Open Build Service

php8.changes Changed

@@ -1,15 +1,1116 @@
 -------------------------------------------------------------------
-Mon May 19 13:11:43 UTC 2025 - Angelo Grossini <angelo@intercom.it>
+Wed Oct 21 14:07:07 UTC 2026 - Arjen de Korte <suse+build@de-korte.org>
 
-- versioning fix
+- version update to 8.4.27
+    Core:
+        Fixed GHSA-w8hw-w9fx-j79w, GHSA-6wmf-4rv5-p3rp (Avoid state corruption via bailout). (CVE-2026-109618, CVE-2026-109619) bsc#1286027
+        Fix GH-21999: GC inconsistency with lazy object, var_dump(), and object comparison.
+        Fixed OSS-Fuzz #536440507 (Immutable class incorrect assertion).
+        Fixed AVX being reported as supported when the OS has not enabled AVX state.
+        Fixed GH-23980 (ZEND_ASSERT violation @ ZEND_INCLUDE_OR_EVAL).
+        Fixed bug GH-23896 (Assertion failure in zend_call_function() after a throwing deprecation).
+        Fixed use-after-free when a dl()-loaded extension declares a frameless function and a later request calls it.
+        Fixed System V shared memory emulation for Windows attaching segments past the end of their mapping.
+        Fixed bug GH-24050 (GC frees an object still held by a resurrected closure when (object) and use share an array).
+        Fixed exception thrown by destructor during GC in a Fiber not being rethrown into the frame that triggered the GC.
+    BCMath:
+        Fixed BcMath\Number results that truncate to zero keeping a negative sign and comparing less than zero.
+    BZ2:
+        Fixed double close of the descriptor and use-after-free of the inner stream when bzopen() is given a stream resource.
+    CLI:
+        Fix GH-22567 (Windows ZTS CLI SAPI should refresh its TSRMLS cache during request activation).
+        Fixed bug GH-23764 (Built-in server leaks a file descriptor on every HEAD request for a static file).
+        Fixed crash in the built-in server when a client is reset before being accepted.
+        Fixed the built-in server truncating an error page and leaking its unsent part after a partial socket write.
+    DOM:
+        Fixed use-after-free when re-constructing a DOMXPath whose php:function registrations are freed while still reachable from the cycle collector.
+        Fixed bug GH-23365 (DOMNode::insertBefore($n, $n) drops the node and leaves a self-referencing sibling list).
+        Fixed Dom\HTMLDocument::getElementById() not finding ids of SVG and MathML elements.
+        Fixed Dom\HTMLDocument giving attributes the namespace of their element when a fragment is parsed with an xlink, xml or xmlns context element.
+        Fixed bug GH-23729 (DOMXPath::__construct() use-after-free during an evaluation).
+        Fixed bug GH-23897 (php:function() assertion failure after a failed registerPHPFunctions()).
+        Fixed DOMXPath and Dom\XPath losing the context node and in-scope namespaces of an evaluation after a php:function() callback evaluated another expression on the same object.
+    FFI:
+        Fixed crashes with FFI callbacks created from __call() trampolines and array callables whose object is released.
+    FTP:
+        Fixed bug GH-23619 (cryptic error on servers that don't support TLS session resumption on data connection).
+    GD:
+        Fixed undefined behavior with GD2 images with `INT_MAX`-sized chunks.
+        Fixed undefined behavior with GIFs with problematic LZW compression data.
+    Intl:
+        Fixed IntlDateFormatter::parse(), localtime() and parseToCalendar() treating the offset as UTF-16 code units instead of bytes.
+        Fixed cloning IntlDateFormatter and MessageFormatter losing PHP-side state such as dateType, timeType, calendar and the message pattern.
