%define debug_package %{nil} %define _enable_debug_packages %{nil} # Defining the package namespace # NOTE: pkg variable is a hack to fix invalid macro inside of macros.php %global ns_name ea %global ns_dir /opt/cpanel %global pkg php82 # Force Software Collections on %global _scl_prefix %{ns_dir} %global scl %{ns_name}-%{pkg} # HACK: OBS Doesn't support macros in BuildRequires statements, so we have # to hard-code it here. # https://en.opensuse.org/openSUSE:Specfile_guidelines#BuildRequires %global scl_prefix %{scl}- %scl_package php # API/ABI check %global apiver 20220829 %global zendver 20220829 %global pdover 20170320 # Adds -z now to the linker flags %global _hardened_build 1 # version used for php embedded library soname %global embed_version 8.2 # Ugly hack. Harcoded values to avoid relocation. %global _httpd_confdir %{_root_sysconfdir}/apache2/conf.d %global _httpd_moddir %{_libdir}/apache2/modules %global _root_httpd_moddir %{_root_libdir}/apache2/modules # httpd 2.4 values %global _httpd_apxs %{_root_bindir}/apxs %global _httpd_modconfdir %{_root_sysconfdir}/apache2/conf.modules.d %global _httpd_contentdir /usr/share/apache2 # disabling DSO, for details on why see https://github.com/CpanelInc/ea-php81/blob/master/DESIGN.dso.md %global with_httpd 0 %global mysql_sock %(mysql_config --socket 2>/dev/null || echo /var/lib/mysql/mysql.sock) # Regression tests take a long time, you can skip 'em with this %{!?runselftest: %{expand: %%global runselftest 0}} # Use the arch-specific mysql_config binary to avoid mismatch with the # arch detection heuristic used by bindir/mysql_config. %global mysql_config %{_root_libdir}/mysql/mysql_config %if 0%{?rhel} >= 8 %else Requires: ea-libcurl %global libcurl_prefix /opt/cpanel/libcurl %endif %global with_tidy 1 %global libtidy_prefix /opt/cpanel/libtidy %global with_sqlite3 1 %if 0%{?rhel} >= 8 %global with_pcre 1 %else %global with_pcre 0 %endif %global isasuffix -%{__isa_bits} %global with_systemd 1 %global with_zip 1 Requires: ea-libzip BuildRequires: ea-libzip BuildRequires: ea-libzip-devel %global db_devel libdb-devel %define ea_openssl_ver 1.1.1d-1 %if 0%{?rhel} >= 8 %define libcurl_ver 7.61.0 %else %define ea_libcurl_ver 7.68.0-2 %endif %if 0%{rhel} > 7 %global with_avif 1 %else %global with_avif 0 %endif %if 0%{?rhel} >= 9 %global use_system_libxml2 1 %else %global use_system_libxml2 0 %endif %if %{use_system_libxml2} %global libxml2_devel_pkg libxml2-devel %global libxml2_runtime_pkg libxml2 %else %global libxml2_devel_pkg ea-libxml2-devel %global libxml2_runtime_pkg ea-libxml2 %endif Summary: PHP scripting language for creating dynamic web sites Vendor: cPanel, Inc. Name: %{?scl_prefix}php Version: 8.2.35 # Doing release_prefix this way for Release allows for OBS-proof versioning, See EA-4588 for more details %define release_prefix 1 Release: %{release_prefix}%{?dist}.cpanel # All files licensed under PHP version 3.01, except # Zend is licensed under Zend # TSRM is licensed under BSD License: PHP and Zend and BSD Group: Development/Languages URL: http://www.php.net/ %global litespeed_version 8.3 Source0: php-%{version}.tar.bz2 Source1: https://www.litespeedtech.com/packages/lsapi/php-litespeed-%{litespeed_version}.tgz Source2: php.ini Source3: macros.php Source4: php-fpm.conf Source5: php-fpm-www.conf Source6: php-fpm.service Source7: php-fpm.logrotate Source8: php-fpm.sysconfig Source11: php-fpm.init # Configuration files for some extensions Source50: 10-opcache.ini Source51: opcache-default.blacklist Patch42: 0001-EA4-OBS-ready.patch # Prevent pear package from dragging in devel, which drags in a lot of # stuff for a production machine: https://bugzilla.redhat.com/show_bug.cgi?id=657812 Patch43: 0002-Prevent-PEAR-package-from-bringing-in-devel.patch # cPanel patches Patch100: 0003-Modify-standard-mail-extenstion-to-add-X-PHP-Script.patch Patch101: 0004-Removed-ZTS-support.patch Patch102: 0005-Ensure-that-php.d-is-not-scanned-when-PHPRC-is-set.patch Patch104: 0006-FPM-Ensure-docroot-is-in-the-user-s-homedir.patch Patch105: 0007-Chroot-FPM-users-with-noshell-and-jailshell.patch Patch106: 0008-Patch-epoll.c-per-bug-report-in-upstream.patch BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) Patch107: 0009-Add-support-for-use-of-the-system-timezone-database.patch Patch402: 0010-0022-PLESK-missed-kill.patch Patch403: 0011-Revert-new-.user.ini-search-behavior.patch Patch404: 0012-Prevent-kill_all_lockers-from-crashing-PHP.patch %if 0%{?rhel} == 7 BuildRequires: devtoolset-8 devtoolset-8-gcc devtoolset-8-gcc-c++ kernel-devel %endif %if 0%{rhel} >= 10 BuildRequires: langpacks-fonts-en %endif BuildRequires: re2c BuildRequires: %{libxml2_devel_pkg} BuildRequires: bzip2-devel, %{db_devel} %if 0%{?rhel} >= 8 BuildRequires: libcurl >= %{libcurl_ver}, libcurl-devel >= %{libcurl_ver} BuildRequires: brotli brotli-devel %else BuildRequires: %{ns_name}-libcurl >= %{ea_libcurl_ver}, %{ns_name}-libcurl-devel >= %{ea_libcurl_ver} %endif BuildRequires: pam-devel BuildRequires: scl-utils-build BuildRequires: libstdc++-devel %if 0%{?rhel} > 7 # In C8 we use system openssl. See DESIGN.md in ea-openssl11 git repo for details BuildRequires: openssl, openssl-devel Requires: openssl %else BuildRequires: ea-openssl11 >= %{ea_openssl_ver}, ea-openssl11-devel >= %{ea_openssl_ver} Requires: ea-openssl11 >= %{ea_openssl_ver} %endif # For Argon2 support BuildRequires: ea-libargon2-devel Requires: ea-libargon2 BuildRequires: sqlite-devel >= 3.7.5 BuildRequires: zlib-devel, smtpdaemon BuildRequires: libedit-devel %if %{with_pcre} BuildRequires: pcre2-devel >= 10.30 %else Provides: Provides: bundled(pcre2) = 10.32 %endif BuildRequires: bzip2, perl, libtool >= 1.4.3, gcc-c++ BuildRequires: libtool-ltdl-devel BuildRequires: bison BuildRequires: autoconf # For backwards-compatibility, require php-cli for the time being: Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release} # Don't provides extensions, which are not shared library, as .so %{?filter_provides_in: %filter_provides_in %{_libdir}/php/modules/.*\.so$} %{?filter_setup} %description This version of PHP does not include Apache's mod_php DSO module. PHP dropped the major version from its '.so' and symbols. Because this change is not backwards compatible, cPanel & WHM dropped support for DSO in PHP 8.2. %package sodium Summary: Cryptographic Extension Based on Libsodium Group: Development/Libraries/PHP Requires: %{?scl_prefix}php-common = %{version} Provides: %{?scl_prefix}php-sodium = %{version} Obsoletes: %{?scl_prefix}php-sodium < %{version} BuildRequires: pkgconfig(libsodium) >= 1.0.18 Requires: libsodium >= 1.0.18 %description sodium PHP binding to libsodium software library for encryption, decryption, signatures, password hashing and more. %package cli Group: Development/Languages Summary: Command-line interface for PHP Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-cgi = %{version}-%{release}, %{?scl_prefix}php-cgi%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-pcntl = %{version}-%{release} , %{?scl_prefix}php-pcntl%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-readline = %{version}-%{release}, %{?scl_prefix}php-readline%{?_isa} = %{version}-%{release} # For the ea-php-cli wrapper rpm Requires: ea-php-cli Requires: ea-php-cli-lsphp Requires: %{?scl_prefix}php-litespeed = %{version}-%{release} %description cli The php-cli package contains the command-line interface executing PHP scripts, /usr/bin/php, and the CGI interface. %package dbg Group: Development/Languages Summary: The interactive PHP debugger Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release} Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release} %description dbg The %{?scl_prefix}php-dbg package contains the interactive PHP debugger. %package fpm Group: Development/Languages Summary: PHP FastCGI Process Manager # All files licensed under PHP version 3.01, except # Zend is licensed under Zend # TSRM and fpm are licensed under BSD License: PHP and Zend and BSD Requires: ea-apache24-mod_proxy_fcgi Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release} Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release} BuildRequires: systemd-libs BuildRequires: systemd-devel BuildRequires: systemd-units Requires: systemd-units Requires(post): systemd-units Requires(preun): systemd-units Requires(postun): systemd-units # This is actually needed for the %%triggerun script but Requires(triggerun) # is not valid. We can use %%post because this particular %%triggerun script # should fire just after this package is installed. Requires(post): systemd-sysv %description fpm PHP-FPM (FastCGI Process Manager) is an alternative PHP FastCGI implementation with some additional features useful for sites of any size, especially busier sites. %package litespeed Summary: LiteSpeed Web Server PHP support Group: Development/Languages Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release} Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release} %description litespeed The %{?scl_prefix}php-litespeed package provides the %{_bindir}/lsphp command used by the LiteSpeed Web Server (LSAPI enabled PHP). %package common Group: Development/Languages Summary: Common files for PHP # All files licensed under PHP version 3.01, except # fileinfo is licensed under PHP version 3.0 # regex, libmagic are licensed under BSD # main/snprintf.c, main/spprintf.c and main/rfc1867.c are ASL 1.0 License: PHP and BSD and ASL 1.0 # ABI/API check - Arch specific Provides: %{?scl_prefix}php(api) = %{apiver}%{isasuffix} Provides: %{?scl_prefix}php(zend-abi) = %{zendver}%{isasuffix} Provides: %{?scl_prefix}php(language) = %{version} Provides: %{?scl_prefix}php(language)%{?