accidently performed an update from
7.2.21 to 7.2.22. I ignored the update to 7.2.22 because for FreeBSD its a
no-op.
But when 7.2.23 was released i only increased the version by one.
This time its the real update! :)
Changelog:
Core:
Fixed bug #79877 (getimagesize function silently truncates after a null
byte) (cmb)
Phar:
Fixed bug #79797 (Use of freed hash key in the phar_parse_zipfile
function). (CVE-2020-7068)
Reported by: Jose Garcia Juanino <jjuanino@gmail.com>
Sponsored by: Bounce Experts
lang/php72: Update from 7.2.22 to 7.2.23
Changelog:
Core:
Fixed bug #79877 (getimagesize function silently truncates after a null
byte) (cmb)
Phar:
Fixed bug #79797 (Use of freed hash key in the phar_parse_zipfile
function). (CVE-2020-7068)
Sponsored by: Bounce Experts
mail/php7[2-4]-imap: change client from cclient to panda-cclient
There are some reports about PHP crashes, when using php-imap
(especially with OpenSSL and TSL 1.3). All this problems went away,
when using the panda-cclient instead of the old cclient.
Therefore we make the panda-cclient the new default,
but still allow cclient in order to allow backwards compatibility.
Special thanks to bofh for figuring out the complex details and
the solution!
Special thanks to Jason for being patience and
helpful about so many months!
Reported by: Jason de Cordoba <jason@aventia.pw>
Reviewed by: bofh
Sponsored by: Bounce Experts
lang/php72: Upgrade from 7.2.30 to 7.2.31
Core:
Fixed bug #78875 (Long filenames cause OOM and temp files are not cleaned).
(CVE-2019-11048)
Fixed bug #78876 (Long variables in multipart/form-data cause OOM and temp
files are not cleaned). (CVE-2019-11048)
Sponsored by: Bounce Experts
lang/php72: Upgrade from 7.2.29 to 7.2.30
Changelog:
Fixed bug #79468 (SIGSEGV when closing stream handle with a stream filter
appended).
Fixed bug #79330 (shell_exec() silently truncates after a null byte).
Fixed bug #79465 (OOB Read in urldecode()).
Changelog taken from: https://www.php.net/ChangeLog-7.php#7.2.30
Unbreak databases/php72-mysqli when lang/php72 is build with MYSQLND=off
Currently when building lang/php72 with MYSQLND=off, its im possible to
build databases/php72-mysqli. When the option MYSQLND was added, we expected
users to not use mysqli at all after disabling this option.
This has proven to be wrong, so we patch the build to be work again.
patch-ext_mysqli_mysqli__api.c was submitted by Sergei <joker@pinnet.ru>.
Add USES=xorg USES=gl, ports categories l
Add USES=xorg and USES=gl to ports in categories starting with 'l'
While here, try to sprinkle other USES (mostly gnome and sdl) as needed.
lang/php72: Update from 7.2.23 to 7.2.24
Changelog:
Core:
Fixed bug #78535 (auto_detect_line_endings value not parsed as bool).
Fixed bug #78620 (Out of memory error).
Exif:
Fixed bug #78442 ('Illegal component' on exif_read_data since PHP7)
(Kalle)
FPM:
Fixed bug #78599 (env_path_info underflow in fpm_main.c can lead to
RCE). (CVE-2019-11043)
MBString:
Fixed bug #78579 (mb_decode_numericentity: args number inconsistency).
Fixed bug #78609 (mb_check_encoding() no longer supports stringable
objects).
MySQLi:
(Only the first 15 lines of the commit message are shown above )
lang/php72: Upgrade from 7.2.17 to 7.2.18
Changelog:
CLI:
Fixed bug #77794 (Incorrect Date header format in built-in server).
EXIF:
Fixed bug #77950 (Heap-buffer-overflow in _estrndup via
exif_process_IFD_TAG).
Interbase:
Fixed bug #72175 (Impossibility of creating multiple connections to
Interbase with php 7.x).
Intl:
Fixed bug #77895 (IntlDateFormatter::create fails in strict mode if
$locale = null).
litespeed:
LiteSpeed SAPI 7.3.1, better process management, new API function
litespeed_finish_request().
Mail:
(Only the first 15 lines of the commit message are shown above )
PHP: Add Synth to pkg-message advice
pkg-message currently states the advice to add WITH_MPM=event
if its build by poudriere and with ZTS option enabled.
This is also true if Synth is used, therefore adding it.
Reported by: Dennis <denradford@gmail.com>
lang/php72: Upgrade from 7.2.15 to 7.2.16
Changelog:
Core:
Fixed bug #77589 (Core dump using parse_ini_string with numeric
sections).
Fixed bug #77630 (rename() across the device may allow unwanted access
during processing).
COM:
Fixed bug #77621 (Already defined constants are not properly reported).
EXIF:
Fixed bug #77509 (Uninitialized read in exif_process_IFD_in_TIFF).
Fixed bug #77540 (Invalid Read on exif_process_SOFn).
Fixed bug #77563 (Uninitialized read in exif_process_IFD_in_MAKERNOTE).
Fixed bug #77659 (Uninitialized read in exif_process_IFD_in_MAKERNOTE).
PDO_OCI:
(Only the first 15 lines of the commit message are shown above )
lang/php72: Upgrade from 7.2.14 to 7.2.15
Changelog:
Core:
Fixed bug #77339 (__callStatic may get incorrect arguments).
Fixed bug #77494 (Disabling class causes segfault on member access).
Fixed bug #77530 (PHP crashes when parsing `(2)::class`).
Curl:
Fixed bug #76675 (Segfault with H2 server push).