+        Fixed Collator attribute and strength methods not rejecting an unconstructed Collator.
+        Fixed grapheme_strstr() and grapheme_stristr() returning incorrect substrings when supplementary characters precede the match.
+        Fixed grapheme_strstr() and grapheme_strpos() missing canonically equivalent matches, and grapheme searches reporting ICU errors for empty haystacks.
+        Fixed grapheme_strrpos() and grapheme_strripos() skipping overlapping matches when using a negative offset.
+    Lexbor:
+        Merge patches lexbor/lexbor@8a14bc0 and lexbor/lexbor@f67ce4b, fixing a heap buffer overflow in :lexbor-contains() parsing and buffer overflows in malformed decode replay.
+    MBString:
+        Fixed bug GH-23106 (mb_strpos() reads past the end of a haystack ending in a truncated UTF-8 sequence).
+        Fixed mbstring functions emitting surrogates in UTF-8 output and flagging it as valid UTF-8.
+    MySQLi:
+        Fix GH-22854: Fixed failed assertion when accessing mysqli property after failed reconnection.
+    MySQLnd:
+        Fixed field_count not resetting on OK packet.
+        Fixed memory leak when closing a prepared statement after its connection was killed.
+    Opcache:
+        Fixed OSS-Fuzz #546798343 (Heap-buffer-overflow in optimizer with FCCs and inlining).
+        Fixed bug GH-23693 (Tracing JIT produces wrong results for a guard on a loop-invariant addition).
+        Fixed OSS-Fuzz #5674034779193344 (Read of uninitialized memory in is_cacheable_stream_path()).
+        Fix zend_analyze_calls() call_stack buffer overrun.
+        Fixed bug GH-23637 (PHP-FPM worker SIGSEGV: run_time_cache map_ptr offset beyond CG(map_ptr_last) when a class is reached through the CE cache).
+        Fix multiple incorrect DCE due to unsound escape analysis.
+        Fixed bug GH-24063 (OPcache optimizer folds `$cond ? -0.0 : 0.0` into a single `-0.0` constant).
+        Fixed crash when a file cache is reused with a different set of extensions declaring frameless functions.
+        Fixed bug GH-23991 (JIT generates invalid IR for multiple recursive calls).
+        Fix SCCP evaluation of isset()/empty() on dimension of non-escaping object.
+    OpenSSL:
+        Fixed stream_socket_enable_crypto() leaving the socket non-blocking after a handshake timeout.
+        Fixed feof() on a TLS stream staying false after a close_notify on Windows.
+    PCNTL:
+        Fixed pcntl_signal_dispatch() dropping the queued signals when it runs while an exception is pending.
+        Fixed pcntl_signal_dispatch() dropping the signals queued behind a handler that throws.
+        Fixed pcntl_setcpuaffinity() error message advertising the cpu count as the inclusive upper bound.
+        Fixed pcntl_setqos_class() requiring its optional $qos_class argument.
+        Fixed bug GH-23986 (/proc/self paths resolve to the parent process after pcntl_fork()).
+    PDO:
+        Fixed PDOStatement::getColumnMeta() reading out of bounds for an invalid column index.
+        Fixed PDOStatement::bindColumn() registering a binding for a column name that is not in the result set.
+        Fixed PDOStatement::execute() leaving the previous result available after a failed execution.
+        Fixed a use-after-free when bindValue()/execute()/closeCursor() is called from a bound parameter's __toString() during execute().
+        Fixed bug GH-23962 (Destroying a persistent PDO instance rolls back a transaction still in use by another instance).
+        Fixed PDO::setAttribute() installing a PDO::ATTR_STATEMENT_CLASS class whose constructor arguments it rejects.
+        Fixed PDO::ATTR_STATEMENT_CLASS constructor_args type errors reporting "array given" regardless of the value passed.
+        Fixed PDOStatement::bindParam() and bindColumn() leaking the driver options value.