_isa} = %{version} # Provides for all builtin/shared modules: Provides: %{?scl_prefix}php-core = %{version}, %{?scl_prefix}php-core%{?_isa} = %{version} Provides: %{?scl_prefix}php-ctype = %{version}-%{release}, %{?scl_prefix}php-ctype%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-date = %{version}-%{release}, %{?scl_prefix}php-date%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-filter = %{version}-%{release}, %{?scl_prefix}php-filter%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-hash = %{version}-%{release}, %{?scl_prefix}php-hash%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-mhash = %{version}-%{release}, %{?scl_prefix}php-mhash%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-json = %{version}-%{release}, %{?scl_prefix}php-json%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-pecl-json = %{version}-%{release}, %{?scl_prefix}php-pecl-json%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-pecl(json) = %{version}-%{release}, %{?scl_prefix}php-pecl(json)%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-libxml = %{version}-%{release}, %{?scl_prefix}php-libxml%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-openssl = %{version}-%{release}, %{?scl_prefix}php-openssl%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-phar = %{version}-%{release}, %{?scl_prefix}php-phar%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-pcre = %{version}-%{release}, %{?scl_prefix}php-pcre%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-reflection = %{version}-%{release}, %{?scl_prefix}php-reflection%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-session = %{version}-%{release}, %{?scl_prefix}php-session%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-spl = %{version}-%{release}, %{?scl_prefix}php-spl%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-standard = %{version}, %{?scl_prefix}php-standard%{?_isa} = %{version} Provides: %{?scl_prefix}php-tokenizer = %{version}-%{release}, %{?scl_prefix}php-tokenizer%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-zlib = %{version}-%{release}, %{?scl_prefix}php-zlib%{?_isa} = %{version}-%{release} %{!?scl:Obsoletes: php-openssl, php-pecl-json, php-json, php-pecl-phar, php-pecl-Fileinfo} %{?scl:Requires: %{scl}-runtime} %description common The %{?scl_prefix}php-common package contains files used by both the %{?scl_prefix}php package and the php-cli package. %package devel Group: Development/Libraries Summary: Files needed for building PHP extensions Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release}, autoconf, automake %if %{with_pcre} Requires: pcre2-devel%{?_isa} >= 10.30 %endif %description devel The %{?scl_prefix}php-devel package contains the files needed for building PHP extensions. If you need to compile your own PHP extensions, you will need to install this package. %package opcache Summary: The Zend OPcache Group: Development/Languages License: PHP Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release} Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-pecl-zendopcache = %{version}-%{release} Provides: %{?scl_prefix}php-pecl-zendopcache%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-pecl(opcache) = %{version}-%{release} Provides: %{?scl_prefix}php-pecl(opcache)%{?_isa} = %{version}-%{release} %description opcache The Zend OPcache provides faster PHP execution through opcode caching and optimization. It improves PHP performance by storing precompiled script bytecode in the shared memory. This eliminates the stages of reading code from the disk and compiling it on future access. In addition, it applies a few bytecode optimization patterns that make code execution faster. %package bz2 Summary: A module for PHP applications that interface with .bz2 files Group: Development/Languages License: PHP Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release} Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-bz2 = %{version}-%{release}, %{?scl_prefix}php-bz2%{?_isa} = %{version}-%{release} %description bz2 The php-bz2 package delivers a module which will allow PHP scripts to interface with .bz2 files. %package calendar Summary: A module for PHP applications that need date/time calculations Group: Development/Languages License: PHP Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release} Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-calendar = %{version}-%{release}, %{?scl_prefix}php-calendar%{?_isa} = %{version}-%{release} %description calendar The php-calendar package delivers a module which will allow PHP scripts to do date and time conversions and calculations. %package curl Summary: A module for PHP applications that need to interface with curl Group: Development/Languages License: PHP Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release} Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release} %if 0%{rhel} < 8 Requires: %{ns_name}-libcurl >= %{ea_libcurl_ver} %else Requires: libcurl %endif BuildRequires: libssh2 libssh2-devel libidn libidn-devel ea-libnghttp2-devel Provides: %{?scl_prefix}php-curl = %{version}-%{release}, %{?scl_prefix}php-curl%{?_isa} = %{version}-%{release} %description curl The php-curl package delivers a module which will allow PHP scripts to connect and communicate to many different types of servers with many different types of protocols. libcurl currently supports the http, https, ftp, gopher, telnet, dict, file, and ldap protocols. libcurl also supports HTTPS certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies, and user+password authentication. %package exif Summary: A module for PHP applications that need to work with image metadata Group: Development/Languages License: PHP Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release} Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-exif = %{version}-%{release}, %{?scl_prefix}php-exif%{?_isa} = %{version}-%{release} %description exif The php-exif package delivers a module which will allow PHP scripts to work with image meta data. For example, you may use exif functions to read meta data of pictures taken from digital cameras by working with information stored in the headers of the JPEG and TIFF images. %package fileinfo Summary: A module for PHP applications that need to detect file types Group: Development/Languages License: PHP Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release} Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-fileinfo = %{version}-%{release}, %{?scl_prefix}php-fileinfo%{?_isa} = %{version}-%{release} %description fileinfo The php-fileinfo package delivers a module which will allow PHP scripts to try to guess the content type and encoding of a file by looking for certain magic byte sequences at specific positions within the file. While this is not a bullet proof approach the heuristics used do a very good job. %package ftp Summary: A module for PHP applications that need full FTP protocol support Group: Development/Languages License: PHP Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release} Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-ftp = %{version}-%{release}, %{?scl_prefix}php-ftp%{?