Package: php7.0 / 7.0.33-0+deb9u8
Metadata
| Package | Version | Patches format | 
|---|---|---|
| php7.0 | 7.0.33-0+deb9u8 | 3.0 (quilt) | 
Patch series
view the series file| Patch | File delta | Description | 
|---|---|---|
| 0001 libtool_fixes.patch | (download) | 
              TSRM/configure.in |
                    3 	0 +	3 -	0 ! | libtool_fixes | 
| 0002 static_openssl.patch | (download) | 
              acinclude.m4 |
                    4 	1 +	3 -	0 ! | static_openssl | 
| 0003 debian_quirks.patch | (download) | 
              configure.in |
                    6 	5 +	1 -	0 ! | debian_quirks | 
| 0004 libtool2.2.patch | (download) | 
              scripts/phpize.in |
                    7 	5 +	2 -	0 ! | libtool2.2 | 
| 0005 we_WANT_libtool.patch | (download) | 
              build/build2.mk |
                    3 	2 +	1 -	0 ! | we_want_libtool | 
| 0006 php 5.4.9 phpinfo.patch | (download) | 
              ext/standard/info.c |
                    3 	0 +	3 -	0 ! | php-5.4.9-phpinfo Drop "Configure Command" from phpinfo as it doesn't provide any useful information. The available extensions are not related to this command. | 
| 0007 extension_api.patch | (download) | 
              configure.in |
                    5 	4 +	1 -	0 ! | extension_api | 
| 0008 no_apache_installed.patch | (download) | 
              sapi/apache2handler/config.m4 |
                    8 	0 +	8 -	0 ! | no_apache_installed | 
| 0009 recode_is_shared.patch | (download) | 
              ext/recode/config9.m4 |
                    2 	1 +	1 -	0 ! | recode_is_shared | 
| 0010 proc_open.patch | (download) | 
              ext/standard/proc_open.c |
                    2 	1 +	1 -	0 ! | proc_open | 
| 0011 php.ini_securitynotes.patch | (download) | 
              php.ini-development |
                    6 	6 +	0 -	0 ! | php.ini_securitynotes | 
| 0012 php 5.4.7 libdb.patch | (download) | 
              ext/dba/config.m4 |
                   52 	2 +	50 -	0 ! | php-5.4.7-libdb | 
| 0013 Add support for use of the system timezone database.patch | (download) | 
              ext/date/lib/parse_tz.c |
                  560 	549 +	11 -	0 ! |  add support for use of the system timezone database
Add support for use of the system timezone database, rather
than embedding a copy.  Discussed upstream but was not desired.
History:
r14: improve check for valid tz file
r13: adapt for upstream changes to use PHP allocator
r12: adapt for upstream changes for new zic
r11: use canonical names to avoid more case sensitivity issues
     round lat/long from zone.tab towards zero per builtin db
r10: make timezone case insensitive
r9: fix another compile error without --with-system-tzdata configured (Michael Heimpold)
r8: fix compile error without --with-system-tzdata configured
r7: improve check for valid timezone id to exclude directories
r6: fix fd leak in r5, fix country code/BC flag use in
    timezone_identifiers_list() using system db,
    fix use of PECL timezonedb to override system db,
r5: reverts addition of "System/Localtime" fake tzname.
    updated for 5.3.0, parses zone.tab to pick up mapping between
    timezone name, country code and long/lat coords
r4: added "System/Localtime" tzname which uses /etc/localtime
r3: fix a crash if /usr/share/zoneinfo doesn't exist (Raphael Geissert)
r2: add filesystem trawl to set up name alias index
r1: initial revision
 | 
| 0014 force_libmysqlclient_r.patch | (download) | 
              ext/mysqli/config.m4 |
                    2 	1 +	1 -	0 ! | force_libmysqlclient_r | 
| 0015 strcmp_null OnUpdateErrorLog.patch | (download) | 
              tests/func/null-new_val.phpt |
                   10 	10 +	0 -	0 ! | strcmp_null-onupdateerrorlog | 
| 0016 dont gitclean in build.patch | (download) | 
              build/build.mk |
                    1 	0 +	1 -	0 ! | dont-gitclean-in-build | 
| 0017 qdbm is usr_include_qdbm.patch | (download) | 
              ext/dba/config.m4 |
                    4 	4 +	0 -	0 ! | qdbm-is-usr_include_qdbm | 
| 0018 session_save_path.patch | (download) | 
              ext/session/session.c |
                    2 	1 +	1 -	0 ! | session_save_path | 
