Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package php8 for openSUSE:Factory checked in at 2025-12-20 21:45:19 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/php8 (Old) and /work/SRC/openSUSE:Factory/.php8.new.1928 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "php8" Sat Dec 20 21:45:19 2025 rev:97 rq:1323606 version:8.4.16 Changes: -------- --- /work/SRC/openSUSE:Factory/php8/php8.changes 2025-12-18 18:31:13.961060796 +0100 +++ /work/SRC/openSUSE:Factory/.php8.new.1928/php8.changes 2025-12-20 21:45:35.836976455 +0100 @@ -1,0 +2,60 @@ +Fri Dec 19 07:51:15 UTC 2025 - Petr Gajdos <[email protected]> + +- version update to 8.4.16 + Core: + Sync all boost.context files with release 1.86.0. + Fixed bug GH-20435 (SensitiveParameter doesn't work for named argument passing to variadic parameter). + Fixed bug GH-20286 (use-after-destroy during userland stream_close()). + Bz2: + Fix assertion failures resulting in crashes with stream filter object parameters. + Date: + Fix crashes when trying to instantiate uninstantiable classes via date static constructors. + DOM: + Fix memory leak when edge case is hit when registering xpath callback. + Fixed bug GH-20395 (querySelector and querySelectorAll requires elements in $selectors to be lowercase). + Fix missing NUL byte check on C14NFile(). + Fibers: + Fixed bug GH-20483 (ASAN stack overflow with fiber.stack_size INI small value). + FTP: + Fixed bug GH-20601 (ftp_connect overflow on timeout). + GD: + Fixed bug GH-20511 (imagegammacorrect out of range input/output values). + Fixed bug GH-20602 (imagescale overflow with large height values). + Intl: + Fixed bug GH-20426 (Spoofchecker::setRestrictionLevel() error message suggests missing constants). + LibXML: + Fix some deprecations on newer libxml versions regarding input buffer/parser handling. + MbString: + Fixed bug GH-20491 (SLES15 compile error with mbstring oniguruma). + Fixed bug GH-20492 (mbstring compile warning due to non-strings). + MySQLnd: + Fixed bug GH-20528 (Regression breaks mysql connexion using an IPv6 address enclosed in square brackets). + Opcache: + Fixed bug GH-20329 (opcache.file_cache broken with full interned string buffer). + PDO: + Fixed GHSA-8xr5-qppj-gvwj (PDO quoting result null deref). (CVE-2025-14180) + Phar: + Fixed bug GH-20442 (Phar does not respect case-insensitiveness of __halt_compiler() when reading stub). + Fix broken return value of fflush() for phar file entries. + Fix assertion failure when fseeking a phar file out of bounds. + PHPDBG: + Fixed ZPP type violation in phpdbg_get_executable() and phpdbg_end_oplog(). + SPL: + Fixed bug GH-20614 (SplFixedArray incorrectly handles references in deserialization). + Standard: + Fix memory leak in array_diff() with custom type checks. + Fixed bug GH-20583 (Stack overflow in http_build_query via deep structures). + Fixed GHSA-www2-q4fc-65wf (Null byte termination in dns_get_record()). + Fixed GHSA-h96m-rvf9-jgm2 (Heap buffer overflow in array_merge()). (CVE-2025-14178) + Fixed GHSA-3237-qqm7-mfv7 (Information Leak of Memory in getimagesize). (CVE-2025-14177) + Tidy: + Fixed bug GH-20374 (PHP with tidy and custom-tags). + XML: + Fixed bug GH-20439 (xml_set_default_handler() does not properly handle special characters in attributes when passing data to callback). + Zip: + Fix crash in property existence test. + Don't truncate return value of zip_fread() with user sizes. + Zlib: + Fix assertion failures resulting in crashes with stream filter object parameters. + +------------------------------------------------------------------- Old: ---- php-8.4.15.tar.xz php-8.4.15.tar.xz.asc New: ---- php-8.4.16.tar.xz php-8.4.16.tar.xz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ php8.spec ++++++ --- /var/tmp/diff_new_pack.U1o682/_old 2025-12-20 21:45:37.149030741 +0100 +++ /var/tmp/diff_new_pack.U1o682/_new 2025-12-20 21:45:37.153030906 +0100 @@ -58,7 +58,7 @@ %bcond_without sodium Name: %{pprefix}%{php_name}%{psuffix} -Version: 8.4.15 +Version: 8.4.16 Release: 0 