_isa} = %{version}-%{release} %description ftp The php-ftp package delivers a module which will allow PHP scripts client access to files servers speaking the File Transfer Protocol (FTP) as defined in http://www.faqs.org/rfcs/rfc959. This extension is meant for detailed access to an FTP server providing a wide range of control to the executing script. If you only wish to read from or write to a file on an FTP server, consider using the ftp:// wrapper with the %{?scl_prefix}php-filesystem package which provides a simpler and more intuitive interface. %package gettext Summary: A module for PHP applications that need native language support Group: Development/Languages License: PHP Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release} Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-gettext = %{version}-%{release}, %{?scl_prefix}php-gettext%{?_isa} = %{version}-%{release} %description gettext The php-gettext package delivers a module which will allow PHP scripts to access an NLS (Native Language Support) API which can be used to internationalize your PHP applications. Please see the gettext documentation for your system for a thorough explanation of these functions or view the docs at http://www.gnu.org/software/gettext/manual/gettext.html. %package iconv Summary: A module for PHP applications that need to convert character sets Group: Development/Languages License: PHP Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release} Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-iconv = %{version}-%{release}, %{?scl_prefix}php-iconv%{?_isa} = %{version}-%{release} %description iconv The php-iconv package delivers a module which will allow PHP scripts to access the iconv character set conversion facility. With this module, you can turn a string represented by a local character set into the one represented by another character set, which may be the Unicode character set. Supported character sets depend on the iconv implementation of your system. Note that the iconv function on some systems may not work as you expect. In such case, it would be a good idea to install the GNU libiconv library. It will most likely end up with more consistent results. %package imap Summary: A module for PHP applications that use IMAP #Group: Development/Languages # All files licensed under PHP version 3.01 License: PHP Provides: %{?scl_prefix}php-imap%{?_isa} = %{version}-%{release} Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release} Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release} BuildRequires: krb5-devel BuildRequires: ea-libc-client %if 0%{?rhel} > 7 # In C8 we use system openssl. See DESIGN.md in ea-openssl11 git repo for details BuildRequires: openssl, openssl-devel Requires: openssl %else BuildRequires: ea-openssl11 >= %{ea_openssl_ver}, ea-openssl11-devel >= %{ea_openssl_ver} Requires: ea-openssl11 >= %{ea_openssl_ver} %endif %description imap The %{?scl_prefix}php-imap module will add IMAP (Internet Message Access Protocol) support to PHP. IMAP is a protocol for retrieving and uploading e-mail messages on mail servers. PHP is an HTML-embedded scripting language. %package ldap Summary: A module for PHP applications that use LDAP Group: Development/Languages # All files licensed under PHP version 3.01 License: PHP Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release} Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release} BuildRequires: cyrus-sasl-devel, openldap-devel %if 0%{?rhel} > 7 # In C8 we use system openssl. See DESIGN.md in ea-openssl11 git repo for details BuildRequires: openssl, openssl-devel Requires: openssl %else BuildRequires: ea-openssl11 >= %{ea_openssl_ver}, ea-openssl11-devel >= %{ea_openssl_ver} Requires: ea-openssl11 >= %{ea_openssl_ver} %endif %description ldap The %{?scl_prefix}php-ldap package adds Lightweight Directory Access Protocol (LDAP) support to PHP. LDAP is a set of protocols for accessing directory services over the Internet. PHP is an HTML-embedded scripting language. %package pdo Summary: A database access abstraction module for PHP applications Group: Development/Languages # All files licensed under PHP version 3.01 License: PHP Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release} Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release} # ABI/API check - Arch specific Provides: %{?scl_prefix}php-pdo-abi = %{pdover}%{isasuffix} Provides: %{?scl_prefix}php(pdo-abi) = %{pdover}%{isasuffix} Provides: %{?scl_prefix}php-sqlite3 = %{version}-%{release}, %{?scl_prefix}php-sqlite3%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-pdo_sqlite = %{version}-%{release}, %{?scl_prefix}php-pdo_sqlite%{?_isa} = %{version}-%{release} %description pdo The %{?scl_prefix}php-pdo package contains a dynamic shared object that will add a database access abstraction layer to PHP. This module provides a common interface for accessing MySQL, PostgreSQL or other databases. %package mysqlnd Summary: A module for PHP applications that use MySQL databases Group: Development/Languages # All files licensed under PHP version 3.01 License: PHP Requires: %{?scl_prefix}php-pdo%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php_database = %{version}-%{release} Provides: %{?scl_prefix}php-mysql = %{version}-%{release} Provides: %{?scl_prefix}php-mysql%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-mysqli = %{version}-%{release} Provides: %{?scl_prefix}php-mysqli%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-pdo_mysql = %{version}-%{release}, %{?scl_prefix}php-pdo_mysql%{?_isa} = %{version}-%{release} %description mysqlnd The %{?scl_prefix}php-mysqlnd package contains a dynamic shared object that will add MySQL database support to PHP. MySQL is an object-relational database management system. PHP is an HTML-embeddable scripting language. If you need MySQL support for PHP applications, you will need to install this package and the php package. This package use the MySQL Native Driver %package posix Summary: Modules for PHP scripts that need access to POSIX functions Group: Development/Languages License: PHP Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release} Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-posix = %{version}-%{release}, %{?scl_prefix}php-posix%{?_isa} = %{version}-%{release} %description posix The php-posix package adds a PHP interface to those functions defined in the IEEE 1003.1 (POSIX.1) standards document which are not accessible through other means. %package pgsql Summary: A PostgreSQL database module for PHP Group: Development/Languages # All files licensed under PHP version 3.01 License: PHP Requires: %{?scl_prefix}php-pdo%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php_database = %{version}-%{release} Provides: %{?scl_prefix}php-pdo_pgsql = %{version}-%{release}, %{?scl_prefix}php-pdo_pgsql%{?_isa} = %{version}-%{release} BuildRequires: krb5-devel %if 0%{?rhel} >= 10 BuildRequires: postgresql-private-devel %else BuildRequires: postgresql-devel %endif %if 0%{?rhel} > 7 # In C8 we use system openssl. See DESIGN.md in ea-openssl11 git repo for details BuildRequires: openssl, openssl-devel Requires: openssl %else BuildRequires: ea-openssl11 >= %{ea_openssl_ver}, ea-openssl11-devel >= %{ea_openssl_ver} Requires: ea-openssl11 >= %{ea_openssl_ver} %endif %description pgsql The %{?scl_prefix}php-pgsql package add PostgreSQL database support to PHP. PostgreSQL is an object-relational database management system that supports almost all SQL constructs. PHP is an HTML-embedded scripting language. If you need back-end support for PostgreSQL, you should install this package in addition to the main php package. %package process Summary: Modules for PHP script using system process interfaces Group: Development/Languages # All files licensed under PHP version 3.01 License: PHP Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release} Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-shmop = %{version}-%{release}, %{?scl_prefix}php-shmop%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-sysvsem = %{version}-%{release}, %{?scl_prefix}php-sysvsem%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-sysvshm = %{version}-%{release}, %{?scl_prefix}php-sysvshm%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-sysvmsg = %{version}-%{release}, %{?scl_prefix}php-sysvmsg%{?_isa} = %{version}-%{release} %description process The %{?scl_prefix}php-process package contains dynamic shared objects which add support to PHP using system interfaces for inter-process communication. %package odbc Summary: A module for PHP applications that use ODBC databases Group: Development/Languages # All files licensed under PHP version 3.01, except # pdo_odbc is licensed under PHP version 3.0 License: PHP Requires: %{?scl_prefix}php-pdo%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php_database = %{version}-%{release} Provides: %{?scl_prefix}php-pdo_odbc = %{version}-%{release}, %{?scl_prefix}php-pdo_odbc%{?