+        Fixed PDOStatement not reporting its bound parameters and columns to the cycle collector.
+        Fixed PDOStatement::setFetchMode() not applying changes atomically.
+    PDO_DBLIB:
+        Fixed bug GH-23741 (segfault after a failed query inside a PDO transaction). Errors raised by beginTransaction(), commit(), rollBack() and lastInsertId() are now reported instead of being dropped.
+    PDO_Firebird:
+        Fixed bug GH-23758 (PDO_Firebird returns null for non-null empty BLOBs).
+    Readline:
+        Fixed a heap over-read in the interactive shell prompt when cli.prompt is set to an empty string.
+    Session:
+        Fixed session_start() continuing after a failed create_sid() when session.use_strict_mode rejects the supplied ID.
+        Fixed exceptions from user-defined create_sid() handlers being replaced by return-value validation errors.
+    SimpleXML:
+        Fixed reconstructing a SimpleXMLElement freeing a child element that another variable still references.
+    SOAP:
+        Fixed bug GH-22895 (Heap use-after-free while encoding a Traversable with an illegal key).
+        Fixed memory leak when load_wsdl_ex() failed to load.
+    Sockets:
+        Fixed socket_select() silently truncating sets larger than FD_SETSIZE on Windows.
+    SPL:
+        Fixed SplFixedArray::setSize() doing nothing on subclasses whose constructor does not call parent::__construct().
+        Fixed memory leak when __construct(), __wakeup() or __unserialize() is called from an element destructor during setSize(0).
+    SQLite:
+        Fixed a crash when SQLite3::close() is called from a userland callback.
+    Standard:
+        Fixed sha1_file() returning a digest for incomplete data after a stream read failure.
+        Fixed iptcembed() corrupting JPEG headers when called recursively from an output handler.
+        Fixed proc_open() leaking descriptor zero when descriptor setup fails.
+        Fixed three Windows-only proc_open() defects: an uninitialized PROCESS_INFORMATION, an indeterminate comspec pointer after a failed lookup, and an unchecked CreateFileA() failure.
+        Fix persistent stream context lifetime during shutdown (Levi Morrison)
+        Fix wordwrap() ignoring an existing break at the end of the string (Nicolas Grekas)
+        Fixed convert.quoted-printable-decode decoding lowercase hex digits to the wrong byte.
+    Tidy:
+        Fixed a use-after-free when a tidyNode is used after its document is reparsed.
+    XSL:
+        Fixed bug GH-23730 (use-after-free when XSLTProcessor::importStylesheet() is called during a transformation).
+    Zip:
+        Fixed ZipArchive::extractTo() ignoring files given in a non-list array.
+        Fixed bug GH-23747 (ZipArchive::close() use-after-free from a progress or cancel callback).
+
+-------------------------------------------------------------------
+Thu Sep 24 18:12:10 UTC 2026 - Arjen de Korte <suse+build@de-korte.org>
+
+- version update to 8.4.26
+    Filter:
+        Fixed GHSA-ch8v-r6jh-4vvr (FILTER_SANITIZE_ENCODED does not encode 0xFF).
+    FPM:
+        Fixed GHSA-62xp-839h-2637 (IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison). (CVE-2026-91768)
+    MySQLnd:
+        Fixed GHSA-r6x9-5r99-36j7 (Various packet overreads in mysqlnd wire protocol). (CVE-2025-1218)
+    OpenSSL:
+        Fixed GHSA-vvx9-73fr-5jjx (TLS hostname verification falls back to CN after SAN mismatch). (CVE-2026-91769)
+        Fixed GHSA-xr7j-rvgx-xq5p (Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN). (CVE-2026-91767)
+    Phar:
+        Fixed GHSA-j3wh-g957-2m85 (Integer overflow in phar_tar_number() allowing TAR archive entry injection). (CVE-2026-6103)