| 0019 php fpm man section and cleanup.patch | (download) | 
              sapi/fpm/php-fpm.8.in |
                   22 	2 +	20 -	0 ! | php-fpm-man-section-and-cleanup | 
| 0020 fpm config.patch | (download) | 
              sapi/fpm/php-fpm.conf.in |
                    6 	3 +	3 -	0 ! | fpm-config | 
| 0021 php fpm sysconfdir.patch | (download) | 
              sapi/fpm/fpm/fpm_conf.c |
                    2 	1 +	1 -	0 ! | php-fpm-sysconfdir | 
| 0022 lp564920 fix big files.patch | (download) | 
              main/streams/plain_wrapper.c |
                    8 	7 +	1 -	0 ! | lp564920-fix-big-files | 
| 0023 temporary path fixes for multiarch.patch | (download) | 
              acinclude.m4 |
                    4 	2 +	2 -	0 ! | temporary-path-fixes-for-multiarch | 
| 0024 hurd noptrace.patch | (download) | 
              sapi/fpm/config.m4 |
                    5 	5 +	0 -	0 ! | hurd-noptrace | 
| 0025 php 5.3.9 mysqlnd.patch | (download) | 
              ext/mysqlnd/mysqlnd.c |
                    2 	1 +	1 -	0 ! | php-5.3.9-mysqlnd | 
| 0026 php 5.3.9 gnusrc.patch | (download) | 
              Zend/zend_language_parser.c |
                    2 	2 +	0 -	0 ! | php-5.3.9-gnusrc | 
| 0027 php 5.3.3 macropen.patch | (download) | 
              ext/dba/dba.c |
                    2 	1 +	1 -	0 ! | php-5.3.3-macropen | 
| 0028 php 5.2.4 norpath.patch | (download) | 
              acinclude.m4 |
                    2 	2 +	0 -	0 ! | php-5.2.4-norpath | 
| 0029 php 5.2.4 embed.patch | (download) | 
              sapi/embed/config.m4 |
                    2 	1 +	1 -	0 ! | php-5.2.4-embed | 
| 0030 php fpm m68k.patch | (download) | 
              sapi/fpm/fpm/fpm_atomic.h |
                   34 	34 +	0 -	0 ! | php-fpm-m68k | 
| 0031 expose_all_built_and_installed_apis.patch | (download) | 
              scripts/man1/php-config.1.in |
                    2 	1 +	1 -	0 ! | expose_all_built_and_installed_apis | 
| 0032 Use system timezone.patch | (download) | 
              ext/date/php_date.c |
                   17 	17 +	0 -	0 ! | use system timezone Upstream don't want this patch. See http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=730771 for a summary. This delta is recovered from previous versions of the system timezone patch in Debian, and appears to have inadvertently been dropped. Author unknown. To be used in tandem with use_embedded_timezonedb.patch and use_embedded_timezonedb_fixes.patch. | 
| 0033 zlib largefile function renaming.patch | (download) | 
              ext/zlib/zlib.c |
                   12 	12 +	0 -	0 ! | zlib-largefile-function-renaming | 
| 0034 php fpm do reload on SIGHUP.patch | (download) | 
              sapi/fpm/fpm/fpm_events.c |
                    5 	5 +	0 -	0 ! | php-fpm-do-reload-on-sighup | 
| 0035 php 5.4.8 ldap_r.patch | (download) | 
              ext/ldap/config.m4 |
                    5 	4 +	1 -	0 ! | php-5.4.8-ldap_r Use -lldap_r by default. | 
| 0036 php 5.4.9 fixheader.patch | (download) | 
              configure.in |
                    4 	2 +	2 -	0 ! | php-5.4.9-fixheader Make generated php_config.h constant across rebuilds. | 
| 0037 php 5.6.0 noNO.patch | (download) | 
              ext/standard/tests/strings/setlocale_variation2.phpt |
                   11 	8 +	3 -	0 ! | php-5.6.0-nono | 
| 0038 php 5.6.0 oldpcre.patch | (download) | 
              ext/pcre/tests/bug37911.phpt |
                    2 	1 +	1 -	0 ! | php-5.6.0-oldpcre | 
| 0039 hack phpdbg to explicitly link with libedit.patch | (download) | 
              sapi/phpdbg/config.m4 |
                    4 	3 +	1 -	0 ! | hack-phpdbg-to-explicitly-link-with-libedit | 
| 0040 Fix ZEND_MM_ALIGNMENT on m64k.patch | (download) | 
              Zend/Zend.m4 |
                    4 	2 +	2 -	0 ! | fix zend_mm_alignment on m64k | 
| 0041 Add patch to install php7 module directly to APXS_LI.patch | (download) | 
              sapi/apache2handler/config.m4 |
                   15 	3 +	12 -	0 ! | add patch to install php7 module directly to apxs_libexecdir | 
| 0042 Remove W3C validation icon to not expose the reader .patch | (download) | 
              sapi/fpm/status.html.in |