_isa} = %{version}-%{release} BuildRequires: unixODBC-devel %description odbc The %{?scl_prefix}php-odbc package contains a dynamic shared object that will add database support through ODBC to PHP. ODBC is an open specification which provides a consistent API for developers to use for accessing data sources (which are often, but not always, databases). PHP is an HTML-embeddable scripting language. If you need ODBC support for PHP applications, you will need to install this package and the php package. %package soap Summary: A module for PHP applications that use the SOAP protocol Group: Development/Languages # All files licensed under PHP version 3.01 License: PHP Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release} Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release} BuildRequires: %{libxml2_devel_pkg} %description soap The %{?scl_prefix}php-soap package contains a dynamic shared object that will add support to PHP for using the SOAP web services protocol. %package sockets Summary: A module for PHP applications that need low-level access to sockets Group: Development/Languages License: PHP Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release} Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-sockets = %{version}-%{release}, %{?scl_prefix}php-sockets%{?_isa} = %{version}-%{release} %description sockets The php-sockets package delivers a module which will allow PHP scripts access to a low-level interface to the socket communication functions based on the popular BSD sockets, providing the possibility to act as a socket server as well as a client. %package snmp Summary: A module for PHP applications that query SNMP-managed devices Group: Development/Languages # All files licensed under PHP version 3.01 License: PHP Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release}, net-snmp Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release} BuildRequires: net-snmp-devel %description snmp The %{?scl_prefix}php-snmp package contains a dynamic shared object that will add support for querying SNMP devices to PHP. PHP is an HTML-embeddable scripting language. If you need SNMP support for PHP applications, you will need to install this package and the php package. %package xml Summary: A module for PHP applications which use XML Group: Development/Languages # All files licensed under PHP version 3.01 License: PHP Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release} Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-dom = %{version}-%{release}, %{?scl_prefix}php-dom%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-domxml = %{version}-%{release}, %{?scl_prefix}php-domxml%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-xmlreader = %{version}-%{release}, %{?scl_prefix}php-xmlreader%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-xmlwriter = %{version}-%{release}, %{?scl_prefix}php-xmlwriter%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-xsl = %{version}-%{release}, %{?scl_prefix}php-xsl%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-simplexml = %{version}-%{release}, %{?scl_prefix}php-simplexml%{?_isa} = %{version}-%{release} BuildRequires: libxslt-devel >= 1.0.18-1, %{libxml2_devel_pkg} Requires: %{libxml2_runtime_pkg} BuildRequires: libxslt >= 1.0.18-1 Requires: libxslt >= 1.0.18-1 %description xml The %{?scl_prefix}php-xml package contains dynamic shared objects which add support to PHP for manipulating XML documents using the DOM tree, and performing XSL transformations on XML documents. %package xmlrpc Summary: A module for PHP applications which use the XML-RPC protocol Group: Development/Languages # All files licensed under PHP version 3.01, except # libXMLRPC is licensed under BSD License: PHP and BSD Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release} Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release} %description xmlrpc The %{?scl_prefix}php-xmlrpc package contains a dynamic shared object that will add support for the XML-RPC protocol to PHP. %package mbstring Summary: A module for PHP applications which need multi-byte string handling Group: Development/Languages # All files licensed under PHP version 3.01, except # libmbfl is licensed under LGPLv2 # onigurama is licensed under BSD # ucgendat is licensed under OpenLDAP License: PHP and LGPLv2 and BSD and OpenLDAP Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release} Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release} BuildRequires: ea-oniguruma-devel Requires: ea-oniguruma-devel %description mbstring The %{?scl_prefix}php-mbstring package contains a dynamic shared object that will add support for multi-byte string handling to PHP. %package gd Summary: A module for PHP applications for using the gd graphics library Group: Development/Languages License: PHP Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release} Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release} Requires: libjpeg-turbo%{?_isa}, libpng%{?_isa}, libXpm%{?_isa}, freetype%{?_isa} BuildRequires: libjpeg-turbo-devel%{?_isa}, libpng-devel%{?_isa}, libXpm-devel%{?_isa}, freetype-devel%{?_isa} Requires: libwebp%{?_isa} BuildRequires: libwebp-devel%{?_isa} %if %{with_avif} %if 0%{?rhel} == 9 Requires: libavif >= 1.0 BuildRequires: libavif-devel >= 1.0 %else Requires: libavif BuildRequires: libavif-devel %endif %endif %description gd The %{?scl_prefix}php-gd package contains a dynamic shared object that will add support for using the gd graphics library to PHP. %package gmp Summary: A module for PHP applications for using the GNU MP library Group: Development/Languages # All files licensed under PHP version 3.01 License: PHP BuildRequires: gmp-devel%{?_isa} Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release} Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release} %description gmp These functions allow you to work with arbitrary-length integers using the GNU MP library. %package bcmath Summary: A module for PHP applications for using the bcmath library Group: Development/Languages # All files licensed under PHP version 3.01, except # libbcmath is licensed under LGPLv2+ License: PHP and LGPLv2+ Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release} Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release} %description bcmath The %{?scl_prefix}php-bcmath package contains a dynamic shared object that will add support for using the bcmath library to PHP. %package dba Summary: A database abstraction layer module for PHP applications Group: Development/Languages # All files licensed under PHP version 3.01 License: PHP BuildRequires: %{db_devel}, tokyocabinet-devel Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release} Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release} %description dba The %{?scl_prefix}php-dba package contains a dynamic shared object that will add support for using the DBA database abstraction layer to PHP. %package tidy Summary: Standard PHP module provides tidy library support Group: Development/Languages # All files licensed under PHP version 3.01 License: PHP Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release} Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release} Requires: %{ns_name}-libtidy BuildRequires: %{ns_name}-libtidy-devel %description tidy The %{?scl_prefix}php-tidy package contains a dynamic shared object that will add support for using the tidy library to PHP. %package pspell Summary: A module for PHP applications for using pspell interfaces Group: System Environment/Libraries # All files licensed under PHP version 3.01 License: PHP Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release} Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release} BuildRequires: aspell-devel >= 0.50.0 %description pspell The %{?scl_prefix}php-pspell package contains a dynamic shared object that will add support for using the pspell library to PHP. %package intl Summary: Internationalization extension for PHP applications Group: System Environment/Libraries # All files licensed under PHP version 3.01 License: PHP Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release} Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release} %if 0%{?rhel} >= 10 Requires: libicu BuildRequires: libicu-devel >= 50.1 %else Requires: ea-libicu BuildRequires: ea-libicu-devel >= 50.1 %endif %description intl The %{?scl_prefix}php-intl package contains a dynamic shared object that will add support for using the ICU library to PHP. %package enchant Summary: Enchant spelling extension for PHP applications # All files licensed under PHP version 3.0 License: PHP Group: System Environment/Libraries Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release} Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release} %if 0%{?rhel} >= 8 BuildRequires: enchant2-devel Requires: enchant2 %else BuildRequires: enchant-devel >= 1.2.4 %endif %description enchant The %{?scl_prefix}php-enchant package contains a dynamic shared object that will add support for using the enchant library to PHP. %package zip Summary: A module for PHP applications that need to handle .zip files Group: Development/Languages License: PHP Requires: ea-libzip Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release} Requires: %{?scl_prefix}php-cli%{?