GD:
Fixed bug #73281 (imagescale(..., IMG_BILINEAR_FIXED) can cause black
border).
Fixed bug #73614 (gdImageFilledArc() doesn't properly draw pies).
Fixed bug #77272 (imagescale() may return image resource on failure).
Fixed bug #77391 (1bpp BMPs may fail to be loaded).
(Only the first 15 lines of the commit message are shown above )
lang/php72 and lang/php73: improve documentation of php-fpm specific www.conf
If you only define a port to listen in www.conf, PHP defaults to listen
only to IPv6 ports on FreeBSD. On other OS it listens to IPv6 and IPv4.
Since upstream do not want to fix this [1], we add this special case to
the documentation.
Because the configuration file is a @sample it wont be updated for already
changed files. Therefore i do not bump PORTREVISION.
PR: 235141
Submitted by: Artyom Davidov <ard_1@mail.ru>
[1] https://bugs.php.net/bug.php?id=74166
lang/php7*: Rename option MYSQL to MYSQLND
Renaming the option to be inline with the already existing MYSQLND option
in the mysqli and pdo_mysqli ports.
Reported by: Jarrod Sayers <jarrod@downtools.com.au>
lang/php72: Make enabling MYSQL native driver optional
Currently PHP is always compiled with --enable-mysqlnd, to allow the use
of the native MySQL Native Driver. MySQL Native Driver is a replacement for the
MySQL Client Library.
While this is handy when working with MySQL there is no need for
it when MySQL is *not* used at all. This happens frequently when
working without databases or simply with other databases.
To avoid POLA the newly introduced option is a default option.
Disabling it will reduce the size of the package by ca. 175 KB,
which also helps in modern constraint VM run environments.
Submitted by: Reko Turja <reko.turja@liukuma.net>
lang/php72: Upgrade from 7.2.13 to 7.2.14
Changelog:
Core:
Fixed bug #77369 (memcpy with negative length via crafted DNS response).
Fixed bug #71041 (zend_signal_startup() needs ZEND_API).
Fixed bug #76046 (PHP generates "FE_FREE" opcode on the wrong line).
COM:
Fixed bug #77177 (Serializing or unserializing COM objects crashes).
Date:
Fixed bug #77097 (DateTime::diff gives wrong diff when the actual diff
is less than 1 second).
Exif:
Fixed bug #77184 (Unsigned rational numbers are written out as signed
rationals).
GD:
(Only the first 15 lines of the commit message are shown above )
security/php72-hash: fix build with GCC-based architectures
Unbreak this Port on mips64 and powerpc64
PR: 231462232160
Reported by: Piotr Kubaj <pkubaj@anongoth.pl>
Approved by: tz (implicit)
Sponsored by: Netzkommune GmbH
Add PHP 7.3 RC2 to the ports-tree.
Notable changes:
- Switch from PCRE to PCRE2
- Many modules now require PCRE2 for building
- graphics/php73-gd: X11 option is no longer default
Changes to Mk/Uses/php.mk approved by ale
lang/php*: link with -znotext on i386
This port links some non-PIC code, which fails with lld as it defaults
to disallowing relocations against read-only segments. For i386 we can
just add -znotext unconditionally: for GNU BFD ld it just affirms BFD's
existing default.
PR: 214864, 230207
Approved by: bapt
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D17193
graphics/php72-gd: Switch from bundled libgd to graphics/gd
Currently the gd-module uses a bundled libgd, while most systems
already provide the same library via graphics/gd.
Therefore instead of adding the bundled library we use the
port instead.
PR: 217222
Submitted by: Mikhail Teterin <mi@FreeBSD.org>
lang/php72: Add missing lmdb support for php72-dba
PHP 7.2 adds lmdb support to its dba module. Add support via OPTION.
PR: 227732
Submitted by: Waitman Gobble <uzimac@da3m0n8t3r.com>
Turn off DTRACE option by default for mips. It fails the exact same way
that armvX do.
While here, remove duplicate OPTIONS_EXCLUDE_aarch64 line, and sort.
Approved by: portmgr (tier-2 blanket)
Introduce PHP flavors.
Ports using USES=php:phpize, php:ext, php:zend, and php:pecl are now
flavored. They will automatically get flavors (php56, php70, php71, php72)
depending of the versions they support (set with IGNORE_WITH_PHP). As a
consequence, ports using USES=pear and USES=horde are also flavored.
PR: 226242
Submitted by: mat
Exp-run by: antoine
Approved by: portmgr
Sponsored by: Absolight
Differential Revision: https://reviews.freebsd.org/D14208
- Replace USE_AUTOTOOLS with USES=autoreconf:build and run an upstream
script in pre-configure to regenerate configure scripts. Because this
regenerates php_config.h.in, merge a patch for that file into the patch
for configure.in.
- Remove redundant --localstatedir=/var (added by bsd.port.mk).
lang/php72: Add support for libargon2
PHP now provides support for argon-hashes. Add this support
to the port.
Reported by: Petr Hejl <petr.hejl@freedev.cz>
lang/php72: Add missing header file
Add missing file zend_smart_string.h to pkg-plist.
The allows building many more of the pecl-* ports.
PR: 223766
Submitted by: Raivo Hool <raivo.hool@gmail.com>
Reported by: Raivo Hool <raivo.hool@gmail.com>, Daniel Ylitalo
<daniel@blodan.se>
Add PHP 7.2 RC6
Notable changes:
- mcrypt module was removed
- sodium module was added
- sybase_ct artifacts removed
Also many PECL ports will not work with this version
since some files got renamed.
Reviewed by: mat, ale, Rainer Duffner <rainer@ultra-secure.de>
Differential Revision: https://reviews.freebsd.org/D12980
