--- - branch: MAIN date: Fri Aug 19 03:29:53 UTC 2016 files: - new: '1.150' old: '1.149' path: pkgsrc/lang/php/phpversion.mk pathrev: pkgsrc/lang/php/phpversion.mk@1.150 type: modified - new: '1.18' old: '1.17' path: pkgsrc/lang/php70/distinfo pathrev: pkgsrc/lang/php70/distinfo@1.18 type: modified id: 20160819T032953Z.49f8bbab496a7c0944a5c8e3f3bcb0a7ff5b7311 log: "Update php70 to 7.0.10 (PHP 7.0.10).\n\n18 Aug 2016 PHP 7.0.10\n\n- Core:\n \ . Fixed bug #72629 (Caught exception assignment to variables ignores\n references). (Laruence)\n . Fixed bug #72594 (Calling an earlier instance of an included anonymous\n \ class fatals). (Laruence)\n . Fixed bug #72581 (previous property undefined in Exception after\n deserialization). (Laruence)\n . Fixed bug #72496 (Cannot declare public method with signature incompatible\n with parent private method). (Pedro Magalhães)\n . Fixed bug #72024 (microtime() leaks memory). (maroszek at gmx dot net)\n . Fixed bug #71911 (Unable to set --enable-debug on building extensions by\n phpize on Windows). (Yuji Uchiyama)\n . Fixed bug causing ClosedGeneratorException being thrown into the calling\n code instead of the Generator yielding from. (Bob)\n . Implemented FR #72614 (Support \"nmake test\" on building extensions by\n phpize). (Yuji Uchiyama)\n . Fixed bug #72641 (phpize (on Windows) ignores PHP_PREFIX).\n (Yuji Uchiyama)\n . Fixed potential segfault in object storage freeing in shutdown sequence.\n (Bob)\n . Fixed bug #72663 (Create an Unexpected Object and Don't Invoke\n __wakeup() in Deserialization). (Stas)\n . Fixed bug #72681 (PHP Session Data Injection Vulnerability). (Stas)\n . Fixed bug #72683 (getmxrr broken). (Anatol)\n . Fixed bug #72742 (memory allocator fails to realloc small block to large\n one). (Stas)\n\n- Bz2:\n . Fixed bug #72837 (integer overflow in bzdecompress caused heap\n corruption). (Stas)\n\n- Calendar:\n . Fixed bug #67976 (cal_days_month() fails for final month of the French\n calendar). (cmb)\n . Fixed bug #71894 (AddressSanitizer: global-buffer-overflow in\n zif_cal_from_jd). (cmb)\n\n- COM:\n . Fixed bug #72569 (DOTNET/COM array parameters broke in PHP7). (Anatol)\n\n- CURL:\n . Fixed bug #71709 (curl_setopt segfault with empty CURLOPT_HTTPHEADER).\n (Pierrick)\n \ . Fixed bug #71929 (CURLINFO_CERTINFO data parsing error). (Pierrick)\n . Fixed bug #72674 (Heap overflow in curl_escape). (Stas)\n\n- DOM:\n . Fixed bug #66502 (DOM document dangling reference). (Sean Heelan, cmb)\n\n- EXIF:\n . Fixed bug #72735 (Samsung picture thumb not read (zero size)). (Kalle, Remi)\n . Fixed bug #72627 (Memory Leakage In exif_process_IFD_in_TIFF). (Stas)\n\n- Filter:\n \ . Fixed bug #71745 (FILTER_FLAG_NO_RES_RANGE does not cover whole 127.0.0.0/8\n \ range). (bugs dot php dot net at majkl578 dot cz)\n\n- FPM:\n . Fixed bug #72575 (using --allow-to-run-as-root should ignore missing user).\n (gooh)\n\n- GD:\n . Fixed bug #72596 (imagetypes function won't advertise WEBP support). (cmb)\n . Fixed bug #72604 (imagearc() ignores thickness for full arcs). (cmb)\n \ . Fixed bug #70315 (500 Server Error but page is fully rendered). (cmb)\n . Fixed bug #43828 (broken transparency of imagearc for truecolor in\n blendingmode). (cmb)\n . Fixed bug #66555 (Always false condition in ext/gd/libgd/gdkanji.c). (cmb)\n . Fixed bug #68712 (suspicious if-else statements). (cmb)\n . Fixed bug #72697 (select_colors write out-of-bounds). (Stas)\n . Fixed bug #72730 (imagegammacorrect allows arbitrary write access). (Stas)\n\n- Intl:\n . Fixed bug #72639 (Segfault when instantiating class that extends\n IntlCalendar and adds a property). (Laruence)\n . Partially fixed #72506 (idn_to_ascii for UTS #46 incorrect for long domain\n names). (cmb)\n\n- mbstring:\n . Fixed bug #72691 (mb_ereg_search raises a warning if a match zero-width).