_isa} = %{version}-%{release} Provides: %{?scl_prefix}php-zip = %{version}-%{release}, %{?scl_prefix}php-zip%{?_isa} = %{version}-%{release} %description zip The %{?scl_prefix}php-zip package delivers a module which will allow PHP scripts to transparently read or write ZIP compressed archives and the files inside them. %prep : Building %{name}-%{version}-%{release} with systemd=%{with_systemd} sqlite3=%{with_sqlite3} tidy=%{with_tidy} zip=%{with_zip} %setup -q -n php-%{version} %patch42 -p1 -b .systemdpackage %patch43 -p1 -b .phpize %patch100 -p1 -b .cpanelmailheader %patch101 -p1 -b .disablezts %patch102 -p1 -b .cpanelea4ini %patch104 -p1 -b .fpmuserini %patch105 -p1 -b .fpmjailshell %patch106 -p1 -b .fpmepoll %patch107 -p1 -b .systzdata %patch402 -p1 -b .missedkill %patch403 -p1 -b .userini %patch404 -p1 -b .kill_all_lockers # Prevent %%doc confusion over LICENSE files cp Zend/LICENSE Zend/ZEND_LICENSE cp TSRM/LICENSE TSRM_LICENSE cp sapi/fpm/LICENSE fpm_LICENSE cp ext/mbstring/libmbfl/LICENSE libmbfl_LICENSE cp ext/fileinfo/libmagic/LICENSE libmagic_LICENSE cp ext/bcmath/libbcmath/LICENSE libbcmath_LICENSE # Remove the bundled version of litespeed # and replace it with the latest version # Note in litespeed 8.1 they changed the name of the top directory # so I need to copy from the top dir pushd sapi tar -xvf %{SOURCE1} --exclude=Makefile.frag --exclude=config.m4 cp litespeed-%{litespeed_version}/* litespeed popd # Multiple builds for multiple SAPIs mkdir \ build-fpm \ build-cgi # ----- Manage known as failed test ------- # affected by systzdata patch rm -f ext/date/tests/timezone_location_get.phpt rm -f ext/date/tests/timezone_version_get.phpt rm -f ext/date/tests/timezone_version_get_basic1.phpt # fails sometime rm -f ext/sockets/tests/mcast_ipv?_recv.phpt # Should be skipped but fails sometime rm ext/standard/tests/file/file_get_contents_error001.phpt # cause stack exhausion rm Zend/tests/bug54268.phpt rm Zend/tests/bug68412.phpt # Safety check for API version change. pver=$(sed -n '/#define PHP_VERSION /{s/.* "//;s/".*$//;p}' main/php_version.h) if test "x${pver}" != "x%{version}"; then : Error: Upstream PHP version is now ${pver}, expecting %{version}. : Update the version macros and rebuild. exit 1 fi vapi=`sed -n '/#define PHP_API_VERSION/{s/.* //;p}' main/php.h` if test "x${vapi}" != "x%{apiver}"; then : Error: Upstream API version is now ${vapi}, expecting %{apiver}. : Update the apiver macro and rebuild. exit 1 fi vzend=`sed -n '/#define ZEND_MODULE_API_NO/{s/^[^0-9]*//;p;}' Zend/zend_modules.h` if test "x${vzend}" != "x%{zendver}"; then : Error: Upstream Zend ABI version is now ${vzend}, expecting %{zendver}. : Update the zendver macro and rebuild. exit 1 fi # Safety check for PDO ABI version change vpdo=`awk '/^#define PDO_DRIVER_API/ { print $3 } ' ext/pdo/php_pdo_driver.h` if test "x${vpdo}" != "x%{pdover}"; then : Error: Upstream PDO ABI version is now ${vpdo}, expecting %{pdover}. : Update the pdover macro and rebuild. exit 1 fi # https://bugs.php.net/63362 - Not needed but installed headers. # Drop some Windows specific headers to avoid installation, # before build to ensure they are really not needed. rm -f TSRM/tsrm_win32.h \ TSRM/tsrm_config.w32.h \ Zend/zend_config.w32.h \ ext/mysqlnd/config-win.h \ ext/standard/winver.h \ main/win32_internal_function_disabled.h \ main/win95nt.h # Fix some bogus permissions find . -name \*.[ch] -exec chmod 644 {} \; chmod 644 README.* # Create the macros.php files sed -e "s/@PHP_APIVER@/%{apiver}%{isasuffix}/" \ -e "s/@PHP_ZENDVER@/%{zendver}%{isasuffix}/" \ -e "s/@PHP_PDOVER@/%{pdover}%{isasuffix}/" \ -e "s/@PHP_VERSION@/%{version}/" \ -e "s:@LIBDIR@:%{_libdir}:" \ -e "s:@ETCDIR@:%{_sysconfdir}:" \ -e "s:@INCDIR@:%{_includedir}:" \ -e "s:@BINDIR@:%{_bindir}:" \ -e 's/@SCL@/%{ns_name}_%{pkg}_/' \ %{SOURCE3} | tee macros.php # php-fpm configuration files for tmpfiles.d # TODO echo "d /run/php-fpm 755 root root" >php-fpm.tmpfiles # Some extensions have their own configuration file cp %{SOURCE50} 10-opcache.ini %ifarch x86_64 sed -e '/opcache.huge_code_pages/s/0/1/' -i 10-opcache.ini %endif cp %{SOURCE51} . sed -e 's:%{_root_sysconfdir}:%{_sysconfdir}:' \ -i 10-opcache.ini %build %if 0%{?rhel} == 7 . /opt/rh/devtoolset-8/enable %endif # aclocal workaround - to be improved cat `aclocal --print-ac-dir`/{libtool,ltoptions,ltsugar,ltversion,lt~obsolete}.m4 >>aclocal.m4 # Force use of system libtool: libtoolize --force --copy cat `aclocal --print-ac-dir`/{libtool,ltoptions,ltsugar,ltversion,lt~obsolete}.m4 >build/libtool.m4 # Regenerate configure scripts (patches change config.m4's) touch configure.in ./buildconf --force C8FLAGS="" %if 0%{?rhel} > 7 C8FLAGS="-mshstk" %endif CFLAGS="$RPM_OPT_FLAGS -fno-strict-aliasing -Wno-pointer-sign $C8FLAGS" export CFLAGS %if 0%{?rhel} >= 9 XFLAGS=`echo "$CFLAGS" | sed 's/-flto=auto/-fno-lto/g'` XFLAGS=`echo "$XFLAGS" | sed 's/-ffat-lto-objects//g'` export CFLAGS="$XFLAGS" %endif %if 0%{?rhel} > 7 export CURL_SHARED_LIBADD="-Wl,-rpath=/opt/cpanel/ea-brotli/%{_lib}" %else export SNMP_SHARED_LIBADD="-Wl,-rpath=/opt/cpanel/ea-openssl11/%{_lib}" export CURL_SHARED_LIBADD="-Wl,-rpath=/opt/cpanel/ea-openssl11/%{_lib} -Wl,-rpath=/opt/cpanel/ea-brotli/%{_lib}" %endif # Install extension modules in %{_libdir}/php/modules. EXTENSION_DIR=%{_libdir}/php/modules; export EXTENSION_DIR # Set PEAR_INSTALLDIR to ensure that the hard-coded include_path # includes the PEAR directory even though pear is packaged # separately. PEAR_INSTALLDIR=%{_datadir}/pear; export PEAR_INSTALLDIR %if 0%{?rhel} >= 8 export XLDFLAGS=$LDFLAGS %endif # Shell function to configure and build a PHP tree. build() { # Old/recent bison version seems to produce a broken parser; # upstream uses GNU Bison 2.3. Workaround:A mkdir Zend cp ../Zend/zend_{language,ini}_{parser,scanner}.* Zend # Always static: # date, filter, libxml, reflection, spl: not supported # hash: for PHAR_SIG_SHA256 and PHAR_SIG_SHA512 # session: dep on hash, used by soap # pcre: used by filter, zip # pcntl, readline: only used by CLI sapi # openssl: for PHAR_SIG_OPENSSL # zlib: used by image %if 0%{?rhel} > 7 export PKG_CONFIG_PATH=/opt/cpanel/ea-php82/root/usr/%{_lib}/pkgconfig:/opt/cpanel/ea-php82/root/usr/share/pkgconfig:/opt/cpanel/ea-libicu/lib/pkgconfig:/usr/%{_lib}/pkgconfig:/opt/cpanel/ea-oniguruma/%{_lib}/pkgconfig:/opt/cpanel/libargon2/lib64/pkgconfig:/usr/lib64/pkgconfig:/opt/cpanel/libargon2/lib64/pkgconfig %else export PKG_CONFIG_PATH=/opt/cpanel/ea-php82/root/usr/%{_lib}/pkgconfig:/opt/cpanel/ea-php82/root/usr/share/pkgconfig:/opt/cpanel/ea-libicu/lib/pkgconfig:/usr/%{_lib}/pkgconfig:/opt/cpanel/ea-openssl11/%{_lib}/pkgconfig:/opt/cpanel/ea-oniguruma/%{_lib}/pkgconfig:/opt/cpanel/libargon2/lib64/pkgconfig:/usr/lib64/pkgconfig:/opt/cpanel/libargon2/lib64/pkgconfig %endif %if !%{use_system_libxml2} export PKG_CONFIG_PATH="${PKG_CONFIG_PATH:+$PKG_CONFIG_PATH:}/opt/cpanel/ea-libxml2/%{_lib}/pkgconfig" %endif %if %{use_system_libxml2} export LIBXML_CFLAGS="$(pkg-config --cflags libxml-2.0)" export LIBXML_LIBS="$(pkg-config --libs libxml-2.0)" %else export LIBXML_CFLAGS=-I/opt/cpanel/ea-libxml2/include/libxml2 export LIBXML_LIBS="-L/opt/cpanel/ea-libxml2/%{_lib} -lxml2" export XSL_CFLAGS=-I/opt/cpanel/ea-libxml2/include/libxml2 export XSL_LIBS="-L/opt/cpanel/ea-libxml2/%{_lib} -lxml2" %endif %if 0%{?rhel} < 8 export CURL_CFLAGS=-I/opt/cpanel/libcurl/include export CURL_LIBS="-L/opt/cpanel/libcurl/%{_lib} -lcurl" %endif export JPEG_CFLAGS=-I/usr/include export JPEG_LIBS="-L/usr/%{_lib} -ljpeg" export KERBEROS_CFLAGS=-I/usr/include export KERBEROS_LIBS=-L/usr/%{_lib} export SASL_CFLAGS=-I/usr/include export SASL_LIBS=-L/usr/%{_lib} %if 0%{?rhel} < 8 export OPENSSL_CFLAGS=-I/opt/cpanel/ea-openssl11/include export OPENSSL_LIBS="-L/opt/cpanel/ea-openssl11/lib -lssl -lcrypto -lresolv" %endif export SYSTEMD_LIBS=-lsystemd export LIBZIP_CFLAGS=-I/opt/cpanel/ea-libzip/include export LIBZIP_LIBS="-L/opt/cpanel/ea-libzip/lib64 -lzip" %if 0%{?rhel} >= 8 export LDFLAGS="$XLDFLAGS -Wl,-rpath,/opt/cpanel/ea-libzip/lib64 -Wl,-rpath-link,/lib64 -Wl,-rpath,/lib64" %else export LDFLAGS="-Wl,-rpath=/opt/cpanel/ea-brotli/lib" %endif export LDFLAGS="$LDFLAGS -Wl,-rpath,/opt/cpanel/libargon2/lib64 -L/opt/cpanel/libargon2/lib64 -largon2" export ARGON2_CFLAGS=-I/opt/cpanel/libargon2/include %if !