From 33dd8d6f53cec6e0818b4a394d8e64e80941d7b3 Mon Sep 17 00:00:00 2001 From: ajs124 Date: Sat, 6 Feb 2021 18:30:20 +0100 Subject: [PATCH 1/2] php73: 7.3.26 -> 7.3.27 https://www.php.net/ChangeLog-7.php#7.3.27 Fixes CVE-2021-21702 (cherry picked from commit 08871edb4dfb6f560b72d1ca0f3df47d166dff14) --- pkgs/development/interpreters/php/7.3.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/interpreters/php/7.3.nix b/pkgs/development/interpreters/php/7.3.nix index 13b64e8cb6e2..d611cb7693c6 100644 --- a/pkgs/development/interpreters/php/7.3.nix +++ b/pkgs/development/interpreters/php/7.3.nix @@ -4,8 +4,8 @@ let generic = (import ./generic.nix) _args; base = callPackage generic (_args // { - version = "7.3.26"; - sha256 = "0klxnf6nhsib9b2mdls1x2wbpi04gmgwxajbn593rzalh5y5l7ip"; + version = "7.3.27"; + sha256 = "00z0vadxazm2flks9g8qmchj2pwkli880kg313jgbb1mx3shc84x"; # https://bugs.php.net/bug.php?id=76826 extraPatches = lib.optional stdenv.isDarwin ./php73-darwin-isfinite.patch; From 30b7acccdd3fc036e63285071d8feca80fba62b6 Mon Sep 17 00:00:00 2001 From: ajs124 Date: Sat, 6 Feb 2021 18:30:45 +0100 Subject: [PATCH 2/2] php74: 7.4.14 -> 7.4.15 https://www.php.net/ChangeLog-7.php#7.4.15 Fixes CVE-2021-21702 and a some regular bugs (cherry picked from commit 0761e651c469ff00394945add40827a9c64bbb79) --- pkgs/development/interpreters/php/7.4.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/interpreters/php/7.4.nix b/pkgs/development/interpreters/php/7.4.nix index 9ee0c9c9e7cc..42aa28b65e63 100644 --- a/pkgs/development/interpreters/php/7.4.nix +++ b/pkgs/development/interpreters/php/7.4.nix @@ -4,8 +4,8 @@ let generic = (import ./generic.nix) _args; base = callPackage generic (_args // { - version = "7.4.14"; - sha256 = "1xm1s2w9fsd8q7kjbpqw8s4bs7ggziwws23m0ykkmvmd0l3cm2b8"; + version = "7.4.15"; + sha256 = "0mvp7b16sy9j36v9v1mhixwz16hi8mhax7rwpqy3sv24jc1bxmqv"; }); in base.withExtensions ({ all, ... }: with all; ([