Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (5m)  pkgsrc-2024Q1 (8d)  pkgsrc-2023Q4 (55d)  pkgsrc-2023Q2 (88d)  pkgsrc-2023Q3 (167d) 

2024-05-26 10:58:08 UTC Now

2017-07-15 19:16:20 UTC pkgsrc-2017Q2 commitmail json YAML

Pullup ticket #5508 - requested by taca
lang/php71: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.183
- lang/php71/distinfo                                          1.23

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Fri Jul  7 03:12:23 UTC 2017

  Modified Files:
  pkgsrc/lang/php: phpversion.mk
  pkgsrc/lang/php71: distinfo

  Log Message:
  Update php71 to 7.1.7.

  06 Jul 2017, PHP 7.1.7

  - Core:
    . Fixed bug #74738 (Multiple [PATH=] and [HOST=] sections not properly
      parsed). (Manuel Mausz)
    . Fixed bug #74658 (Undefined constants in array properties result in broken
      properties). (Laruence)
    . Fixed misparsing of abstract unix domain socket names. (Sara)
    . Fixed bug #74603 (PHP INI Parsing Stack Buffer Overflow Vulnerability).
      (Stas)
    . Fixed bug #74101, bug #74614 (Unserialize Heap Use-After-Free (READ: 1) in
      zval_get_type). (Nikita)
    . Fixed bug #74111 (Heap buffer overread (READ: 1) finish_nested_data from
      unserialize). (Nikita)
    . Fixed bug #74819 (wddx_deserialize() heap out-of-bound read via
      php_parse_date()). (Derick)

  - Date:
    . Fixed bug #74639 (implement clone for DatePeriod and DateInterval).
      (andrewnester)

  - DOM:
    . Fixed bug #69373 (References to deleted XPath query results). (ttoohey)

  - GD:
    . Fixed bug #74435 (Buffer over-read into uninitialized memory). (cmb)

  - Intl:
    . Fixed bug #73473 (Stack Buffer Overflow in msgfmt_parse_message). (libnex)
    . Fixed bug #74705 (Wrong reflection on Collator::getSortKey and
      collator_get_sort_key). (Tyson Andre, Remi)

  - Mbstring:
    . Add oniguruma upstream fix (CVE-2017-9224, CVE-2017-9226, CVE-2017-9227,
      CVE-2017-9228, CVE-2017-9229) (Remi, Mamoru TASAKA)

  - OCI8:
    . Add TAF callback (PR #2459). (KoenigsKind)

  - Opcache:
    . Fixed bug #74663 (Segfault with opcache.memory_protect and
      validate_timestamp). (Laruence)
    . Revert opcache.enable_cli to default disabled. (Nikita)

  - OpenSSL:
    . Fixed bug #74720 (pkcs7_en/decrypt does not work if \x1a is used in
      content). (Anatol)
    . Fixed bug #74651 (negative-size-param (-1) in memcpy in zif_openssl_seal()).
      (Stas)

  - PDO_OCI:
    . Support Instant Client 12.2 in --with-pdo-oci configure option.
      (Tianfang Yang)

  - Reflection:
    . Fixed bug #74673 (Segfault when cast Reflection object to string with
      undefined constant). (Laruence)

  - SPL:
    . Fixed bug #74478 (null coalescing operator failing with SplFixedArray).
      (jhdxr)

  - FTP:
    . Fixed bug #74598 (ftp:// wrapper ignores context arg). (Sara)

  - PHAR:
    . Fixed bug #74386 (Phar::__construct reflection incorrect). (villfa)

  - SOAP
    . Fixed bug #74679 (Incorrect conversion array with WSDL_CACHE_MEMORY).
      (Dmitry)

  - Streams:
    . Fixed bug #74556 (stream_socket_get_name() returns '\0'). (Sara)

(bsiegert)