%{use_system_libxml2} export LDFLAGS="$LDFLAGS \ -Wl,--enable-new-dtags \ -Wl,-rpath,/opt/cpanel/ea-libxml2/lib \ -Wl,-rpath,/opt/cpanel/ea-libxml2/lib64" %endif ln -sf ../configure %configure \ --cache-file=../config.cache \ --with-libdir=%{_lib} \ --with-config-file-path=%{_sysconfdir} \ --with-config-file-scan-dir=%{_sysconfdir}/php.d \ --disable-debug \ --with-password-argon2=/opt/cpanel/libargon2 \ --with-pic \ --without-pear \ --with-bz2 \ --with-freetype \ --with-xpm \ --without-gdbm \ --with-gettext \ --with-iconv \ --with-jpeg \ --with-openssl \ %if %{with_pcre} --with-pcre-regex=%{_root_prefix} \ %endif --with-zlib \ --with-layout=GNU \ --enable-exif \ --enable-ftp \ --enable-sockets \ --with-kerberos \ --enable-shmop \ --with-sodium=shared \ --with-libxml \ --with-system-tzdata \ --with-mhash \ $* if test $? != 0; then tail -500 config.log : configure failed exit 1 fi %if 0%{?rhel} >= 9 sed -i 's/-flto=auto/-fno-lto/' Makefile sed -i 's/-ffat-lto-objects//' Makefile %endif # ZC-10931 - we are building libc-client in, but statically. This allows us to deprecate and remove # scl-libc-client, instead we have a build require for ea-libc-client # There is no way I could find in the configure scripts to build against libc-client statically # So I hit it with a hammer sed -i 's/-lc-client/-l:c-client.a -lkrb5 -lgssapi_krb5 -lkrb5 -lgssapi_krb5/g' scripts/php-config Makefile make %{?_smp_mflags} } # Build /usr/bin/php-cgi with the CGI SAPI, and most the shared extensions pushd build-cgi build --libdir=%{_libdir}/php \ --enable-pcntl \ --enable-opcache \ --enable-phpdbg \ --with-imap=shared,/opt/cpanel/ea-libc-client \ --with-imap-ssl \ --enable-mbstring=shared \ --enable-litespeed \ --with-webp \ %if %{with_avif} --with-avif \ %endif --enable-gd=shared \ --with-gmp=shared \ --enable-calendar=shared \ --enable-bcmath=shared \ --with-bz2=shared \ --enable-ctype=shared \ --enable-dba=shared --with-db4=%{_root_prefix} \ --with-tcadb=%{_root_prefix} \ --enable-exif=shared \ --enable-ftp=shared \ --with-gettext=shared \ --with-iconv=shared \ --enable-sockets=shared \ --enable-tokenizer=shared \ --with-xmlrpc=shared \ --with-ldap=shared --with-ldap-sasl \ --enable-mysqlnd=shared \ --with-mysqli=shared,mysqlnd \ --with-mysql-sock=%{mysql_sock} \ --enable-dom=shared \ --with-pgsql=shared \ --enable-simplexml=shared \ --enable-xml=shared \ --with-snmp=shared,%{_root_prefix} \ --enable-soap=shared \ --with-xsl=shared,%{_root_prefix} \ --enable-xmlreader=shared --enable-xmlwriter=shared \ %if 0%{?rhel} >= 8 --with-curl=shared \ %else --with-curl=shared,%{libcurl_prefix} \ %endif --enable-pdo=shared \ --with-pdo-odbc=shared,unixODBC,%{_root_prefix} \ --with-pdo-mysql=shared,mysqlnd \ --with-pdo-pgsql=shared,%{_root_prefix} \ --with-pdo-sqlite=shared,%{_root_prefix} \ --with-sqlite3=shared,%{_root_prefix} \ --enable-json=shared \ --with-zip=shared \ --without-readline \ --with-libedit \ --with-pspell=shared \ --enable-phar=shared \ --with-tidy=shared,%{libtidy_prefix} \ --enable-sysvmsg=shared --enable-sysvshm=shared --enable-sysvsem=shared \ --enable-shmop=shared \ --enable-posix=shared \ --with-unixODBC=shared,%{_root_prefix} \ --enable-intl=shared \ --with-enchant=shared,%{_root_prefix} \ --enable-fileinfo=shared popd without_shared="--disable-gd \ --disable-dom --disable-dba --without-unixODBC \ --disable-opcache \ --disable-xmlreader --disable-xmlwriter \ --without-sqlite3 --disable-phar --disable-fileinfo \ --disable-json \ --without-pspell \ --without-curl --disable-posix --disable-xml \ --disable-simplexml --disable-exif --without-gettext \ --without-iconv --disable-ftp --without-bz2 --disable-ctype \ --disable-shmop --disable-sockets --disable-tokenizer \ --disable-sysvmsg --disable-sysvshm --disable-sysvsem \ --without-gmp --disable-calendar" # Build php-fpm pushd build-fpm build --enable-fpm \ --with-fpm-systemd \ --libdir=%{_libdir}/php \ --without-mysqli \ --disable-pdo \ --enable-pcntl \ ${without_shared} popd %install [ "$RPM_BUILD_ROOT" != "/" ] && rm -rf $RPM_BUILD_ROOT # Make the eaphp## symlinks install -d $RPM_BUILD_ROOT/usr/local/bin ln -sf /opt/cpanel/ea-php82/root/usr/bin/php $RPM_BUILD_ROOT/usr/local/bin/ea-php82 install -d $RPM_BUILD_ROOT/usr/bin ln -sf /opt/cpanel/ea-php82/root/usr/bin/php-cgi $RPM_BUILD_ROOT/usr/bin/ea-php82 make -C build-fpm install-fpm \ INSTALL_ROOT=$RPM_BUILD_ROOT # Install everything from the CGI SAPI build make -C build-cgi install \ INSTALL_ROOT=$RPM_BUILD_ROOT # Install the default configuration file and icons install -m 755 -d $RPM_BUILD_ROOT%{_sysconfdir}/ install -m 644 %{SOURCE2} $RPM_BUILD_ROOT%{_sysconfdir}/php.ini # For third-party packaging: install -m 755 -d $RPM_BUILD_ROOT%{_datadir}/php install -m 755 -d $RPM_BUILD_ROOT%{_sysconfdir}/php.d install -m 755 -d $RPM_BUILD_ROOT%{_localstatedir}/lib install -m 755 build-cgi/sapi/litespeed/php $RPM_BUILD_ROOT%{_bindir}/lsphp # PHP-FPM stuff # Log # we need to do the following to compensate for the way # EA4 on OBS was built rather than EA4-Opensuse install -d $RPM_BUILD_ROOT/opt/cpanel/%{ns_name}-%{pkg}/root/usr/var/log/php-fpm install -d $RPM_BUILD_ROOT/opt/cpanel/%{ns_name}-%{pkg}/root/usr/var/run/php-fpm ln -sf /opt/cpanel/%{ns_name}-%{pkg}/root/usr/var/log/php-fpm $RPM_BUILD_ROOT%{_localstatedir}/log/php-fpm ln -sf /opt/cpanel/%{ns_name}-%{pkg}/root/usr/var/run/php-fpm $RPM_BUILD_ROOT%{_localstatedir}/run/php-fpm # Config install -m 755 -d $RPM_BUILD_ROOT%{_sysconfdir}/php-fpm.d install -m 644 %{SOURCE4} $RPM_BUILD_ROOT%{_sysconfdir}/php-fpm.conf sed -e 's:/run:%{_localstatedir}/run:' \ -e 's:/var/log:%{_localstatedir}/log:' \ -e 's:/etc:%{_sysconfdir}:' \ -i $RPM_BUILD_ROOT%{_sysconfdir}/php-fpm.conf install -m 644 %{SOURCE5} $RPM_BUILD_ROOT%{_sysconfdir}/php-fpm.d/www.conf sed -e 's:/var/lib:%{_localstatedir}/lib:' \ -e 's:/var/log:%{_localstatedir}/log:' \ -i $RPM_BUILD_ROOT%{_sysconfdir}/php-fpm.d/www.conf mv $RPM_BUILD_ROOT%{_sysconfdir}/php-fpm.d/www.conf $RPM_BUILD_ROOT%{_sysconfdir}/php-fpm.d/www.conf.example mv $RPM_BUILD_ROOT%{_sysconfdir}/php-fpm.conf.default . # tmpfiles.d # install -m 755 -d $RPM_BUILD_ROOT%{_prefix}/lib/tmpfiles.d # install -m 644 php-fpm.tmpfiles $RPM_BUILD_ROOT%{_prefix}/lib/tmpfiles.d/php-fpm.conf # install systemd unit files and scripts for handling server startup install -m 755 -d $RPM_BUILD_ROOT%{_unitdir} install -m 644 %{SOURCE6} $RPM_BUILD_ROOT%{_unitdir}/%{?scl_prefix}php-fpm.service sed -e 's:/run:%{_localstatedir}/run:' \ -e 's:/etc:%{_sysconfdir}:' \ -e 's:/usr/sbin:%{_sbindir}:' \ -i $RPM_BUILD_ROOT%{_unitdir}/%{?scl_prefix}php-fpm.service # LogRotate install -m 755 -d $RPM_BUILD_ROOT%{_root_sysconfdir}/logrotate.d install -m 644 %{SOURCE7} $RPM_BUILD_ROOT%{_root_sysconfdir}/logrotate.d/%{?scl_prefix}php-fpm sed -e 's:/run:%{_localstatedir}/run:' \ -e 's:/var/log:%{_localstatedir}/log:' \ -i $RPM_BUILD_ROOT%{_root_sysconfdir}/logrotate.d/%{?scl_prefix}php-fpm # Environment file install -m 755 -d $RPM_BUILD_ROOT%{_sysconfdir}/sysconfig install -m 644 %{SOURCE8} $RPM_BUILD_ROOT%{_sysconfdir}/sysconfig/php-fpm # make the cli commands available in standard root for SCL build %if 0%{?scl:1} #install -m 755 -d $RPM_BUILD_ROOT%{_root_bindir} #ln -s %{_bindir}/php $RPM_BUILD_ROOT%{_root_bindir}/%{?scl_prefix}php #ln -s %{_bindir}/phar.phar $RPM_BUILD_ROOT%{_root_bindir}/%{?scl_prefix}phar %endif # Generate files lists and stub .ini files for each subpackage for mod in pgsql odbc ldap snmp imap \ mysqlnd mysqli pdo_mysql \ mbstring gd dom xsl soap bcmath dba xmlreader xmlwriter \ simplexml bz2 calendar ctype exif ftp gettext gmp iconv \ sockets tokenizer opcache \ pdo pdo_pgsql pdo_odbc \ pdo_sqlite sqlite3 \ enchant \ phar fileinfo \ intl \ zip \ tidy \ sodium \ pspell curl xml \ posix shmop sysvshm sysvsem sysvmsg do # for extension load order case $mod in opcache) # Zend extensions ini=10-${mod}.ini;; pdo_*|mysqli|xmlreader) # Extensions with dependencies on 20-* ini=30-${mod}.ini;; *) # Extensions with no dependency ini=20-${mod}.ini;; esac # Some extensions have their own config file # # NOTE: rpmlint complains about the spec file using %{_sourcedir} macro. # However, our usage acceptable given the transient nature of the ini files. # https://fedoraproject.org/wiki/Packaging:RPM_Source_Dir?rd=PackagingDrafts/RPM_Source_Dir if [ -f %{_sourcedir}/$ini ]; then cp -p %{_sourcedir}/$ini %{buildroot}%{_sysconfdir}/php.d/$ini else cat > %{buildroot}%{_sysconfdir}/php.d/$ini < files.