Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (52m)  pkgsrc-2024Q1 (10d)  pkgsrc-2023Q4 (56d)  pkgsrc-2023Q2 (89d)  pkgsrc-2023Q3 (168d) 

2024-05-27 13:29:22 UTC Now

2018-08-17 16:08:38 UTC pkgsrc-2018Q2 commitmail json YAML

Pullup ticket #5798 - requested by taca
lang/php72: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.223
- lang/php72/Makefile                                          1.9-1.12
- lang/php72/Makefile.php                                      1.5-1.6
- lang/php72/distinfo                                          1.27-1.28
- lang/php72/patches/patch-disable-filter-url                  1.1

---
  Module Name: pkgsrc
  Committed By: maya
  Date: Mon Jul 16 10:58:50 UTC 2018

  Modified Files:
  pkgsrc/lang/php70: Makefile Makefile.php
  pkgsrc/lang/php71: Makefile Makefile.php
  pkgsrc/lang/php72: Makefile Makefile.php

  Log Message:
  php*: disable global regs on i386.
  Fixes PR pkg/53222 that resurfaced

  Remove the previous workaround to add GCC_REQD, which isn't sufficient
  any more, possibly due to enabling ssp/fortify?

  XXX bumping PKGREVISION might not be sufficient, for the same reason the
  GCC_REQD had to be moved to Makefile.php, it affects modules too.

---
  Module Name: pkgsrc
  Committed By: manu
  Date: Wed Jul 18 07:33:12 UTC 2018

  Modified Files:
  pkgsrc/lang/php56: Makefile.php distinfo
  pkgsrc/lang/php70: Makefile.php distinfo
  pkgsrc/lang/php71: Makefile.php distinfo
  pkgsrc/lang/php72: Makefile.php distinfo
  Added Files:
  pkgsrc/lang/php56/patches: patch-disable-filter-url
  pkgsrc/lang/php70/patches: patch-disable-filter-url
  pkgsrc/lang/php71/patches: patch-disable-filter-url
  pkgsrc/lang/php72/patches: patch-disable-filter-url

  Log Message:
  Add pkgsrc build option disable-filter-url to disable php://filter URL

  php://filter URL is a feature documented here:
  http://php.net/manual/en/wrappers.php.php

  Unfortunately, it allows remote control of include() behavior
  beyond what many developpers expected, enabling easy dump of
  PHP source files. The administrator may want to disable the
  feature for security sake, and this option makes that possible.

---
  Module Name: pkgsrc
  Committed By: ryoon
  Date: Fri Jul 20 03:34:33 UTC 2018

  Modified Files:
  pkgsrc/lang/php72: Makefile

  Log Message:
  Recursive revbump from textproc/icu-62.1

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Fri Jul 20 13:25:26 UTC 2018

  Modified Files:
  pkgsrc/lang/php: phpversion.mk
  pkgsrc/lang/php72: Makefile distinfo

  Log Message:
  lang/php72: update to 7.2.8

  19 Jul 2018, PHP 7.2.8

  - Core:
    . Fixed bug #76534 (PHP hangs on 'illegal string offset on string references
      with an error handler). (Laruence)
    . Fixed bug #76520 (Object creation leaks memory when executed over HTTP).
      (Nikita)
    . Fixed bug #76502 (Chain of mixed exceptions and errors does not serialize
      properly). (Nikita)

  - Date:
    . Fixed bug #76462 (Undefined property: DateInterval::$f). (Anatol)

  - EXIF:
    . Fixed bug #76409 (heap use after free in _php_stream_free). (cmb)
    . Fixed bug #76423 (Int Overflow lead to Heap OverFlow in
      exif_thumbnail_extract of exif.c). (Stas)
    . Fixed bug #76557 (heap-buffer-overflow (READ of size 48) while reading exif
      data). (Stas)

  - FPM:
    . Fixed bug #73342 (Vulnerability in php-fpm by changing stdin to
      non-blocking). (Nikita)

  - GMP:
    . Fixed bug #74670 (Integer Underflow when unserializing GMP and possible
      other classes). (Nikita)

  - intl:
    . Fixed bug #76556 (get_debug_info handler for BreakIterator shows wrong
      type). (cmb)

  - mbstring:
    . Fixed bug #76532 (Integer overflow and excessive memory usage
      in mb_strimwidth). (MarcusSchwarz)

  - Opcache:
    . Fixed bug #76477 (Opcache causes empty return value).
      (Nikita, Laruence)

  - PGSQL:
    . Fixed bug #76548 (pg_fetch_result did not fetch the next row). (Anatol)

  - phpdbg:
    . Fix arginfo wrt. optional/required parameters. (cmb)

  - Reflection:
    . Fixed bug #76536 (PHP crashes with core dump when throwing exception in
      error handler). (Laruence)
    . Fixed bug #75231 (ReflectionProperty#getValue() incorrectly works with
      inherited classes). (Nikita)

  - Standard:
    . Fixed bug #76505 (array_merge_recursive() is duplicating sub-array keys).
      (Laruence)
    . Fixed bug #71848 (getimagesize with $imageinfo returns false). (cmb)

  - Win32:
    . Fixed bug #76459 (windows linkinfo lacks openbasedir check). (Anatol)

  - ZIP:
    . Fixed bug #76461 (OPSYS_Z_CPM defined instead of OPSYS_CPM).
      (Dennis Birkholz, Remi)

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Fri Jul 20 13:29:51 UTC 2018

  Modified Files:
  pkgsrc/lang/php72: Makefile

  Log Message:
  lang/php72: reset PKGREVISION

  Reset PKGREVISION along with update to 7.2.8.

(bsiegert)