Pullup ticket #5159 - requested by taca
lang/php71: security fix
Revisions pulled up:
- lang/php71/Makefile 1.4
- lang/php71/distinfo 1.8-1.9
---
Module Name: pkgsrc
Committed By: jdolecek
Date: Sat Nov 5 14:30:31 UTC 2016
Modified Files:
pkgsrc/lang/php: phpversion.mk
pkgsrc/lang/php71: Makefile distinfo
Log Message:
Update php71 to 7.1.0RC5.
Changes between RC4 and RC5:
- Core:
. Fixed bug #73350 (Exception::__toString() cause circular references).
(Laruence)
. Fixed bug #73329 ((Float)"Nano" == NAN). (Anatol)
- CLI Server:
. Fixed bug #73360 (Unable to work in root with unicode chars). (Anatol)
- SQLite3:
. Fixed bug #73333 (2147483647 is fetched as string). (cmb)
Change since RC3 and RC4:
- Core:
. Fixed bug #73288 (Segfault in __clone > Exception.toString > __get).
(Laruence)
. Fixed for #73240 (Write out of bounds at number_format). (Stas)
. Fix pthreads detection when cross-compiling (ffontaine)
. Fixed bug #73337 (try/catch not working with two exceptions inside a same
operation). (Dmitry)
- BCmath:
. Fix bug #73190 (memcpy negative parameter _bc_new_num_ex). (Stas)
- Date:
. Fixed bug #45554 (Inconsistent behavior of the u format char). (Derick)
. Fixed bug #48225 (DateTime parser doesn't set microseconds for "now").
(Derick)
. Fixed bug #52514 (microseconds are missing in DateTime class). (Derick)
. Fixed bug #52519 (microseconds in DateInterval are missing). (Derick)
. Fixed bug #60089 (DateTime::createFromFormat() U after u nukes microtime).
(Derick)
. Fixed bug #64887 (Allow DateTime modification with subsecond items).
(Derick)
. Fixed bug #68506 (General DateTime improvments needed for microseconds to
become useful). (Derick)
. Fixed bug #73109 (timelib_meridian doesn't parse dots correctly). (Derick)
. Fixed bug #73247 (DateTime constructor does not initialise microseconds
property). (Derick)
. Fixed bug #73147 (Use After Free in PHP7 unserialize()). (Stas)
. Fixed bug #73189 (Memcpy negative size parameter php_resolve_path). (Stas)
- DOM:
. Fixed bug #73150 (missing NULL check in dom_document_save_html). (Stas)
- GD:
. Fixed bug #73213 (Integer overflow in imageline() with antialiasing). (cmb)
. Fixed bug #73272 (imagescale() is not affected by, but affects
imagesetinterpolation()). (cmb)
. Fixed bug #73279 (Integer overflow in gdImageScaleBilinearPalette()). (cmb)
. Fixed bug #73280 (Stack Buffer Overflow in GD dynamicGetbuf). (cmb)
- Intl:
. Fixed bug #73007 (add locale length check). (Stas)
. Fixed bug #73218 (add mitigation for ICU int overflow). (Stas)
- OCI8
. Fixed bug #71148 (Bind reference overwritten on PHP 7). (Oracle Corp.)
- OpenSSL:
. Fixed bug #73276 (crash in openssl_random_pseudo_bytes function). (Stas)
- Session:
. Fixed bug #73273 (session_unset() empties values from all variables in which
is $_session stored). (Nikita)
- SOAP:
. Fixed bug #73037 (SoapServer reports Bad Request when gzipped). (Anatol)
. Fixed bug #73237 (Nested object in "any" element overwrites other fields).
(Keith Smiley)
. Fixed bug #69137 (Peer verification fails when using a proxy with SoapClient)
(Keith Smiley)
- SimpleXML:
. Fixed bug #73293 (NULL pointer dereference in SimpleXMLElement::asXML()).
(Stas)
- SQLite3:
. Updated to SQLite3 3.15.0. (cmb)
- Standard:
. Fixed bug #73203 (passing additional_parameters causes mail to fail). (cmb)
---
Module Name: pkgsrc
Committed By: taca
Date: Sat Nov 12 15:41:24 UTC 2016
Modified Files:
pkgsrc/lang/php: phpversion.mk
pkgsrc/lang/php71: distinfo
Log Message:
Update php71 to 7.1.0rc6 (PHP 7.1.0RC6), including security fix.