${mod} <> files.xml # mysqlnd cat files.mysqli \ files.pdo_mysql \ >> files.mysqlnd # Split out the PDO modules cat files.pdo_pgsql >> files.pgsql cat files.pdo_odbc >> files.odbc # sysv* packaged in php-process cat files.shmop files.sysv* > files.process cat files.pdo_sqlite >> files.pdo cat files.sqlite3 >> files.pdo # Package json and phar in -common. cat files.phar \ files.ctype \ files.tokenizer > files.common # The default Zend OPcache blacklist file install -m 644 %{SOURCE51} $RPM_BUILD_ROOT%{_sysconfdir}/php.d/opcache-default.blacklist # Install the macros file: install -d $RPM_BUILD_ROOT%{_root_sysconfdir}/rpm install -m 644 -c macros.php \ $RPM_BUILD_ROOT%{_root_sysconfdir}/rpm/macros.%{name} # Remove unpackaged files rm -rf $RPM_BUILD_ROOT%{_libdir}/php/modules/*.a \ $RPM_BUILD_ROOT%{_bindir}/{phptar} \ $RPM_BUILD_ROOT%{_datadir}/pear \ $RPM_BUILD_ROOT%{_libdir}/libphp8.la # Remove irrelevant docs rm -f README.{Zeus,QNX,CVS-RULES} %clean [ "$RPM_BUILD_ROOT" != "/" ] && rm -rf $RPM_BUILD_ROOT rm files.* macros.* %post fpm %if 0%{?systemd_post:1} %systemd_post %{?scl_prefix}php-fpm.service %else if [ $1 = 1 ]; then # Initial installation /bin/systemctl daemon-reload >/dev/null 2>&1 || : fi %endif %preun fpm %if 0%{?systemd_preun:1} %systemd_preun %{?scl_prefix}php-fpm.service %else if [ $1 = 0 ]; then # Package removal, not upgrade /bin/systemctl --no-reload disable %{?scl_prefix}php-fpm.service >/dev/null 2>&1 || : /bin/systemctl stop %{?scl_prefix}php-fpm.service >/dev/null 2>&1 || : fi %endif %postun fpm %if 0%{?systemd_postun_with_restart:1} %systemd_postun_with_restart %{?scl_prefix}php-fpm.service %else /bin/systemctl daemon-reload >/dev/null 2>&1 || : if [ $1 -ge 1 ]; then # Package upgrade, not uninstall /bin/systemctl try-restart %{?scl_prefix}php-fpm.service >/dev/null 2>&1 || : fi %endif # Handle upgrading from SysV initscript to native systemd unit. # We can tell if a SysV version of php-fpm was previously installed by # checking to see if the initscript is present. %triggerun fpm -- %{?scl_prefix}php-fpm if [ -f /etc/rc.d/init.d/%{?scl_prefix}php-fpm ]; then # Save the current service runlevel info # User must manually run systemd-sysv-convert --apply php-fpm # to migrate them to systemd targets /usr/bin/systemd-sysv-convert --save %{?scl_prefix}php-fpm >/dev/null 2>&1 || : # Run these because the SysV package being removed won't do them /sbin/chkconfig --del %{?scl_prefix}php-fpm >/dev/null 2>&1 || : /bin/systemctl try-restart %{?scl_prefix}php-fpm.service >/dev/null 2>&1 || : fi %{!?_licensedir:%global license %%doc} %files %defattr(-,root,root) %files common -f files.common %defattr(-,root,root) %doc CODING_STANDARDS.md EXTENSIONS LICENSE NEWS README* %doc Zend/ZEND_* TSRM_LICENSE %doc libmagic_LICENSE %doc php.ini-* %config(noreplace) %{_sysconfdir}/php.ini %dir %{_sysconfdir}/php.d %dir %{_libdir}/php %dir %{_libdir}/php/modules %dir %{_localstatedir}/lib %dir %{_datadir}/php %files sodium %defattr(-, root, root) %{_libdir}/php/modules/sodium.so %config(noreplace) %{_sysconfdir}/php.d/20-sodium.ini %files cli %defattr(-,root,root) %{_bindir}/php # Add the ea-php## symlinks /usr/bin/%{ns_name}-%{pkg} /usr/local/bin/%{ns_name}-%{pkg} %{_bindir}/php-cgi %{_bindir}/phar.phar %{_bindir}/phar # provides phpize here (not in -devel) for pecl command %{_bindir}/phpize %{_mandir}/man1/php.1* %{_mandir}/man1/php-cgi.1* %{_mandir}/man1/phar.1* %{_mandir}/man1/phar.phar.1* %{_mandir}/man1/phpize.1* #{?scl: %{_root_bindir}/%{?scl_prefix}php} #{?scl: %{_root_bindir}/%{?scl_prefix}phar} %files dbg %defattr(-,root,root) %{_bindir}/phpdbg %{_mandir}/man1/phpdbg.1* %doc sapi/phpdbg/CREDITS %files fpm %defattr(-,root,root) # we need to do the following to compensate for the way # EA4 on OBS was built rather than EA4-Opensuse %dir /opt/cpanel/%{ns_name}-%{pkg}/root/usr/var/log/php-fpm %dir /opt/cpanel/%{ns_name}-%{pkg}/root/usr/var/run/php-fpm #%attr(770,nobody,root) %dir /opt/cpanel/%{ns_name}-%{pkg}/root/usr/var/log/php-fpm #%attr(711,root,root) %dir /opt/cpanel/%{ns_name}-%{pkg}/root/usr/var/run/php-fpm %doc php-fpm.conf.default %license fpm_LICENSE %config(noreplace) %{_sysconfdir}/php-fpm.conf %config(noreplace) %{_sysconfdir}/php-fpm.d/www.conf.example %config(noreplace) %{_sysconfdir}/php-fpm.d/www.conf.default %config(noreplace) %{_root_sysconfdir}/logrotate.d/%{?scl_prefix}php-fpm %config(noreplace) %{_sysconfdir}/sysconfig/php-fpm # %{_prefix}/lib/tmpfiles.d/php-fpm.conf %{_unitdir}/%{?scl_prefix}php-fpm.service %{_sbindir}/php-fpm %attr(0710,root,root) %dir %{_sysconfdir}/php-fpm.d # log owned by nobody for log #%attr(770,nobody,root) %{_localstatedir}/log/php-fpm #%attr(711,root,root) %{_localstatedir}/run/php-fpm %{_localstatedir}/log/php-fpm %{_localstatedir}/run/php-fpm %{_mandir}/man8/php-fpm.8* %dir %{_datadir}/fpm %{_datadir}/fpm/status.html %dir %{_sysconfdir}/sysconfig %dir %{_mandir}/man8 %dir %{_localstatedir}/log %dir %{_localstatedir}/run %files litespeed %defattr(-,root,root,-) %{_bindir}/lsphp %files devel %defattr(-,root,root,-) %{_bindir}/php-config %{_includedir}/php %{_libdir}/php/build %{_mandir}/man1/php-config.1* %{_root_sysconfdir}/rpm/macros.%{name} %files bz2 -f files.bz2 %files calendar -f files.calendar %files curl -f files.curl %files exif -f files.exif %files fileinfo -f files.fileinfo %files ftp -f files.ftp %files gettext -f files.gettext %files iconv -f files.iconv %files sockets -f files.sockets %files posix -f files.posix %files pgsql -f files.pgsql %files odbc -f files.odbc %files imap -f files.imap %files ldap -f files.ldap %files snmp -f files.snmp %files xml -f files.xml %files mbstring -f files.mbstring %defattr(-,root,root,-) %doc libmbfl_LICENSE %files gd -f files.gd %defattr(-,root,root,-) %files soap -f files.soap %files bcmath -f files.bcmath %defattr(-,root,root,-) %license libbcmath_LICENSE %files gmp -f files.gmp %files dba -f files.dba %files pdo -f files.pdo %files tidy -f files.tidy %files pspell -f files.pspell %files intl -f files.intl %files process -f files.process %files enchant -f files.enchant %files mysqlnd -f files.mysqlnd %files opcache -f files.opcache %defattr(-,root,root,-) %config(noreplace) %{_sysconfdir}/php.d/opcache-default.blacklist %files zip -f files.zip %changelog * Tue Oct 20 2026 Cory McIntire - 8.2.35-1 - EA-13610: Update ea-php82 from v8.2.34 to v8.2.35 (CVE-2026-109618, CVE-2026-109619) * Wed Sep 30 2026 Dan Muey - 8.2.34-2 - EA4-334: Fixup avif deps to work with A9 EPEL conflict * Fri Sep 25 2026 EA4 Update Bot - 8.2.34-1 - EA-13567: Update ea-php82 from v8.2.33 to v8.2.34 * Mon Sep 14 2026 Heekyoung Park - 8.2.33-2 - EA4-326: Fix php-intl to link against ea-libicu on AlmaLinux 9 * Thu Jul 30 2026 Cory McIntire - 8.2.33-1 - EA-13519: Update ea-php82 from v8.2.32 to v8.2.33 - Fixed libgd vulnerability. (CVE-2026-9672; severity not yet assigned) - Fixed SQL injection via E'...' backslash breakout. (CVE-2026-17543; High, CVSS 4.0 8.1) - Fixed crash via recursive symlinks in Phar archives. (CVE-2026-7260; Medium, CVSS 4.0 5.4) * Sat Jul 04 2026 EA4 Update Bot - 8.2.32-1 - EA-13482: Update ea-php82 from v8.2.31 to v8.2.32 - Fixed bug GH-22187 (Memory corruption in openssl_encrypt with AES-WRAP-PAD). (CVE-2026-14355) * Wed May 13 2026 Heekyoung Park - 8.2.31-2 - EA4-260: Build for Ubuntu 26.04 * Thu May 13 2026 Cory McIntire - 8.2.31-1 - EA-13427: Update ea-php82 from v8.2.30 to v8.2.31 - Fixed GHSA-7qg2-v9fj-4mwv (XSS within FPM status endpoint). (CVE-2026-6735) - Fixed GHSA-wm6j-2649-pv75 (Null pointer dereference in mb_ereg_search_init()). (CVE-2026-7259) - Fixed GHSA-w476-322c-wpvm (SQL injection via NUL bytes in PDO_Firebird). (CVE-2025-14179) - Fixed GHSA-85c2-q967-79q5 (Stale SOAP_GLOBAL ref_map pointer). (CVE-2026-6722) - Fixed GHSA-m33r-qmcv-p97q (Use-after-free in SOAP persistence session). (CVE-2026-7261) - Fixed GHSA-hmxp-6pc4-f3vv (Broken Apache map value NULL check in SOAP). (CVE-2026-7262) - Fixed GHSA-96wq-48vp-hh57 (Signed integer