Tue Mar 3 20:58:46 2015 UTC ()
Pullup ticket #4632 - requested by taca
lang/php55: security update

Revisions pulled up:
- lang/php/phpversion.mk                                        1.87
- lang/php55/Makefile                                           1.19
- lang/php55/PLIST                                              1.5
- lang/php55/distinfo                                           1.35
- lang/php55/patches/patch-ext_date_php_date.c                  deleted
- lang/php55/patches/patch-ext_date_tests_bug68942.phpt         deleted
- lang/php55/patches/patch-ext_date_tests_bug68942_2.phpt       deleted

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Feb 19 13:35:24 UTC 2015

   Modified Files:
   	pkgsrc/lang/php: phpversion.mk
   	pkgsrc/lang/php55: Makefile PLIST distinfo
   Removed Files:
   	pkgsrc/lang/php55/patches: patch-ext_date_php_date.c
   	    patch-ext_date_tests_bug68942.phpt
   	    patch-ext_date_tests_bug68942_2.phpt

   Log Message:
   Update php55 to 5.5.22 (PHP 5.5.22).

   19 Feb 2015, PHP 5.5.22

   - Core:
     . Fixed bug #67068 (getClosure returns somethings that's not a closure).
       (Danack at basereality dot com)
     . Fixed bug #68925 (Mitigation for CVE-2015-0235 – GHOST: glibc gethostbyname
       buffer overflow). (Stas)
     . Fixed bug #68942 (Use after free vulnerability in unserialize() with
       DateTimeZone). (CVE-2015-0273) (Stas)
     . Added NULL byte protection to exec, system and passthru. (Yasuo)
     . Removed support for multi-line headers, as the are deprecated by RFC 7230.
       (Stas)

   - Date:
     . Fixed bug #45081 (strtotime incorrectly interprets SGT time zone). (Derick)

   - Dba:
     . Fixed bug #68711 (useless comparisons). (bugreports at internot dot info)

   - Enchant:
     . Fixed bug #6855 (heap buffer overflow in enchant_broker_request_dict()).
       (Antony)

   - Fileinfo:
     . Fixed bug #68827 (Double free with disabled ZMM). (Joshua Rogers)

   - FPM:
     . Fixed bug #66479 (Wrong response to FCGI_GET_VALUES). (Frank Stolle)
     . Fixed bug #68571 (core dump when webserver close the socket).
       (redfoxli069 at gmail dot com, Laruence)

   - Libxml:
     . Fixed bug #64938 (libxml_disable_entity_loader setting is shared
       between threads). (Martin Jansen)

   - OpenSSL:
     . Fixed bug #55618 (use case-insensitive cert name matching).
       (Daniel Lowrey)

   - PDO_mysql:
     . Fixed bug #68750 (PDOMysql with mysqlnd does not allow the usage of
       named pipes). (steffenb198@aol.com)

   - Phar:
     . Fixed bug #68901 (use after free). (bugreports at internot dot info)

   - Pgsql:
     . Fixed Bug #65199 'pg_copy_from() modifies input array variable). (Yasuo)

   - Sqlite3:
     . Fixed bug #68260 (SQLite3Result::fetchArray declares wrong
       required_num_args). (Julien)

   - Mysqli:
     . Fixed bug #68114 (linker error on some OS X machines with fixed
       width decimal support) (Keyur Govande)
     . Fixed bug #68657 (Reading 4 byte floats with Mysqli and libmysqlclient
       has rounding errors) (Keyur Govande)

   - Session:
     . Fixed bug #68941 (mod_files.sh is a bash-script) (bugzilla at ii.nl, Yasuo)
     . Fixed Bug #66623 (no EINTR check on flock) (Yasuo)
     . Fixed bug #68063 (Empty session IDs do still start sessions) (Yasuo)

   - Standard:
     . Fixed bug #65272 (flock() out parameter not set correctly in windows).
       (Daniel Lowrey)
     . Fixed bug #69033 (Request may get env. variables from previous requests
       if PHP works as FastCGI)

   - Streams:
     . Fixed bug which caused call after final close on streams filter. (Bob)