+    SOAP:
+        Fixed GHSA-rgrp-mwpx-f6rm (Unbounded recursion in server-side cleanup_xml_node()). (CVE-2026-91765)
+        Fixed GHSA-cj93-vc83-wgqv (Integer overflow to buffer overflow in SOAP HTTP parsing). (CVE-2025-14181)
+    Standard:
+        Fixed GHSA-88hq-2827-7pg6 (Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL). (CVE-2026-92842)
+        Fixed GHSA-fpwc-w8rq-cr92 (Cross-origin credential leak in HTTP stream wrapper redirects). (CVE-2026-91766)
+        Fixed GHSA-7875-c8px-7q5f (Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header). (CVE-2026-93682)
+    Windows:
+        Fixed GHSA-9f67-6fw4-hpfp (Reserved device names are not rejected before file and stream I/O). (CVE-2026-17545)
+
+-------------------------------------------------------------------
+Fri Aug 28 06:06:29 UTC 2026 - Arjen de Korte <suse+build@de-korte.org>
+
+- version update to 8.4.25
+    Core:
+        Fixed bug GH-23088 (Stack overflow when comparing deeply nested arrays).
+    Date:
+        Fixed leak on double DatePeriod::__construct() call.
+    DOM:
+        Fixed bug GH-23116 (Stack overflow when normalizing a deeply nested DOMDocument).
+        Fixed bug GH-23117 (Stack overflow when normalizing a deeply nested Dom\XMLDocument).
+        Fixed bug GH-22825 (DOMElement::setAttribute() fails silently when the DTD declares a default value for the attribute).
+        Fixed bug GH-22447 (UAF at dom_objects_free_storage when setting an attribute node that collides by local name with a namespaced attribute).
+        Fixed bug GH-23120 (Stack overflow when comparing deeply nested DOM nodes with DOMNode::isEqualNode()).
+    LibXML:
+        Fixed bug GH-22752 (Build failure with libxml 2.15).
+    MBString:
+        Fixed bug GH-22779 (mb_strrpos() returns the wrong position for a negative offset in a non-UTF-8 encoding).
+        Fixed bug GH-21036 (mb_ereg_search_getregs() crashes after mb_eregi() invalidates the regex cache).
+    Opcache:
+        Fixed bug GH-22857 (Function JIT emits wrong code for FETCH_OBJ_FUNC_ARG on a property hook getter, losing register-held variables).
+        Fixed bug GH-22916 (Preserve parent regs in zend_jit_deoptimizer_start()).
+    OpenSSL:
+        Fix missing error check on invalid alpn protocols.
+    PCRE:
+        Fixed bug GH-21134 (Crash with \C + UTF-8). Using \C in UTF-8 patterns is now forbidden.
+    Reflection:
+        Fixed bug GH-22905 (Reflection exception messages truncate on null bytes).
+        Fixed ReflectionProperty::isLazy() and skipLazyInitialization() using the parent slot when a child class hooks an inherited property.
+        Fixed segfault in ReflectionMethod::createFromMethodName() on an uninstantiable subclass.
+    Session:
+        Fix corruption in mod_mm.
+        Fixed bug GH-23043 (broken session id code can cause zend_mm_heap corrupted).
+    SimpleXML:
+        Fixed integer element offsets that cannot resolve aliasing an existing element.
+        Fixed segfault when comparing uninitialized SimpleXMLElement instances.
+    Sockets:
+        Fixed various memory related issues in ext/sockets.
+    SQLite:
+        Fix leak when trying to close db if blob stream is still open.
+    Standard:
+        Fixed bug GH-23111 (Stack overflow in array_walk_recursive() with deeply nested arrays).
+        Fixed bug GH-23113 (Stack overflow in array_replace_recursive() with deeply nested arrays).
+        Fixed bug GH-23115 (Stack overflow in compact() with deeply nested arrays).
+        Fixed stack overflow in count() with COUNT_RECURSIVE and deeply nested arrays.
+    Streams:
+        Fixed bug GH-15836 (Use-after-free when a user stream filter accesses $this->stream during the close flush).
+    Sysvshm:

