---
- branch: pkgsrc-2010Q4
  date: Tue Mar 22 06:55:45 UTC 2011
  files:
  - new: 1.6.2.2
    old: 1.6.2.1
    path: pkgsrc/lang/php53/Makefile
    pathrev: pkgsrc/lang/php53/Makefile@1.6.2.2
    type: modified
  - new: 1.4.2.1
    old: '1.4'
    path: pkgsrc/lang/php53/Makefile.common
    pathrev: pkgsrc/lang/php53/Makefile.common@1.4.2.1
    type: modified
  - new: 1.9.2.3
    old: 1.9.2.2
    path: pkgsrc/lang/php53/distinfo
    pathrev: pkgsrc/lang/php53/distinfo@1.9.2.3
    type: modified
  - new: 1.1.1.1.8.1
    old: 1.1.1.1
    path: pkgsrc/lang/php53/patches/patch-aa
    pathrev: pkgsrc/lang/php53/patches/patch-aa@1.1.1.1.8.1
    type: modified
  - new: 1.1.1.1.8.1
    old: 1.1.1.1
    path: pkgsrc/lang/php53/patches/patch-af
    pathrev: pkgsrc/lang/php53/patches/patch-af@1.1.1.1.8.1
    type: modified
  - new: 1.3.2.1
    old: '1.3'
    path: pkgsrc/lang/php53/patches/patch-ab
    pathrev: pkgsrc/lang/php53/patches/patch-ab@1.3.2.1
    type: modified
  - new: '0'
    old: '1.1'
    path: pkgsrc/lang/php53/patches/patch-ar
    pathrev: pkgsrc/lang/php53/patches/patch-ar@0
    type: deleted
  - new: '0'
    old: 1.1.2.2
    path: pkgsrc/lang/php53/patches/patch-ext_exif_exif.c
    pathrev: pkgsrc/lang/php53/patches/patch-ext_exif_exif.c@0
    type: deleted
  - new: '0'
    old: 1.1.2.2
    path: pkgsrc/lang/php53/patches/patch-ext_zip_lib_zip__name__locate.c
    pathrev: pkgsrc/lang/php53/patches/patch-ext_zip_lib_zip__name__locate.c@0
    type: deleted
  - new: '0'
    old: 1.1.2.2
    path: pkgsrc/lang/php53/patches/patch-ext_zip_php__zip.c
    pathrev: pkgsrc/lang/php53/patches/patch-ext_zip_php__zip.c@0
    type: deleted
  id: 20110322T065545Z.92ba235ce365e6c92c6a6476e36f38cd57bd4a3f
  log: "Pullup ticket #3395 - requested by taca\nsecurity fix for lang/php53\n\nRevisions
    pulled up:\n- lang/php53/Makefile                                           1.8\n-
    lang/php53/Makefile.common                                    1.5\n- lang/php53/distinfo
    \                                          1.13\n- lang/php53/patches/patch-aa
    \                                  1.2\n- lang/php53/patches/patch-ab                                   1.4\n-
    lang/php53/patches/patch-af                                   1.2\n- lang/php53/patches/patch-ar
    \                                  Removed\n- lang/php53/patches/patch-ext_exif_exif.c
    \                     Removed\n- lang/php53/patches/patch-ext_zip_lib_zip__name__locate.c
    \     Removed\n- lang/php53/patches/patch-ext_zip_php__zip.c                   Removed\n\n---\n
    \  Module Name:\tpkgsrc\n   Committed By:\ttaca\n   Date:\t\tSat Mar 19 07:01:19
    UTC 2011\n\n   Modified Files:\n   \tpkgsrc/lang/php53: Makefile Makefile.common
    distinfo\n   \tpkgsrc/lang/php53/patches: patch-aa patch-ab patch-af\n   Removed
    Files:\n   \tpkgsrc/lang/php53/patches: patch-ar patch-ext_exif_exif.c\n   \t
    \   patch-ext_zip_lib_zip__name__locate.c patch-ext_zip_php__zip.c\n\n   Log Message:\n
    \  Update lang/php53 package to PHP 5.3.\n\n   PHP 5.3.6 Released!\n\n   [17-Mar-2011]\n
    \  The PHP development team would like to announce the immediate availability\n
    \  of PHP 5.3.6. This release focuses on improving the stability of the PHP\n
    \  5.3.x branch with over 60 bug fixes, some of which are security related.\n\n
    \  Security Enhancements and Fixes in PHP 5.3.6:\n\n   * Enforce security in the
    fastcgi protocol parsing with fpm SAPI.\n   * Fixed bug #54247 (format-string
    vulnerability on Phar). (CVE-2011-1153)\n   * Fixed bug #54193 (Integer overflow
    in shmop_read()). (CVE-2011-1092)\n   * Fixed bug #54055 (buffer overrun with
    high values for precision ini setting).\n   * Fixed bug #54002 (crash on crafted
    tag in exif). (CVE-2011-0708)\n   * Fixed bug #53885 (ZipArchive segfault with
    FL_UNCHANGED on empty\n     archive). (CVE-2011-0421)\n\n   Key enhancements in
    PHP 5.3.6 include:\n\n   * Upgraded bundled Sqlite3 to version 3.7.4.\n   * Upgraded
    bundled PCRE to version 8.11.\n   * Added ability to connect to HTTPS sites through
    proxy with basic\n     authentication using stream_context/http/header/Proxy-Authorization.\n
    \  * Added options to debug backtrace functions.\n   * Changed default value of
    ini directive serialize_precision from 100 to 17.\n   * Fixed Bug #53971 (isset()
    and empty() produce apparently spurious\n     runtime error).\n   * Fixed Bug
    #53958 (Closures can't 'use' shared variables by value and\n     by reference).\n
    \  * Fixed bug #53577 (Regression introduced in 5.3.4 in open_basedir\n     with
    a trailing forward slash).\n   * Over 60 other bug fixes.\n"
  module: pkgsrc
  subject: 'CVS commit: [pkgsrc-2010Q4] pkgsrc/lang/php53'
  unixtime: '1300776945'
  user: sbd