(tron)
diff -r1.81.2.4 -r1.81.2.5 pkgsrc/lang/php/phpversion.mk
diff -r1.16.4.1 -r1.16.4.2 pkgsrc/lang/php55/Makefile
diff -r1.4 -r1.4.2.1 pkgsrc/lang/php55/PLIST
diff -r1.32.2.2 -r1.32.2.3 pkgsrc/lang/php55/distinfo
diff -r1.1.2.2 -r0 pkgsrc/lang/php55/patches/patch-ext_date_php_date.c
diff -r1.1.2.2 -r0 pkgsrc/lang/php55/patches/patch-ext_date_tests_bug68942.phpt
diff -r1.1.2.2 -r0 pkgsrc/lang/php55/patches/patch-ext_date_tests_bug68942_2.phpt
cvs diff -r1.81.2.4 -r1.81.2.5 pkgsrc/lang/php/phpversion.mk (expand / switch to unified diff)

--- pkgsrc/lang/php/phpversion.mk 2015/03/01 16:19:23 1.81.2.4
+++ pkgsrc/lang/php/phpversion.mk 2015/03/03 20:58:45 1.81.2.5
@@ -1,14 +1,14 @@ @@ -1,14 +1,14 @@
1# $NetBSD: phpversion.mk,v 1.81.2.4 2015/03/01 16:19:23 tron Exp $ 1# $NetBSD: phpversion.mk,v 1.81.2.5 2015/03/03 20:58:45 tron Exp $
2# 2#
3# This file selects a PHP version, based on the user's preferences and 3# This file selects a PHP version, based on the user's preferences and
4# the installed packages. It does not add a dependency on the PHP 4# the installed packages. It does not add a dependency on the PHP
5# package. 5# package.
6# 6#
7# === User-settable variables === 7# === User-settable variables ===
8# 8#
9# PHP_VERSION_DEFAULT 9# PHP_VERSION_DEFAULT
10# The PHP version to choose when more than one is acceptable to 10# The PHP version to choose when more than one is acceptable to
11# the package. 11# the package.
12# 12#
13# Possible: 53 54 55 56 13# Possible: 53 54 55 56
14# Default: 54 14# Default: 54
@@ -73,27 +73,27 @@ @@ -73,27 +73,27 @@
73# initial release of major version. 73# initial release of major version.
74# 74#
75# Example: lib/php/20090630 75# Example: lib/php/20090630
76# 76#
77# Keywords: php 77# Keywords: php
78# 78#
79 79
80.if !defined(PHPVERSION_MK) 80.if !defined(PHPVERSION_MK)
81PHPVERSION_MK= defined 81PHPVERSION_MK= defined
82 82
83# Define each PHP's version. 83# Define each PHP's version.
84PHP53_VERSION= 5.3.29 84PHP53_VERSION= 5.3.29
85PHP54_VERSION= 5.4.38 85PHP54_VERSION= 5.4.38
86PHP55_VERSION= 5.5.21 86PHP55_VERSION= 5.5.22
87PHP56_VERSION= 5.6.5 87PHP56_VERSION= 5.6.5
88 88
89# Define initial release of major version. 89# Define initial release of major version.
90PHP53_RELDATE= 20090630 90PHP53_RELDATE= 20090630
91PHP54_RELDATE= 20120301 91PHP54_RELDATE= 20120301
92PHP55_RELDATE= 20130620 92PHP55_RELDATE= 20130620
93PHP56_RELDATE= 20140828 93PHP56_RELDATE= 20140828
94 94
95_VARGROUPS+= php 95_VARGROUPS+= php
96_USER_VARS.php= PHP_VERSION_DEFAULT 96_USER_VARS.php= PHP_VERSION_DEFAULT
97_PKG_VARS.php= PHP_VERSIONS_ACCEPTED PHP_VERSION_REQD 97_PKG_VARS.php= PHP_VERSIONS_ACCEPTED PHP_VERSION_REQD
98_SYS_VARS.php= PKG_PHP_VERSION PKG_PHP PHPPKGSRCDIR PHP_PKG_PREFIX \ 98_SYS_VARS.php= PKG_PHP_VERSION PKG_PHP PHPPKGSRCDIR PHP_PKG_PREFIX \
99 PKG_PHP_MAJOR_VERS 99 PKG_PHP_MAJOR_VERS
cvs diff -r1.16.4.1 -r1.16.4.2 pkgsrc/lang/php55/Attic/Makefile (expand / switch to unified diff)