                    5 	0 +	5 -	0 ! | remove w3c validation icon to not expose the reader's ip address to potential tracking. | 
| 0043 Don t put INSTALL_ROOT into phar.phar exec stanza.patch | (download) | 
              ext/phar/Makefile.frag |
                    2 	1 +	1 -	0 ! | don't put $(install_root) into phar.phar exec stanza | 
| 0044 XMLRPC EPI library has to be linked as lxmlrpc epi.patch | (download) | 
              ext/xmlrpc/config.m4 |
                    2 	1 +	1 -	0 ! | xmlrpc-epi library has to be linked as -lxmlrpc-epi | 
| 0045 Really expand libdir datadir into EXPANDED_LIBDIR DA.patch | (download) | 
              configure.in |
                    4 	2 +	2 -	0 ! | really expand $libdir/$datadir into @expanded_libdir/datadir@ | 
| 0046 Fix ext date lib parse_tz PATH_MAX HURD FTBFS.patch | (download) | 
              ext/date/lib/parse_tz.c |
                   55 	41 +	14 -	0 ! | fix ext/date/lib/parse_tz path_max hurd ftbfs | 
| 0047 Adjust tidy extension for tidy html5.patch | (download) | 
              ext/tidy/tidy.c |
                    2 	1 +	1 -	0 ! | adjust tidy extension for tidy-html5 | 
| 0048 Use pkg config for FreeType2 detection.patch | (download) | 
              ext/gd/config.m4 |
                   30 	19 +	11 -	0 ! | use pkg-config for freetype2 detection | 
| 0049 Use SOURCE_DATE_EPOCH as PHP_BUILD_DATE if available.patch | (download) | 
              configure.in |
                    2 	1 +	1 -	0 ! | use source_date_epoch as php_build_date if available | 
| 0050 CVE 2019 9020.patch | (download) | 
              ext/xmlrpc/libxmlrpc/xml_element.c |
                    3 	3 +	0 -	0 ! | [patch] fix bug #77242 (heap out of bounds read in xmlrpc_decode()) | 
| 0051 CVE 2019 9021.patch | (download) | 
              ext/phar/phar.c |
                    2 	1 +	1 -	0 ! | [patch] fix bug #77247 (heap buffer overflow in phar_detect_phar_fname_ext) | 
| 0052 CVE 2019 9022 caa.patch | (download) | 
              ext/standard/dns.c |
                    5 	4 +	1 -	0 ! | [patch] fix bug #75916 dns_caa record results contain garbage It is assumed that DNS_CAA record values are zero terminated, while its length is defined as (RDATA_LENGTH - tag_length - 2). | 
| 0053 CVE 2019 9022.patch | (download) | 
              ext/standard/dns.c |
                    7 	7 +	0 -	0 ! | [patch] fix #77369 - memcpy with negative length via crafted dns response | 
| 0054 CVE 2019 9023 1.patch | (download) | 
              ext/mbstring/oniguruma/regparse.c |
                    9 	9 +	0 -	0 ! | [patch] fix bug #77370 - check that we do not read past buffer end when parsing multibytes | 
| 0055 CVE 2019 9023 2.patch | (download) | 
              ext/mbstring/oniguruma/regcomp.c |
                    1 	1 +	0 -	0 ! | [patch] fix bug #77371 (heap buffer overflow in mb regex functions - compile_string_node) | 
| 0056 CVE 2019 9023 3.patch | (download) | 
              ext/mbstring/oniguruma/enc/unicode.c |
                    1 	1 +	0 -	0 ! | [patch] fix more issues with encodilng length Should fix bug #77381, bug #77382, bug #77385, bug #77394. | 
| 0057 CVE 2019 9023 4.patch | (download) | 
              ext/mbstring/oniguruma/enc/utf16_be.c |
                    4 	3 +	1 -	0 ! | [patch] fix bug #77418 - heap overflow in utf32be_mbc_to_code | 
| 0058 CVE 2019 9024.patch | (download) | 
              ext/xmlrpc/libxmlrpc/base64.c |
                    4 	2 +	2 -	0 ! | [patch] fix bug #77380 (global out of bounds read in xmlrpc base64 code) | 
| 0059 Fix bug 77396 Null Pointer Dereference in phar_creat.patch | (download) | 
              ext/phar/phar.c |
                    3 	3 +	0 -	0 ! | fix bug #77396 - null pointer dereference in phar_create_or_parse_filename (cherry picked from commit 7f0ab7c20c83a52862ad7c8acf31c3fa739f1274) | 
| 0060 Fix 77431 SplFileInfo __construct accepts NUL bytes.patch | (download) | 
              ext/spl/spl_directory.c |
                    2 	1 +	1 -	0 ! | fix #77431 splfileinfo::__construct() accepts nul bytes `SplFileInfo::__construct()` has to expect a path instead of a string, analogous to `SplFileObject::__construct()`. (cherry picked from commit 254a5914ad7f9dbdc4f6090229f6b0f4317a695e) | 
