php-7.2.10

[Douglas R. Reno]

New point version

[thomas]

reported by Jean-Marc Pigeon (see "blfs-support"), there are extraneous files installed.

    /.channels/.alias/pear.txt
    /.channels/.alias/pecl.txt
    /.channels/.alias/phpdocs.txt
    /.channels/__uri.reg
    /.channels/doc.php.net.reg
    /.channels/pear.php.net.reg
    /.channels/pecl.php.net.reg
    /.depdb
    /.depdblock
    /.filemap
    /.lock
    /usr/lib/php/.channels/.alias/pear.txt
    /usr/lib/php/.channels/.alias/pecl.txt
    /usr/lib/php/.channels/.alias/phpdocs.txt
    /usr/lib/php/.channels/__uri.reg
    /usr/lib/php/.channels/doc.php.net.reg
    /usr/lib/php/.channels/pear.php.net.reg
    /usr/lib/php/.channels/pecl.php.net.reg
    /usr/lib/php/.filemap
    /usr/lib/php/.lock
    /usr/lib/php/.registry/archive_tar.reg
    /usr/lib/php/.registry/console_getopt.reg
    /usr/lib/php/.registry/pear.reg
    /usr/lib/php/.registry/structures_graph.reg
    /usr/lib/php/.registry/xml_util.reg

Looks like it has something to do with PEAR. Using the --without-pear switch to configure, those files are not installed but what does it imply if we use that switch also?

Btw, Arch uses this switch, too.

[Douglas R. Reno]

Promote to High priority due to security fixes

[thomas]

The bundled pear stuff seems to be a bit outdated: ​https://pear.php.net/package/PEAR/download/All There is a patch to fix the undefined variable $metadata_dir: ​https://github.com/pear/pear-core/commit/b4126cef2c30a31dc73cab5105dcebd33852740c#diff-d28e639c6a933183b2d85f98ec527e3c That statement can be found in pear/install-pear-nozlib.phar at line 8557 but cannot be patched easily cause signature will be invalid then (dunno how to resign).

If ok for now, I'll add the --without-pear switch.

If required, pear can be installed by

wget http://pear.php.net/go-pear.phar
php go-pear.phar

but there one has to be careful about the directories which are created. To fix that, 12 directories needs to be specified...

[thomas]

Fixed in r20588