\n (cmb)\n . Fixed bug #72693 (mb_ereg_search increments search position when a match\n zero-width). (cmb)\n . Fixed bug #72694 (mb_ereg_search_setpos does not accept a string's last\n position). (cmb)\n . Fixed bug #72710 (`mb_ereg` causes buffer overflow on regexp compile error).\n (ju1ius)\n\n- Mcrypt:\n . Fixed bug #72782 (Heap Overflow due to integer overflows). (Stas)\n\n- Opcache:\n . Fixed bug #72590 (Opcache restart with kill_all_lockers does not work).\n (Keyur)\n\n- PCRE:\n . Fixed bug #72688 (preg_match missing group names in matches). (cmb)\n\n- PDO_pgsql:\n . Fixed bug #70313 (PDO statement fails to throw exception). (Matteo)\n\n- Reflection:\n \ . Fixed bug #72222 (ReflectionClass::export doesn't handle array constants).\n \ (Nikita Nefedov)\n\n- SimpleXML:\n . Fixed bug #72588 (Using global var doesn't work while accessing SimpleXML\n element). (Laruence)\n\n- SNMP:\n . Fixed bug #72708 (php_snmp_parse_oid integer overflow in memory\n allocation). (djodjo at gmail dot com)\n\n- SPL:\n . Fixed bug #55701 (GlobIterator throws LogicException). (Valentin VÄ\x82LCIU)\n . Fixed bug #72646 (SplFileObject::getCsvControl does not return the escape\n character). (cmb)\n . Fixed bug #72684 (AppendIterator segfault with closed generator). (Pierrick)\n\n- SQLite3:\n . Fixed bug #72668 (Spurious warning when exception is thrown in user defined\n function). (Laruence)\n \ . Fixed bug #72571 (SQLite3::bindValue, SQLite3::bindParam crash). (Laruence)\n \ . Implemented FR #72653 (SQLite should allow opening with empty filename).\n \ (cmb)\n . Updated to SQLite3 3.13.0. (cmb)\n\n- Standard:\n . Fixed bug #72622 (array_walk + array_replace_recursive create references\n from nothing). (Laruence)\n . Fixed bug #72152 (base64_decode $strict fails to detect null byte).\n \ (Lauri Kenttä)\n . Fixed bug #72263 (base64_decode skips a character after padding in strict\n mode). (Lauri Kenttä)\n . Fixed bug #72264 (base64_decode $strict fails with whitespace between\n padding). (Lauri Kenttä)\n . Fixed bug #72330 (CSV fields incorrectly split if escape char followed by\n UTF chars). (cmb)\n\n- Streams:\n . Fixed bug #41021 (Problems with the ftps wrapper). (vhuk)\n \ . Fixed bug #54431 (opendir() does not work with ftps:// wrapper). (vhuk)\n \ . Fixed bug #72667 (opendir() with ftp:// attempts to open data stream for\n \ non-existent directories). (vhuk)\n . Fixed bug #72771 (ftps:// wrapper is vulnerable to protocol downgrade\n attack). (Stas)\n\n- XMLRPC:\n . Fixed bug #72647 (xmlrpc_encode() unexpected output after referencing\n array elements). (Laruence)\n\n- Wddx:\n . Fixed bug #72564 (boolean always deserialized as \"true\") (Remi)\n . Fixed bug #72142 (WDDX Packet Injection Vulnerability in\n wddx_serialize_value()). (Taoguang Chen)\n . Fixed bug #72749 (wddx_deserialize allows illegal memory access) (Stas)\n . Fixed bug #72750 (wddx_deserialize null dereference). (Stas)\n \ . Fixed bug #72790 (wddx_deserialize null dereference with invalid xml).\n (Stas)\n \ . Fixed bug #72799 (wddx_deserialize null dereference in\n php_wddx_pop_element). (Stas)\n\n- Zip:\n . Fixed bug #72660 (NULL Pointer dereference in zend_virtual_cwd).\n \ (Laruence)\n" module: pkgsrc subject: 'CVS commit: pkgsrc/lang' unixtime: '1471577393' user: taca