--- pkgsrc/lang/php55/Attic/Makefile 2015/02/18 18:54:20 1.16.4.1
+++ pkgsrc/lang/php55/Attic/Makefile 2015/03/03 20:58:45 1.16.4.2
@@ -1,20 +1,19 @@ @@ -1,20 +1,19 @@
1# $NetBSD: Makefile,v 1.16.4.1 2015/02/18 18:54:20 tron Exp $ 1# $NetBSD: Makefile,v 1.16.4.2 2015/03/03 20:58:45 tron Exp $
2 2
3# 3#
4# We can't omit PKGNAME here to handle PKG_OPTIONS. 4# We can't omit PKGNAME here to handle PKG_OPTIONS.
5# 5#
6PKGNAME= php-${PHP_BASE_VERS} 6PKGNAME= php-${PHP_BASE_VERS}
7PKGREVISION= 1 
8CATEGORIES= lang 7CATEGORIES= lang
9 8
10HOMEPAGE= http://www.php.net/ 9HOMEPAGE= http://www.php.net/
11COMMENT= PHP Hypertext Preprocessor version 5.5 10COMMENT= PHP Hypertext Preprocessor version 5.5
12LICENSE= php 11LICENSE= php
13 12
14TEST_TARGET= test 13TEST_TARGET= test
15 14
16USE_TOOLS+= gmake lex pkg-config 15USE_TOOLS+= gmake lex pkg-config
17LIBTOOL_OVERRIDE= # empty 16LIBTOOL_OVERRIDE= # empty
18PHP_CHECK_INSTALLED= No 17PHP_CHECK_INSTALLED= No
19 18
20PHP_VERSIONS_ACCEPTED= 55 19PHP_VERSIONS_ACCEPTED= 55
cvs diff -r1.4 -r1.4.2.1 pkgsrc/lang/php55/Attic/PLIST (expand / switch to unified diff)

--- pkgsrc/lang/php55/Attic/PLIST 2014/11/15 14:53:12 1.4
+++ pkgsrc/lang/php55/Attic/PLIST 2015/03/03 20:58:45 1.4.2.1
@@ -1,14 +1,14 @@ @@ -1,14 +1,14 @@
1@comment $NetBSD: PLIST,v 1.4 2014/11/15 14:53:12 taca Exp $ 1@comment $NetBSD: PLIST,v 1.4.2.1 2015/03/03 20:58:45 tron Exp $
2bin/phar 2bin/phar
3bin/phar.phar 3bin/phar.phar
4bin/php 4bin/php
5bin/php-config 5bin/php-config
6bin/phpize 6bin/phpize
7include/php/TSRM/TSRM.h 7include/php/TSRM/TSRM.h
8include/php/TSRM/readdir.h 8include/php/TSRM/readdir.h
9include/php/TSRM/tsrm_config.h 9include/php/TSRM/tsrm_config.h
10include/php/TSRM/tsrm_config.w32.h 10include/php/TSRM/tsrm_config.w32.h
11include/php/TSRM/tsrm_config_common.h 11include/php/TSRM/tsrm_config_common.h
12include/php/TSRM/tsrm_nw.h 12include/php/TSRM/tsrm_nw.h
13include/php/TSRM/tsrm_strtok_r.h 13include/php/TSRM/tsrm_strtok_r.h
14include/php/TSRM/tsrm_virtual_cwd.h 14include/php/TSRM/tsrm_virtual_cwd.h
@@ -86,26 +86,27 @@ include/php/ext/hash/php_hash_crc32.h @@ -86,26 +86,27 @@ include/php/ext/hash/php_hash_crc32.h
86include/php/ext/hash/php_hash_fnv.h 86include/php/ext/hash/php_hash_fnv.h