php8.spec Changed

@@ -1,7 +1,7 @@
 #
 # spec file for package php8
 #
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2026 SUSE LLC and contributors
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -57,7 +57,7 @@
 %bcond_without	sodium
 
 Name:           %{pprefix}%{php_name}%{psuffix}
-Version:        8.4.5
+Version:        8.4.27
 Release:        0
 Summary:        Interpreter for the PHP scripting language version 8
 License:        MIT AND PHP-3.01
@@ -73,7 +73,8 @@
 # Source9:       https://www.php.net/distributions/php-keyring.gpg#/%%{php_name}.keyring
 Source9:        %{php_name}.keyring
 Source11:       %{php_name}.rpmlintrc
-Source12:       php-fpm.tmpfiles.d
+Source12:       php-fpm-tmpfiles.conf
+Source13:       php8-tmpfiles.conf
 Source100:      build-test.sh
 ## SUSE specific patches
 # adjust includedir
@@ -89,8 +90,6 @@
 Patch4:         php-systzdata-v24.patch
 # adjust upstream systemd unit to SUSE needs
 Patch5:         php-systemd-unit.patch
-# PATCH-FEATURE-OPENSUSE use ordered input files for reproducible /usr/bin/phar.phar
-Patch6:         php-sort-filelist-phar.patch
 ## Bugfix patches
 # should be upstreamed, will do later
 Patch22:        php-date-regenerate-lexers.patch
@@ -169,6 +168,8 @@
 %if "%{flavor}" == ""
 Requires:       php-sapi = %{version}
 Requires:       timezone
+Requires:       group(www)
+Requires:       user(wwwrun)
 Recommends:     php-ctype = %{version}
 Recommends:     php-dom = %{version}
 Recommends:     php-iconv = %{version}
@@ -215,8 +216,10 @@
 Provides:       php-xml(vhng) = %{php_vhng_branch}
 Provides:       zend = %{zendver}
 # conflicts other php major versions with and should replace it
-Conflicts:      php < %{version}
-Conflicts:      php72
+Obsoletes:      php < %{version}
+Obsoletes:      php7
+Obsoletes:      php72
+Obsoletes:      php74
 # mcrypt was removed in php 7.2
 Obsoletes:      php7-mcrypt
 # json is now integral part of core, cannot be disabled
@@ -240,6 +243,7 @@
 Provides:       php-cli = %{version}
 Provides:       php-cli(vhng) = %{php_vhng_branch}
 Provides:       php-sapi = %{version}
+Obsoletes:      php7-cli
 Provides:       php-sapi(vhng) = %{php_vhng_branch}
 Conflicts:      php-cli < %{version}
 
@@ -265,6 +269,7 @@
 Requires:       pkgconfig(libpcre2-8) >= 10.30
 Requires:       pkgconfig(libxml-2.0) >= 2.9.0
 Provides:       php-devel = %{version}
+Obsoletes:      php7-devel
 Provides:       php-devel(vhng) = %{php_vhng_branch}
 Conflicts:      php-devel < %{version}
 
@@ -296,8 +301,9 @@
 Requires(preun): %{_sbindir}/a2enmod
 Provides:       mod_php_any = %{version}
 Provides:       php-sapi = %{version}
-Provides:       php-sapi(vhng) = %{php_vhng_branch}
+Obsoletes:      apache2-mod_php7
 Obsoletes:      mod_php_any < %{version}
+Provides:       php-sapi(vhng) = %{php_vhng_branch}
 
 %description
 PHP is a server-side, cross-platform HTML embedded scripting language.
@@ -320,6 +326,7 @@
 Provides:       php-fastcgi = %{version}
 Provides:       php-fastcgi(vhng) = %{php_vhng_branch}
 Provides:       php-sapi = %{version}
+Obsoletes:      php7-fastcgi
 Provides:       php-sapi(vhng) = %{php_vhng_branch}
 Conflicts:      php-fastcgi < %{version}
 
@@ -337,14 +344,13 @@
 BuildRequires:  php = %{version}
 BuildRequires:  pkgconfig(libsystemd) >= 209
 Requires:       php = %{version}
-Requires:       group(www)
-Requires:       user(wwwrun)
 Provides:       php-fpm = %{version}
 Provides:       php-fpm(vhng) = %{php_vhng_branch}
 Provides:       php-sapi = %{version}
+Obsoletes:      php7-fpm
+%{?systemd_ordering}
 Provides:       php-sapi(vhng) = %{php_vhng_branch}
 Conflicts:      php-fpm < %{version}
-%{?systemd_ordering}
 
 %description
 PHP is a server-side, cross-platform HTML embedded scripting language.
@@ -396,6 +402,7 @@
 Provides:       php-bcmath = %{version}
 Provides:       php-bcmath(vhng) = %{php_vhng_branch}
 Obsoletes:      php-bcmath < %{version}
+Obsoletes:      php7-bcmath
 
 %description bcmath
 Binary Calculator which supports numbers of any size and precision,
@@ -408,6 +415,7 @@
 Provides:       php-bz2 = %{version}
 Provides:       php-bz2(vhng) = %{php_vhng_branch}
 Obsoletes:      php-bz2 < %{version}
+Obsoletes:      php7-bz2
 
 %description bz2
 PHP functions to read and write bzip2 (.bz2) compressed files.
@@ -419,6 +427,7 @@
 Provides:       php-calendar = %{version}
 Provides:       php-calendar(vhng) = %{php_vhng_branch}
 Obsoletes:      php-calendar < %{version}
+Obsoletes:      php7-calendar
 
