php83: 8.3.11 -> 8.3.12, php82: 8.2.23 -> 8.2.24, php81: 8.1.29 -> 8.1.30 #344937
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Fixes CVE-2024-8927, CVE-2024-9026 and CVE-2024-8925. Changes: https://www.php.net/ChangeLog-8.php#8.1.30
Fixes CVE-2024-8927, CVE-2024-9026 and CVE-2024-8925. Changes: https://www.php.net/ChangeLog-8.php#8.2.24
Fixes CVE-2024-8927, CVE-2024-9026 and CVE-2024-8925. Changes: https://www.php.net/ChangeLog-8.php#8.3.12
LeSuisse
added
1.severity: security
LeSuisse
requested review from
jtojnar,
aanderse,
drupol,
globin,
Ma27 and
talyz
as code owners
fpletz
approved these changes
Sep 28, 2024
|
For Can take care of this in half an hour I guess. |
This reverts commit bc9dacd. Patch is now upstream.
|
Sorry I did revert it locally but forget to push the change after I tested it... |
|
Will merge when ofborg is green. |
|
Backport failed for Please cherry-pick the changes locally and resolve any conflicts. git fetch origin release-24.05
git worktree add -d .worktree/backport-344937-to-release-24.05 origin/release-24.05
cd .worktree/backport-344937-to-release-24.05
git switch --create backport-344937-to-release-24.05
git cherry-pick -x 27f1613fd0124ae2fdeb30689422e66f077dfe0d 922f9d74de207dc12fceb8ca3c7c108b7d39cfcb bb8164e2620ab83e4dbff753107be1af7c66d923 5c8b1b25bf33171b2cbd08dd248652049e802ae5 |
|
The backport is going to take some time. We need to backport everything that has been done since the last backport to 24.05. Anyone willing to help? |
|
I was about to do it now. |
|
I started here: #345177 feel free to amend it ! |
13 tasks
|
Tests fail on macOS: https://github.com/cachix/devenv/actions/runs/11125063603/job/30922426947#step:7:527 |
|
@domenkozar looking into it. |
|
Seems to be us this time fwiw: |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description of changes
Fixes CVE-2024-8927, CVE-2024-9026 and CVE-2024-8925.
Changes:
https://www.php.net/ChangeLog-8.php#8.3.12
https://www.php.net/ChangeLog-8.php#8.2.24
https://www.php.net/ChangeLog-8.php#8.1.30
Things done
nix.conf? (See Nix manual)sandbox = relaxedsandbox = truenix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage./result/bin/)Result of
nixpkgs-reviewrun on x86_64-linux 14 packages failed to build:
590 packages built:
Add a 👍 reaction to pull requests you find important.