87include/php/ext/hash/php_hash_gost.h 87include/php/ext/hash/php_hash_gost.h
88include/php/ext/hash/php_hash_haval.h 88include/php/ext/hash/php_hash_haval.h
89include/php/ext/hash/php_hash_joaat.h 89include/php/ext/hash/php_hash_joaat.h
90include/php/ext/hash/php_hash_md.h 90include/php/ext/hash/php_hash_md.h
91include/php/ext/hash/php_hash_ripemd.h 91include/php/ext/hash/php_hash_ripemd.h
92include/php/ext/hash/php_hash_sha.h 92include/php/ext/hash/php_hash_sha.h
93include/php/ext/hash/php_hash_snefru.h 93include/php/ext/hash/php_hash_snefru.h
94include/php/ext/hash/php_hash_tiger.h 94include/php/ext/hash/php_hash_tiger.h
95include/php/ext/hash/php_hash_types.h 95include/php/ext/hash/php_hash_types.h
96include/php/ext/hash/php_hash_whirlpool.h 96include/php/ext/hash/php_hash_whirlpool.h
97include/php/ext/libxml/php_libxml.h 97include/php/ext/libxml/php_libxml.h
98include/php/ext/mysqlnd/config-win.h 98include/php/ext/mysqlnd/config-win.h
 99include/php/ext/mysqlnd/mysql_float_to_double.h
99include/php/ext/mysqlnd/mysqlnd.h 100include/php/ext/mysqlnd/mysqlnd.h
100include/php/ext/mysqlnd/mysqlnd_alloc.h 101include/php/ext/mysqlnd/mysqlnd_alloc.h
101include/php/ext/mysqlnd/mysqlnd_block_alloc.h 102include/php/ext/mysqlnd/mysqlnd_block_alloc.h
102include/php/ext/mysqlnd/mysqlnd_charset.h 103include/php/ext/mysqlnd/mysqlnd_charset.h
103include/php/ext/mysqlnd/mysqlnd_debug.h 104include/php/ext/mysqlnd/mysqlnd_debug.h
104include/php/ext/mysqlnd/mysqlnd_enum_n_def.h 105include/php/ext/mysqlnd/mysqlnd_enum_n_def.h
105include/php/ext/mysqlnd/mysqlnd_ext_plugin.h 106include/php/ext/mysqlnd/mysqlnd_ext_plugin.h
106include/php/ext/mysqlnd/mysqlnd_libmysql_compat.h 107include/php/ext/mysqlnd/mysqlnd_libmysql_compat.h
107include/php/ext/mysqlnd/mysqlnd_net.h 108include/php/ext/mysqlnd/mysqlnd_net.h
108include/php/ext/mysqlnd/mysqlnd_portability.h 109include/php/ext/mysqlnd/mysqlnd_portability.h
109include/php/ext/mysqlnd/mysqlnd_priv.h 110include/php/ext/mysqlnd/mysqlnd_priv.h
110include/php/ext/mysqlnd/mysqlnd_result.h 111include/php/ext/mysqlnd/mysqlnd_result.h
111include/php/ext/mysqlnd/mysqlnd_result_meta.h 112include/php/ext/mysqlnd/mysqlnd_result_meta.h
cvs diff -r1.32.2.2 -r1.32.2.3 pkgsrc/lang/php55/Attic/distinfo (expand / switch to unified diff)