 %description calendar
 PHP functions for converting between different calendar formats.
@@ -430,6 +439,7 @@
 Provides:       php-ctype = %{version}
 Provides:       php-ctype(vhng) = %{php_vhng_branch}
 Obsoletes:      php-ctype < %{version}
+Obsoletes:      php7-ctype
 
 %description ctype
 PHP functions for checking whether a character or string falls into a
@@ -442,6 +452,7 @@
 Provides:       php-curl = %{version}
 Provides:       php-curl(vhng) = %{php_vhng_branch}
 Obsoletes:      php-curl < %{version}
+Obsoletes:      php7-curl
 
 %description curl
 PHP interface to libcurl that allows you to connect to and communicate
@@ -455,6 +466,7 @@
 Provides:       php-dba = %{version}
 Provides:       php-dba(vhng) = %{php_vhng_branch}
 Obsoletes:      php-dba < %{version}
+Obsoletes:      php7-dba
 
 %description dba
 This is a general abstraction layer for several file-based databases.
@@ -483,6 +495,7 @@
 Provides:       php-dom = %{version}
 Provides:       php-dom(vhng) = %{php_vhng_branch}
 Obsoletes:      php-dom < %{version}
+Obsoletes:      php7-dom
 
 %description dom
 This module adds Document Object Model (DOM) support.
@@ -496,6 +509,7 @@
 Obsoletes:      php-enchant < %{version}
 # Obsolete pspell plugin as enchant is favored solution (goodbye aspell)
 Obsoletes:      php7-pspell
+Obsoletes:      php7-enchant
 
 %description enchant
 Enchant is the PHP binding for the Enchant library. Enchant steps in
@@ -512,6 +526,7 @@
 Provides:       php-exif = %{version}
 Provides:       php-exif(vhng) = %{php_vhng_branch}
 Obsoletes:      php-exif < %{version}
+Obsoletes:      php7-exif
 
 %description exif
 PHP functions for extracting EXIF (Exchangable Image File Format;
@@ -523,6 +538,7 @@
 Group:          Development/Libraries/PHP
 Requires:       php = %{version}
 Provides:       php-ffi = %{version}
+Obsoletes:      php7-ffi
 Provides:       php-ffi(vhng) = %{php_vhng_branch}
 
 %description ffi
@@ -538,6 +554,7 @@
 Provides:       php-fileinfo = %{version}
 Provides:       php-fileinfo(vhng) = %{php_vhng_branch}
 Obsoletes:      php-fileinfo < %{version}
+Obsoletes:      php7-fileinfo
 
 %description fileinfo
 The functions in this module try to guess the content type and
@@ -552,6 +569,7 @@

php-build-reproducible-phar.patch Changed

@@ -16,11 +16,11 @@
  ext/phar/zip.c           |  2 +-
  6 files changed, 18 insertions(+), 5 deletions(-)
 
-Index: php-8.4.3/ext/phar/phar.c
+Index: php-8.4.17/ext/phar/phar.c
 ===================================================================
---- php-8.4.3.orig/ext/phar/phar.c
-+++ php-8.4.3/ext/phar/phar.c
-@@ -2960,7 +2960,7 @@ void phar_flush_ex(phar_archive_data *ph
+--- php-8.4.17.orig/ext/phar/phar.c
++++ php-8.4.17/ext/phar/phar.c
+@@ -2942,7 +2942,7 @@ int phar_flush_ex(phar_archive_data *pha
  			4: metadata-len
  			+: metadata
  		*/
@@ -29,11 +29,11 @@
  		phar_set_32(entry_buffer, entry->uncompressed_filesize);
  		phar_set_32(entry_buffer+4, mytime);
  		phar_set_32(entry_buffer+8, entry->compressed_filesize);
-Index: php-8.4.3/ext/phar/phar_internal.h
+Index: php-8.4.17/ext/phar/phar_internal.h
 ===================================================================
---- php-8.4.3.orig/ext/phar/phar_internal.h
-+++ php-8.4.3/ext/phar/phar_internal.h
-@@ -315,6 +315,21 @@ static inline php_stream *phar_get_pharf
+--- php-8.4.17.orig/ext/phar/phar_internal.h
++++ php-8.4.17/ext/phar/phar_internal.h
+@@ -316,6 +316,21 @@ static inline php_stream *phar_get_pharf
  	return PHAR_G(cached_fp)phar->phar_pos.fp;
  }
  