overflow of char array offset). (CVE-2026-7568) - Fixed GHSA-m8rr-4c36-8gq4 (Unsigned char handling in ctype.h functions). (CVE-2026-7258) * Thu Jan 08 2026 Gary Stanley - 8.2.30-2 - EA4-230: Use system libxml2 in PHP 8.2 * Thu Dec 18 2025 Cory McIntire - 8.2.30-1 - EA-13297: Update ea-php82 from v8.2.29 to v8.2.30 - Fixed GHSA-8xr5-qppj-gvwj (PDO quoting result null deref). (CVE-2025-14180) -Fixed GHSA-h96m-rvf9-jgm2 (Heap buffer overflow in array_merge()). (CVE-2025-14178) - Fixed GHSA-3237-qqm7-mfv7 (Information Leak of Memory in getimagesize). (CVE-2025-14177) * Tue Sep 23 2025 Chris Castillo - 8.2.29-3 - EA-13088: Update php-litespeed to 8.3 * Wed Sep 10 2025 Dan Muey - 8.2.29-2 - EA4-122: map u24 libodbc for PHP extension * Thu Jul 03 2025 Cory McIntire - 8.2.29-1 - EA-12996: Update ea-php82 from v8.2.28 to v8.2.29 - Fixed GHSA-3cr5-j632-f35r (Null byte termination in hostnames). (CVE-2025-1220) - Fixed GHSA-453j-q27h-5p8x (NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix). (CVE-2025-6491) - Fixed GHSA-hrwm-9436-5mv3 (pgsql extension does not check for errors during escaping). (CVE-2025-1735) * Thu Mar 13 2025 Cory McIntire - 8.2.28-1 - EA-12772: Update ea-php82 from v8.2.27 to v8.2.28 - Fixed GHSA-hgf54-96fm-v528 (Stream HTTP wrapper header check might omit basic auth header). (CVE-2025-1736) - Fixed GHSA-52jp-hrpf-2jff (Stream HTTP wrapper truncate redirect location to 1024 bytes). (CVE-2025-1861) - Fixed GHSA-pcmh-g36c-qc44 (Streams HTTP wrapper does not fail for headers without colon). (CVE-2025-1734) - Fixed GHSA-v8xr-gpvj-cx9g (Header parser of `http` stream wrapper does not handle folded headers). (CVE-2025-1217) - Fixed GHSA-p3x9-6h7p-cgfc (libxml streams use wrong `content-type` header when requesting a redirected resource). (CVE-2025-1219) - Fixed GHSA-rwp7-7vc6-8477 (Reference counting in php_request_shutdown causes Use-After-Free). (CVE-2024-11235) * Thu Dec 19 2024 Cory McIntire - 8.2.27-1 - EA-12617: Update ea-php82 from v8.2.26 to v8.2.27 * Thu Nov 21 2024 Cory McIntire - 8.2.26-1 - EA-12577: Update ea-php82 from v8.2.25 to v8.2.26 - (Single byte overread with convert.quoted-printable-decode filter). (CVE-2024-11233) - (Configuring a proxy in a stream context might allow for CRLF injection in URIs). (CVE-2024-11234) - (Integer overflow in the dblib quoter causing OOB writes). (CVE-2024-11236) - (Integer overflow in the firebird quoter causing OOB writes). (CVE-2024-11236) - (Leak partial content of the heap through heap buffer over-read). (CVE-2024-8929) - (OOB access in ldap_escape). (CVE-2024-8932) * Fri Oct 25 2024 Julian Brown - 8.2.25-2 - ZC-12246: Correct conffiles for Ubuntu * Thu Oct 24 2024 Cory McIntire - 8.2.25-1 - EA-12499: Update ea-php82 from v8.2.24 to v8.2.25 * Thu Sep 26 2024 Cory McIntire - 8.2.24-1 - EA-12423: Update ea-php82 from v8.2.23 to v8.2.24 - Fixed bug GHSA-865w-9rf3-2wh5 (Logs from childrens may be altered). (CVE-2024-9026) - Fixed bug GHSA-9pqp-7h25-4f32 (Erroneous parsing of multipart form data). (CVE-2024-8925) - Fixed bug GHSA-p99j-rfp4-xqvq (Bypass of CVE-2024-4577, Parameter Injection Vulnerability). (CVE-2024-8926) - Fixed bug GHSA-94p6-54jq-9mwp (cgi.force_redirect configuration is bypassable due to the environment variable collision). (CVE-2024-8927) * Fri Sep 20 2024 Cory McIntire - 8.2.23-1 - EA-12399: Update ea-php82 from v8.2.22 to v8.2.23 * Tue Sep 17 2024 Dan Muey - 8.2.22-2 - ZC-12153: make opcache INI a configfile for debs * Thu Aug 01 2024 Cory McIntire - 8.2.22-1 - EA-12308: Update ea-php82 from v8.2.21 to v8.2.22 * Tue Jul 09 2024 Cory McIntire - 8.2.21-1 - EA-12275: Update ea-php82 from v8.2.20 to v8.2.21 * Thu Jun 06 2024 Cory McIntire - 8.2.20-1 - EA-12194: Update ea-php82 from v8.2.19 to v8.2.20 - Fixed bug GHSA-3qgc-jrrr-25jv (Bypass of CVE-2012-1823, Argument Injection in PHP-CGI). (CVE-2024-4577) - Fixed bug GHSA-w8qr-v226-r27w (Filter bypass in filter_var FILTER_VALIDATE_URL). (CVE-2024-5458) - Fixed bug GHSA-9fcc-425m-g385 (Bypass of CVE-2024-1874). (CVE-2024-5585) - The openssl_private_decrypt function in PHP, when using PKCS1 padding (OPENSSL_PKCS1_PADDING, which is the default), is vulnerable to the Marvin Attack * Thu May 09 2024 Cory McIntire - 8.2.19-1 - EA-12141: Update ea-php82 from v8.2.18 to v8.2.19 * Thu Apr 11 2024 Brian Mendoza - 8.2.18-2 - ZC-11730: Add GD support for AVIF format on Ubuntu 22 and higher * Thu Apr 11 2024 Cory McIntire - 8.2.18-1 - EA-12085: Update ea-php82 from v8.2.17 to v8.2.18 - Fixed bug GHSA-pc52-254m-w9w7 (Command injection via array-ish $command parameter of proc_open). (CVE-2024-1874) - Fixed bug GHSA-wpj3-hf5j-x4v4 (__Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix). (CVE-2024-2756) - Fixed bug GHSA-h746-cjrr-wfmr (password_verify can erroneously return true, opening ATO risk). (CVE-2024-3096) * Thu Mar 21 2024 Brian Mendoza - 8.2.17-2 - ZC-11561: Add GD support for AVIF format on RHEL 8 and newer (RHEL only) * Thu Mar 14 2024 Cory McIntire - 8.2.17-1 - EA-12016: Update ea-php82 from v8.2.16 to v8.2.17 * Thu Feb 15 2024 Cory McIntire - 8.2.16-1 - EA-11977: Update ea-php82 from v8.2.15 to v8.2.16 * Thu Jan 18 2024 Cory McIntire - 8.2.15-1 - EA-11919: Update ea-php82 from v8.2.14 to v8.2.15 * Wed Jan 03 2024 Travis Holloway - 8.2.14-1 - EA-11893: Update ea-php82 from v8.2.13 to v8.2.14 * Mon Dec 18 2023 Travis Holloway - 8.2.13-4 - EA-10753: Have snmp module require 'snmp-mibs-downloader' for deb * Tue Nov 30 2023 Tim Mullin - 8.2.13-3 - EA-11821: Patch to build with the latest ea-libxml2 * Tue Nov 28 2023 Julian Brown - 8.2.13-2 - ZC-11419: Correct Ubuntu build issues * Thu Nov 23 2023 Cory McIntire - 8.2.13-1 - EA-11823: Update ea-php82 from v8.2.12 to v8.2.13 * Thu Oct 26 2023 Cory McIntire - 8.2.12-1 - EA-11774: Update ea-php82 from v8.2.11 to v8.2.12 * Mon Oct 02 2023 Cory McIntire - 8.2.11-1 - EA-11717: Update ea-php82 from v8.2.10 to v8.2.11 * Thu Aug 31 2023 Cory McIntire - 8.2.10-1 - EA-11658: Update ea-php82 from v8.2.9 to v8.2.10 * Wed Aug 16 2023 Cory McIntire - 8.2.9-1 - EA-11619: Update ea-php82 from v8.2.8 to v8.2.9 - Libxml: Fixed bug GHSA-3qrf-m4j2-pcrr (Security issue with external entity loading in XML without enabling it). (CVE-2023-3823) - Phar: Fixed bug GHSA-jqcx-ccgc-xwhv (Buffer mismanagement in phar_dir_read()). (CVE-2023-3824) * Fri Jul 07 2023 Cory McIntire - 8.2.8-1 - EA-11539: Update ea-php82 from v8.2.7 to v8.2.8 * Thu Jun 08 2023 Cory McIntire - 8.2.7-1 - EA-11478: Update ea-php82 from v8.2.6 to v8.2.7 - Fixed bug GHSA-76gg-c692-v2mw - (Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP). * Tue May 30 2023 Travis Holloway - 8.2.6-5 - EA-11447: Increase default php memory_limit for new installs from 32M to 128M * Thu May 18 2023 Julian Brown - 8.2.6-4 - ZC-10931: Link statically against libc-client * Wed May 17 2023 Julian Brown - 8.2.6-3 - ZC-10950: Fix build problems * Mon May 16 2023 Brian Mendoza - 8.2.6-2 - ZC-10936: Clean up Makefile and remove debug-package-nil * Thu May 11 2023 Cory McIntire - 8.2.6-1 - EA-11413: Update ea-php82 from v8.2.5 to v8.2.6 * Tue Apr 18 2023 Julian Brown - 8.2.5-2 - ZC-10873: Simplify the libidn deps, for building on Ubuntu 20 and 22 * Thu Apr 13 2023 Cory McIntire - 8.2.5-1 - EA-11355: Update ea-php82 from v8.2.4 to v8.2.5 * Thu Mar 16 2023 Cory McIntire - 8.2.4-1 - EA-11301: Update ea-php82 from v8.2.3 to v8.2.4 * Tue Feb 14 2023 Cory McIntire - 8.2.3-1 - EA-11226: Update ea-php82 from v8.2.2 to v8.2.3 - Fixed bug #81744 (Password_verify() always return true with some hash). (CVE-2023-0567) - Fixed bug #81746 (1-byte array overrun in common path resolve code). (CVE-2023-0568) - Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662) * Tue Feb 07 2023 Tim Mullin - 8.2.2-2 - EA-11212: Fix PKG_CONFIG_PATH * Thu Feb 02 2023 Cory McIntire - 8.2.2-1 - EA-11200: Update ea-php82 from v8.2.1 to v8.2.2 * Wed Jan 18 2023 Tim Mullin - 8.2.1-3 - EA-11075: Correct default value description for log_errors in php.ini * Mon Jan 09 2023 Brian Mendoza - 8.2.1-2 - ZC-10585: Build for CentOS7 * Thu Jan 05 2023 Cory McIntire - 8.2.1-1 - EA-11136: Update ea-php82 from v8.2.0 to v8.2.1 - PDO::quote() may return unquoted string). (CVE-2022-31631) * Mon Dec 12 2022 Brian Mendoza - 8.2.0-4 - ZC-10495: Update to official PHP 8.2 release * Wed Nov 16 2022 Travis Holloway - 8.2.0-3 - EA-11039: Ensure php.ini is marked as a config file on debian based systems * Wed Nov 02 2022 Julian Brown - 8.2.0-2 - ZC-10364: ZC-10364: Update to new php_litespeed * Fri Oct 07 2022 Brian Mendoza - 8.2.0-1 - ZC-10359: Initial Build