From daf78364266dba5ac8562130825a56cd87e9fa17 Mon Sep 17 00:00:00 2001 From: Thomas Gerbet Date: Fri, 27 Sep 2024 21:30:57 +0200 Subject: [PATCH 1/3] php81: 8.1.29 -> 8.1.30 Fixes CVE-2024-8927, CVE-2024-9026 and CVE-2024-8925. Changes: https://www.php.net/ChangeLog-8.php#8.1.30 (cherry picked from commit 27f1613fd0124ae2fdeb30689422e66f077dfe0d) --- pkgs/development/interpreters/php/8.1.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/interpreters/php/8.1.nix b/pkgs/development/interpreters/php/8.1.nix index 4b53f9e6c84b3..3938ca414524b 100644 --- a/pkgs/development/interpreters/php/8.1.nix +++ b/pkgs/development/interpreters/php/8.1.nix @@ -2,8 +2,8 @@ let base = callPackage ./generic.nix ((removeAttrs _args [ "fetchpatch" ]) // { - version = "8.1.29"; - hash = "sha256-h6YDEyY/L1M/GA5xknLKXkfNmITU7DyTcgGY6v+uCCc="; + version = "8.1.30"; + hash = "sha256-yxYl5axJuRA3R34+d2e7BiQ0OXGuuZL0eRthivVx0j4="; extraPatches = [ # Fix build with libxml 2.12+. # Patch from https://github.com/php/php-src/commit/0a39890c967aa57225bb6bdf4821aff7a3a3c082 From ce5e0253dc5351afd25d3fa7c2fe10902397dfe8 Mon Sep 17 00:00:00 2001 From: Thomas Gerbet Date: Fri, 27 Sep 2024 21:32:19 +0200 Subject: [PATCH 2/3] php82: 8.2.23 -> 8.2.24 Fixes CVE-2024-8927, CVE-2024-9026 and CVE-2024-8925. Changes: https://www.php.net/ChangeLog-8.php#8.2.24 (cherry picked from commit 922f9d74de207dc12fceb8ca3c7c108b7d39cfcb) --- pkgs/development/interpreters/php/8.2.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/interpreters/php/8.2.nix b/pkgs/development/interpreters/php/8.2.nix index a119dec0ca4e7..50f70617fe1cd 100644 --- a/pkgs/development/interpreters/php/8.2.nix +++ b/pkgs/development/interpreters/php/8.2.nix @@ -2,8 +2,8 @@ let base = callPackage ./generic.nix (_args // { - version = "8.2.23"; - hash = "sha256-98kM2no8HeAfO/t7Rp1S3snrovO4MyCDYAT5wu7K4ms="; + version = "8.2.24"; + hash = "sha256-TMduxkTu6X0XySv+jQ6EcU/t8pmlOLffrcBjndDcQy8="; }); in base.withExtensions ({ all, ... }: with all; ([ From 8762b8ed44d543c4d9e0d2d85fd4dff39bd5d6f1 Mon Sep 17 00:00:00 2001 From: Thomas Gerbet Date: Fri, 27 Sep 2024 21:33:36 +0200 Subject: [PATCH 3/3] php83: 8.3.11 -> 8.3.12 Fixes CVE-2024-8927, CVE-2024-9026 and CVE-2024-8925. Changes: https://www.php.net/ChangeLog-8.php#8.3.12 (cherry picked from commit bb8164e2620ab83e4dbff753107be1af7c66d923) --- pkgs/development/interpreters/php/8.3.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/interpreters/php/8.3.nix b/pkgs/development/interpreters/php/8.3.nix index bb314d4e854d6..cc7d87038a7dc 100644 --- a/pkgs/development/interpreters/php/8.3.nix +++ b/pkgs/development/interpreters/php/8.3.nix @@ -2,8 +2,8 @@ let base = callPackage ./generic.nix (_args // { - version = "8.3.11"; - hash = "sha256-ZkDiRVCAqJrcQdTle7BPjCv7fuxif+GZr5c7/zTX8O4="; + version = "8.3.12"; + hash = "sha256-gHYzSWzNs3CokFRY24K9ZzZumKbVlyiRS3l7h+nK7L8="; }); in base.withExtensions ({ all, ... }: with all; ([