@@ -55,24 +55,24 @@
  static inline enum phar_fp_type phar_get_fp_type(const phar_entry_info *entry)
  {
  	if (!entry->is_persistent) {
-Index: php-8.4.3/ext/phar/stream.c
+Index: php-8.4.17/ext/phar/stream.c
 ===================================================================
---- php-8.4.3.orig/ext/phar/stream.c
-+++ php-8.4.3/ext/phar/stream.c
-@@ -472,7 +472,7 @@ static int phar_stream_flush(php_stream
+--- php-8.4.17.orig/ext/phar/stream.c
++++ php-8.4.17/ext/phar/stream.c
+@@ -473,7 +473,7 @@ static int phar_stream_flush(php_stream
  	phar_entry_data *data = (phar_entry_data *) stream->abstract;
  
  	if (data->internal_file->is_modified) {
 -		data->internal_file->timestamp = time(0);
 +		data->internal_file->timestamp = source_date_epoch_time(0);
- 		phar_flush(data->phar, &error);
+ 		ret = phar_flush(data->phar, &error);
  		if (error) {
  			php_stream_wrapper_log_error(stream->wrapper, REPORT_ERRORS, "%s", error);
-Index: php-8.4.3/ext/phar/tar.c
+Index: php-8.4.17/ext/phar/tar.c
 ===================================================================
---- php-8.4.3.orig/ext/phar/tar.c
-+++ php-8.4.3/ext/phar/tar.c
-@@ -972,7 +972,7 @@ void phar_tar_flush(phar_archive_data *p
+--- php-8.4.17.orig/ext/phar/tar.c
++++ php-8.4.17/ext/phar/tar.c
+@@ -972,7 +972,7 @@ int phar_tar_flush(phar_archive_data *ph
  	char *buf, *signature, sigbuf8;
  
  	entry.flags = PHAR_ENT_PERM_DEF_FILE;
@@ -81,10 +81,10 @@
  	entry.is_modified = 1;
  	entry.is_crc_checked = 1;
  	entry.is_tar = 1;
-Index: php-8.4.3/ext/phar/util.c
+Index: php-8.4.17/ext/phar/util.c
 ===================================================================
---- php-8.4.3.orig/ext/phar/util.c
-+++ php-8.4.3/ext/phar/util.c
+--- php-8.4.17.orig/ext/phar/util.c
++++ php-8.4.17/ext/phar/util.c
 @@ -701,7 +701,7 @@ phar_entry_data *phar_get_or_create_entr
  
  	phar_add_virtual_dirs(phar, path, path_len);
@@ -94,11 +94,11 @@
  	etemp.is_crc_checked = 1;
  	etemp.phar = phar;
  	etemp.filename = estrndup(path, path_len);
-Index: php-8.4.3/ext/phar/zip.c
+Index: php-8.4.17/ext/phar/zip.c
 ===================================================================
---- php-8.4.3.orig/ext/phar/zip.c
-+++ php-8.4.3/ext/phar/zip.c
-@@ -1266,7 +1266,7 @@ void phar_zip_flush(phar_archive_data *p
+--- php-8.4.17.orig/ext/phar/zip.c
++++ php-8.4.17/ext/phar/zip.c
+@@ -1251,7 +1251,7 @@ int phar_zip_flush(phar_archive_data *ph
  
  	pass.error = &temperr;
  	entry.flags = PHAR_ENT_PERM_DEF_FILE;

php-sort-filelist-phar.patch Deleted

_link Changed

php-8.4.5.tar.xz -> php-8.4.27.tar.xz Changed

php-8.4.27.tar.xz.asc Added

php-8.4.5.tar.xz.asc Deleted

php-fpm-tmpfiles.conf Added

php-fpm.tmpfiles.d Deleted

php8-tmpfiles.conf Added

Changes of Revision 4