Summary: Interpreter for the PHP scripting language version 8 License: MIT AND PHP-3.01 ++++++ php-8.4.15.tar.xz -> php-8.4.16.tar.xz ++++++ /work/SRC/openSUSE:Factory/php8/php-8.4.15.tar.xz /work/SRC/openSUSE:Factory/.php8.new.1928/php-8.4.16.tar.xz differ: char 15, line 1 ++++++ php-build-reproducible-phar.patch ++++++ --- /var/tmp/diff_new_pack.U1o682/_old 2025-12-20 21:45:37.273035872 +0100 +++ /var/tmp/diff_new_pack.U1o682/_new 2025-12-20 21:45:37.277036037 +0100 @@ -16,11 +16,11 @@ ext/phar/zip.c | 2 +- 6 files changed, 18 insertions(+), 5 deletions(-) -Index: php-8.4.10/ext/phar/phar.c +Index: php-8.4.16/ext/phar/phar.c =================================================================== ---- php-8.4.10.orig/ext/phar/phar.c -+++ php-8.4.10/ext/phar/phar.c -@@ -2965,7 +2965,7 @@ void phar_flush_ex(phar_archive_data *ph +--- php-8.4.16.orig/ext/phar/phar.c ++++ php-8.4.16/ext/phar/phar.c +@@ -2936,7 +2936,7 @@ int phar_flush_ex(phar_archive_data *pha 4: metadata-len +: metadata */ @@ -29,10 +29,10 @@ phar_set_32(entry_buffer, entry->uncompressed_filesize); phar_set_32(entry_buffer+4, mytime); phar_set_32(entry_buffer+8, entry->compressed_filesize); -Index: php-8.4.10/ext/phar/phar_internal.h +Index: php-8.4.16/ext/phar/phar_internal.h =================================================================== ---- php-8.4.10.orig/ext/phar/phar_internal.h -+++ php-8.4.10/ext/phar/phar_internal.h +--- php-8.4.16.orig/ext/phar/phar_internal.h ++++ php-8.4.16/ext/phar/phar_internal.h @@ -315,6 +315,21 @@ static inline php_stream *phar_get_pharf return PHAR_G(cached_fp)[phar->phar_pos].fp; } @@ -55,24 +55,24 @@ static inline enum phar_fp_type phar_get_fp_type(const phar_entry_info *entry) { if (!entry->is_persistent) { -Index: php-8.4.10/ext/phar/stream.c +Index: php-8.4.16/ext/phar/stream.c =================================================================== ---- php-8.4.10.orig/ext/phar/stream.c -+++ php-8.4.10/ext/phar/stream.c -@@ -474,7 +474,7 @@ static int phar_stream_flush(php_stream +--- php-8.4.16.orig/ext/phar/stream.c ++++ php-8.4.16/ext/phar/stream.c +@@ -473,7 +473,7 @@ static int phar_stream_flush(php_stream phar_entry_data *data = (phar_entry_data *) stream->abstract; if (data->internal_file->is_modified) { - data->internal_file->timestamp = time(0); + data->internal_file->timestamp = source_date_epoch_time(0); - phar_flush(data->phar, &error); + ret = phar_flush(data->phar, &error); if (error) { php_stream_wrapper_log_error(stream->wrapper, REPORT_ERRORS, "%s", error); -Index: php-8.4.10/ext/phar/tar.c +Index: php-8.4.16/ext/phar/tar.c =================================================================== ---- php-8.4.10.orig/ext/phar/tar.c -+++ php-8.4.10/ext/phar/tar.c -@@ -972,7 +972,7 @@ void phar_tar_flush(phar_archive_data *p +--- php-8.4.16.orig/ext/phar/tar.c ++++ php-8.4.16/ext/phar/tar.c +@@ -972,7 +972,7 @@ int phar_tar_flush(phar_archive_data *ph char *buf, *signature, sigbuf[8]; entry.flags = PHAR_ENT_PERM_DEF_FILE; @@ -81,10 +81,10 @@ entry.is_modified = 1; entry.is_crc_checked = 1; entry.is_tar = 1; -Index: php-8.4.10/ext/phar/util.c +Index: php-8.4.16/ext/phar/util.c =================================================================== ---- php-8.4.10.orig/ext/phar/util.c -+++ php-8.4.10/ext/phar/util.c +--- php-8.4.16.orig/ext/phar/util.c ++++ php-8.4.16/ext/phar/util.c @@ -701,7 +701,7 @@ phar_entry_data *phar_get_or_create_entr phar_add_virtual_dirs(phar, path, path_len); @@ -94,11 +94,11 @@ etemp.is_crc_checked = 1; etemp.phar = phar; etemp.filename = estrndup(path, path_len); -Index: php-8.4.10/ext/phar/zip.c +Index: php-8.4.16/ext/phar/zip.c =================================================================== ---- php-8.4.10.orig/ext/phar/zip.c -+++ php-8.4.10/ext/phar/zip.c -@@ -1271,7 +1271,7 @@ void phar_zip_flush(phar_archive_data *p +--- php-8.4.16.orig/ext/phar/zip.c ++++ php-8.4.16/ext/phar/zip.c +@@ -1251,7 +1251,7 @@ int phar_zip_flush(phar_archive_data *ph pass.error = &temperr; entry.flags = PHAR_ENT_PERM_DEF_FILE;
