Version in base suite: 1.16.3-1+deb10u1 Base version: simplesamlphp_1.16.3-1+deb10u1 Target version: simplesamlphp_1.16.3-1+deb10u2 Base file: /srv/ftp-master.debian.org/ftp/pool/main/s/simplesamlphp/simplesamlphp_1.16.3-1+deb10u1.dsc Target file: /srv/ftp-master.debian.org/policy/pool/main/s/simplesamlphp/simplesamlphp_1.16.3-1+deb10u2.dsc changelog | 6 ++++++ patches/fix-xmlseclibs-php73.patch | 24 ++++++++++++++++++++++++ patches/series | 1 + 3 files changed, 31 insertions(+) diff -Nru simplesamlphp-1.16.3/debian/changelog simplesamlphp-1.16.3/debian/changelog --- simplesamlphp-1.16.3/debian/changelog 2019-11-03 05:46:13.000000000 +0000 +++ simplesamlphp-1.16.3/debian/changelog 2019-12-16 13:15:00.000000000 +0000 @@ -1,3 +1,9 @@ +simplesamlphp (1.16.3-1+deb10u2) buster; urgency=medium + + * Fix incompatibility with PHP 7.3 (closes: #944820). + + -- Thijs Kinkhorst Mon, 16 Dec 2019 14:15:00 +0100 + simplesamlphp (1.16.3-1+deb10u1) buster-security; urgency=high * Fix security issue CVE-2019-3465. diff -Nru simplesamlphp-1.16.3/debian/patches/fix-xmlseclibs-php73.patch simplesamlphp-1.16.3/debian/patches/fix-xmlseclibs-php73.patch --- simplesamlphp-1.16.3/debian/patches/fix-xmlseclibs-php73.patch 1970-01-01 00:00:00.000000000 +0000 +++ simplesamlphp-1.16.3/debian/patches/fix-xmlseclibs-php73.patch 2019-12-16 13:15:00.000000000 +0000 @@ -0,0 +1,24 @@ +From: Stefan Winter +Date: Thu, 18 Oct 2018 07:24:07 +0200 +Subject: [PATCH] make regex PCRE2 compliant + +PHP7.3 makes a hard switch from PCRE to PCRE2, where the hyphen needs to be escaped. I've tested and confirmed that with PHP 7.3rc3 +- the code as was before this PR breaks with a PHP error about unable to compile the regex +- the code with this one-character PR applied works just fine +--- + src/Utils/XPath.php | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/src/Utils/XPath.php b/src/Utils/XPath.php +index 11e51fb..8cdc48e 100644 +--- a/vendor/robrichards/xmlseclibs/src/Utils/XPath.php ++++ b/vendor/robrichards/xmlseclibs/src/Utils/XPath.php +@@ -7,7 +7,7 @@ class XPath + const ALPHANUMERIC = '\w\d'; + const NUMERIC = '\d'; + const LETTERS = '\w'; +- const EXTENDED_ALPHANUMERIC = '\w\d\s-_:\.'; ++ const EXTENDED_ALPHANUMERIC = '\w\d\s\-_:\.'; + + const SINGLE_QUOTE = '\''; + const DOUBLE_QUOTE = '"'; diff -Nru simplesamlphp-1.16.3/debian/patches/series simplesamlphp-1.16.3/debian/patches/series --- simplesamlphp-1.16.3/debian/patches/series 2019-11-03 05:44:18.000000000 +0000 +++ simplesamlphp-1.16.3/debian/patches/series 2019-12-16 13:15:00.000000000 +0000 @@ -1,2 +1,3 @@ debian_config.patch CVE-2019-3465.patch +fix-xmlseclibs-php73.patch