--- pkgsrc/lang/php55/Attic/distinfo 2015/02/18 18:54:20 1.32.2.2
+++ pkgsrc/lang/php55/Attic/distinfo 2015/03/03 20:58:45 1.32.2.3
@@ -1,25 +1,22 @@ @@ -1,25 +1,22 @@
1$NetBSD: distinfo,v 1.32.2.2 2015/02/18 18:54:20 tron Exp $ 1$NetBSD: distinfo,v 1.32.2.3 2015/03/03 20:58:45 tron Exp $
2 2
3SHA1 (php-5.5.21.tar.bz2) = a6251bb3565f144593df4329fd15bedd70ae13a8 3SHA1 (php-5.5.22.tar.bz2) = 76fcfc157855100e2bb09b22209e78e3088a4b11
4RMD160 (php-5.5.21.tar.bz2) = eaea30ff8b5facbb03197ab81101f5b0e34463f5 4RMD160 (php-5.5.22.tar.bz2) = 8849bc779dbb8687d83e2d50dd476d43900713d6
5Size (php-5.5.21.tar.bz2) = 13306064 bytes 5Size (php-5.5.22.tar.bz2) = 13305486 bytes
6SHA1 (patch-acinclude.m4) = 9e9c433e4cb96e469f7cf14b2064a0f41fc4568a 6SHA1 (patch-acinclude.m4) = 9e9c433e4cb96e469f7cf14b2064a0f41fc4568a
7SHA1 (patch-aclocal.m4) = 46f192351e541453b1e32299acd1b4cfefc93cb2 7SHA1 (patch-aclocal.m4) = 46f192351e541453b1e32299acd1b4cfefc93cb2
8SHA1 (patch-build_libtool.m4) = 3811edd697fd21eadc4f65cba35c6297141e8ff2 8SHA1 (patch-build_libtool.m4) = 3811edd697fd21eadc4f65cba35c6297141e8ff2
9SHA1 (patch-configure) = e81731b426b31656de72a4e4b3ad341b5ac34f82 9SHA1 (patch-configure) = e81731b426b31656de72a4e4b3ad341b5ac34f82
10SHA1 (patch-ext_date_php_date.c) = 7a70c71942db9ff2d5622bd4b946f8229159f703 
11SHA1 (patch-ext_date_tests_bug68942.phpt) = c73486a8023d27c2a5a0a2656ba4a8d8dbc990a5 
12SHA1 (patch-ext_date_tests_bug68942_2.phpt) = 420530f386c80f975d7ba3d8a3c61d44766a7633 
13SHA1 (patch-ext_gd_config.m4) = 91c9798333d4776856a0a9e20196986856b758b2 10SHA1 (patch-ext_gd_config.m4) = 91c9798333d4776856a0a9e20196986856b758b2
14SHA1 (patch-ext_imap_config.m4) = 01681e8b54ee586ec4db72a5da2d0aec3fa89fcc 11SHA1 (patch-ext_imap_config.m4) = 01681e8b54ee586ec4db72a5da2d0aec3fa89fcc
15SHA1 (patch-ext_mssql_php__mssql.c) = 4ef1837850443e9db2e71620a3ddaed5ab5c435b 12SHA1 (patch-ext_mssql_php__mssql.c) = 4ef1837850443e9db2e71620a3ddaed5ab5c435b
16SHA1 (patch-ext_opcache_config.m4) = 7c0d98feaeec8a0ca61f6f77a1906aa2d601be3f 13SHA1 (patch-ext_opcache_config.m4) = 7c0d98feaeec8a0ca61f6f77a1906aa2d601be3f
17SHA1 (patch-ext_pdo__mysql_config.m4) = 3526e737da25129710218e7141d5a05ae0a51390 14SHA1 (patch-ext_pdo__mysql_config.m4) = 3526e737da25129710218e7141d5a05ae0a51390
18SHA1 (patch-ext_pdo_config.m4) = 26a4ad02e5c6b7a54c3c54a6d026a3ccfed62c59 15SHA1 (patch-ext_pdo_config.m4) = 26a4ad02e5c6b7a54c3c54a6d026a3ccfed62c59
19SHA1 (patch-ext_phar_Makefile.frag) = f8e3f7b7c3e93765d019e5614a884df6185d0436 16SHA1 (patch-ext_phar_Makefile.frag) = f8e3f7b7c3e93765d019e5614a884df6185d0436
20SHA1 (patch-ext_phar_phar_phar.php) = 011f2d68048dbc63f5efcab4e23062daa9e8e08c 17SHA1 (patch-ext_phar_phar_phar.php) = 011f2d68048dbc63f5efcab4e23062daa9e8e08c
21SHA1 (patch-ext_sqlite3_libsqlite_sqlite3.c) = b384b9daa466f2a8a3e6cfd4ea6cff81f9342941 18SHA1 (patch-ext_sqlite3_libsqlite_sqlite3.c) = b384b9daa466f2a8a3e6cfd4ea6cff81f9342941
22SHA1 (patch-ext_standard_basic__functions.c) = f2a44998145306c2cb2d2f3822c0e7cc70c778b4 19SHA1 (patch-ext_standard_basic__functions.c) = f2a44998145306c2cb2d2f3822c0e7cc70c778b4
23SHA1 (patch-makedist) = 3f6b0621d30264824f2cb4c2903d15ba95be3937 20SHA1 (patch-makedist) = 3f6b0621d30264824f2cb4c2903d15ba95be3937
24SHA1 (patch-php.ini-development) = 4fc40f0af5f6e58b614794e066a5738694dc8ef8 21SHA1 (patch-php.ini-development) = 4fc40f0af5f6e58b614794e066a5738694dc8ef8
25SHA1 (patch-php.ini-production) = 47c1b14ee78fbcaa084a58d2c0c3e843104072be 22SHA1 (patch-php.ini-production) = 47c1b14ee78fbcaa084a58d2c0c3e843104072be
File Deleted: pkgsrc/lang/php55/patches/Attic/patch-ext_date_php_date.c
File Deleted: pkgsrc/lang/php55/patches/Attic/patch-ext_date_tests_bug68942.phpt
File Deleted: pkgsrc/lang/php55/patches/Attic/patch-ext_date_tests_bug68942_2.phpt