--- - branch: pkgsrc-2018Q2 date: Fri Aug 17 16:04:01 UTC 2018 files: - new: 1.221.2.1 old: '1.221' path: pkgsrc/lang/php/phpversion.mk pathrev: pkgsrc/lang/php/phpversion.mk@1.221.2.1 type: modified - new: 1.13.6.1 old: '1.13' path: pkgsrc/lang/php71/Makefile pathrev: pkgsrc/lang/php71/Makefile@1.13.6.1 type: modified - new: 1.6.10.1 old: '1.6' path: pkgsrc/lang/php71/Makefile.php pathrev: pkgsrc/lang/php71/Makefile.php@1.6.10.1 type: modified - new: 1.38.2.1 old: '1.38' path: pkgsrc/lang/php71/distinfo pathrev: pkgsrc/lang/php71/distinfo@1.38.2.1 type: modified - new: 1.1.2.2 old: '0' path: pkgsrc/lang/php71/patches/patch-disable-filter-url pathrev: pkgsrc/lang/php71/patches/patch-disable-filter-url@1.1.2.2 type: added id: 20180817T160401Z.f518acd4c7536963207d7140ae63aa13d40dcf26 log: "Pullup ticket #5797 - requested by taca\nlang/php71: security fix\n\nRevisions pulled up:\n- lang/php/phpversion.mk 1.222\n- lang/php71/Makefile 1.14-1.15\n- lang/php71/Makefile.php \ 1.7-1.8\n- lang/php71/distinfo 1.39-1.40\n- lang/php71/patches/patch-disable-filter-url 1.1\n\n---\n Module Name:\tpkgsrc\n Committed By:\tmaya\n Date:\t\tMon Jul 16 10:58:50 UTC 2018\n\n \ Modified Files:\n \tpkgsrc/lang/php70: Makefile Makefile.php\n \tpkgsrc/lang/php71: Makefile Makefile.php\n \tpkgsrc/lang/php72: Makefile Makefile.php\n\n Log Message:\n php*: disable global regs on i386.\n Fixes PR pkg/53222 that resurfaced\n\n \ Remove the previous workaround to add GCC_REQD, which isn't sufficient\n any more, possibly due to enabling ssp/fortify?\n\n XXX bumping PKGREVISION might not be sufficient, for the same reason the\n GCC_REQD had to be moved to Makefile.php, it affects modules too.\n\n---\n Module Name:\tpkgsrc\n Committed By:\tmanu\n \ Date:\t\tWed Jul 18 07:33:12 UTC 2018\n\n Modified Files:\n \tpkgsrc/lang/php56: Makefile.php distinfo\n \tpkgsrc/lang/php70: Makefile.php distinfo\n \tpkgsrc/lang/php71: Makefile.php distinfo\n \tpkgsrc/lang/php72: Makefile.php distinfo\n Added Files:\n \tpkgsrc/lang/php56/patches: patch-disable-filter-url\n \tpkgsrc/lang/php70/patches: patch-disable-filter-url\n \tpkgsrc/lang/php71/patches: patch-disable-filter-url\n \ \tpkgsrc/lang/php72/patches: patch-disable-filter-url\n\n Log Message:\n \ Add pkgsrc build option disable-filter-url to disable php://filter URL\n\n \ php://filter URL is a feature documented here:\n http://php.net/manual/en/wrappers.php.php\n\n \ Unfortunately, it allows remote control of include() behavior\n beyond what many developpers expected, enabling easy dump of\n PHP source files. The administrator may want to disable the\n feature for security sake, and this option makes that possible.\n\n---\n Module Name:\tpkgsrc\n Committed By:\ttaca\n Date:\t\tFri Jul 20 13:23:47 UTC 2018\n\n Modified Files:\n \tpkgsrc/lang/php: phpversion.mk\n \ \tpkgsrc/lang/php71: Makefile distinfo\n\n Log Message:\n lang/php71: update to 7.1.20\n\n 19 Jul 2018, PHP 7.1.20\n\n - Core:\n . Fixed bug #76534 (PHP hangs on 'illegal string offset on string references\n with an error handler). (Laruence)\n . Fixed bug #76502 (Chain of mixed exceptions and errors does not serialize\n properly). (Nikita)\n\n - Date:\n . Fixed bug #76462 (Undefined property: DateInterval::$f). (Anatol)\n\n - exif:\n . Fixed bug #76423 (Int Overflow lead to Heap OverFlow in\n exif_thumbnail_extract of exif.c). (Stas)\n . Fixed bug #76557 (heap-buffer-overflow (READ of size 48) while reading exif\n data). (Stas)\n\n - FPM:\n . Fixed bug #73342 (Vulnerability in php-fpm by changing stdin to\n non-blocking). (Nikita)\n\n \ - GMP:\n . Fixed bug #74670 (Integer Underflow when unserializing GMP and possible\n other classes). (Nikita)\n\n - intl:\n . Fixed bug #76556 (get_debug_info handler for BreakIterator shows wrong\n type). (cmb)\n\n \ - mbstring:\n . Fixed bug #76532 (Integer overflow and excessive memory usage\n in mb_strimwidth). (MarcusSchwarz)\n\n - PGSQL:\n . Fixed bug #76548 (pg_fetch_result did not fetch the next row). (Anatol)\n\n - phpdbg:\n \ . Fix arginfo wrt. optional/required parameters. (cmb)\n\n - Reflection:\n \ . Fixed bug #76536 (PHP crashes with core dump when throwing exception in\n \ error handler). (Laruence)\n . Fixed bug #75231 (ReflectionProperty#getValue() incorrectly works with\n inherited classes). (Nikita)\n\n - Standard:\n \ . Fixed bug #76505 (array_merge_recursive() is duplicating sub-array keys).\n \ (Laruence)\n . Fixed bug #71848 (getimagesize with $imageinfo returns false). (cmb)\n\n - Win32:\n . Fixed bug #76459 (windows linkinfo lacks openbasedir check). (Anatol)\n" module: pkgsrc subject: 'CVS commit: [pkgsrc-2018Q2] pkgsrc/lang' unixtime: '1534521841' user: bsiegert