From 7021d298d0a7c4e435570cf42b589a243d27ca6d Mon Sep 17 00:00:00 2001 From: ajs124 Date: Thu, 18 Nov 2021 15:32:19 +0100 Subject: [PATCH 1/3] php74: 7.4.25 -> 7.4.26 Fixes CVE-2021-21707 (cherry picked from commit 183cc6ea800548e6b62bd1f972caee25813b3904) --- pkgs/development/interpreters/php/7.4.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/interpreters/php/7.4.nix b/pkgs/development/interpreters/php/7.4.nix index 93ce56e875cd..1cc63d7b58a4 100644 --- a/pkgs/development/interpreters/php/7.4.nix +++ b/pkgs/development/interpreters/php/7.4.nix @@ -2,8 +2,8 @@ let base = callPackage ./generic.nix (_args // { - version = "7.4.25"; - sha256 = "sha256-J5klcMrz4uUyOrezeFPETBUpsdMeqU2Xdu+pHVp4ExM="; + version = "7.4.26"; + sha256 = "0k803j5wf4jv72px0zqz2z2hxyk2w3jr6xyczy568dx4z2l8i2yn"; }); in From 8d41fc092e366b7af15e70eda4812ed862bec2b7 Mon Sep 17 00:00:00 2001 From: ajs124 Date: Fri, 19 Nov 2021 12:42:37 +0100 Subject: [PATCH 2/3] php80: 8.0.12 -> 8.0.13 Fixes CVE-2021-21707 (cherry picked from commit 6dfffc7d4918560eb3015a6e90e8e1b7959f16bf) --- pkgs/development/interpreters/php/8.0.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/interpreters/php/8.0.nix b/pkgs/development/interpreters/php/8.0.nix index 5c393d8ed961..8cf7d4ebc8df 100644 --- a/pkgs/development/interpreters/php/8.0.nix +++ b/pkgs/development/interpreters/php/8.0.nix @@ -2,8 +2,8 @@ let base = callPackage ./generic.nix (_args // { - version = "8.0.12"; - sha256 = "sha256-tIhtsd8yLcj7Eo2LNK5+lPb8aC7LKf9PWlkdTen+rb8="; + version = "8.0.13"; + sha256 = "0djqh650clz4fy1zifazf0jq383znksydx23f1s48prrlixrshf2"; }); in From 36be1049b3feb00e3b222c79d23ff0678b5b5d75 Mon Sep 17 00:00:00 2001 From: ajs124 Date: Thu, 25 Nov 2021 18:18:21 +0100 Subject: [PATCH 3/3] php80Extensions.xmlreader: fix build (cherry picked from commit cede244af9bbda364b2f27892984d78923d5a6ed) --- pkgs/top-level/php-packages.nix | 1 + 1 file changed, 1 insertion(+) diff --git a/pkgs/top-level/php-packages.nix b/pkgs/top-level/php-packages.nix index afcee93c3b21..10ec911e33c9 100644 --- a/pkgs/top-level/php-packages.nix +++ b/pkgs/top-level/php-packages.nix @@ -563,6 +563,7 @@ lib.makeScope pkgs.newScope (self: with self; { buildInputs = [ libxml2 ]; internalDeps = [ php.extensions.dom ]; NIX_CFLAGS_COMPILE = [ "-I../.." "-DHAVE_DOM" ]; + doCheck = false; configureFlags = [ "--enable-xmlreader" ] # Required to build on darwin. ++ lib.optionals (lib.versionOlder php.version "7.4") [ "--with-libxml-dir=${libxml2.dev}" ];