10 Nov 2016, PHP 7.1.0RC6
- Core:
. Fixded bug #72736 (Slow performance when fetching large dataset with mysqli
/ PDO). (Dmitry)
- Date:
. Fixed bug #73426 (createFromFormat with 'z' format char results in
incorrect time). (Derick)
- JSON:
. Introduced encoder struct instead of global which fixes bugs #66025 and
#73254 related to pretty print indentation. (Jakub Zelenka)
- ODBC:
. Fixed bug #73448 (odbc_errormsg returns trash, always 513 bytes).
(Anatol)
- PCRE:
. Fixed bug #73392 (A use-after-free in zend allocator management).
(Laruence)
- PDO_Firebird:
. Fixed bug #73087, #61183, #71494 (Memory corruption in bindParam).
(Dorin Marcoci)
- SPL:
. Fixed bug #73423 (Reproducible crash with GDB backtrace). (Laruence)
(bsiegert)
diff -r1.158.2.5 -r1.158.2.6 pkgsrc/lang/php/phpversion.mk| @@ -1,14 +1,14 @@ | @@ -1,14 +1,14 @@ | |||
| 1 | # $NetBSD: phpversion.mk,v 1.158.2.5 2016/11/28 18:12:44 bsiegert Exp $ | 1 | # $NetBSD: phpversion.mk,v 1.158.2.6 2016/11/28 18:22:29 bsiegert Exp $ | |
| 2 | # | 2 | # | |
| 3 | # This file selects a PHP version, based on the user's preferences and | 3 | # This file selects a PHP version, based on the user's preferences and | |
| 4 | # the installed packages. It does not add a dependency on the PHP | 4 | # the installed packages. It does not add a dependency on the PHP | |
| 5 | # package. | 5 | # package. | |
| 6 | # | 6 | # | |
| 7 | # === User-settable variables === | 7 | # === User-settable variables === | |
| 8 | # | 8 | # | |
| 9 | # PHP_VERSION_DEFAULT | 9 | # PHP_VERSION_DEFAULT | |
| 10 | # The PHP version to choose when more than one is acceptable to | 10 | # The PHP version to choose when more than one is acceptable to | |
| 11 | # the package. | 11 | # the package. | |
| 12 | # | 12 | # | |
| 13 | # Possible: 56 70 71 | 13 | # Possible: 56 70 71 | |
| 14 | # Default: 56 | 14 | # Default: 56 | |
| @@ -79,27 +79,27 @@ | @@ -79,27 +79,27 @@ | |||
| 79 | # initial release of major version. | 79 | # initial release of major version. | |
| 80 | # | 80 | # | |
| 81 | # Example: lib/php/20140828 | 81 | # Example: lib/php/20140828 | |
| 82 | # | 82 | # | |
| 83 | # Keywords: php | 83 | # Keywords: php | |
| 84 | # | 84 | # | |
| 85 | 85 | |||
| 86 | .if !defined(PHPVERSION_MK) | 86 | .if !defined(PHPVERSION_MK) | |
| 87 | PHPVERSION_MK= defined | 87 | PHPVERSION_MK= defined | |
| 88 | 88 | |||
| 89 | # Define each PHP's version. | 89 | # Define each PHP's version. | |
| 90 | PHP56_VERSION= 5.6.28 | 90 | PHP56_VERSION= 5.6.28 | |
| 91 | PHP70_VERSION= 7.0.13 | 91 | PHP70_VERSION= 7.0.13 | |
| 92 | PHP71_VERSION= 7.1.0RC3 | 92 | PHP71_VERSION= 7.1.0RC6 | |
| 93 | 93 | |||
| 94 | # Define initial release of major version. | 94 | # Define initial release of major version. | |
| 95 | PHP56_RELDATE= 20140828 | 95 | PHP56_RELDATE= 20140828 | |
| 96 | PHP70_RELDATE= 20151203 | 96 | PHP70_RELDATE= 20151203 | |
| 97 | PHP71_RELDATE= 20160303 | 97 | PHP71_RELDATE= 20160303 | |
| 98 | 98 | |||
| 99 | _VARGROUPS+= php | 99 | _VARGROUPS+= php | |
| 100 | _USER_VARS.php= PHP_VERSION_DEFAULT | 100 | _USER_VARS.php= PHP_VERSION_DEFAULT | |
| 101 | _PKG_VARS.php= PHP_VERSIONS_ACCEPTED PHP_VERSION_REQD | 101 | _PKG_VARS.php= PHP_VERSIONS_ACCEPTED PHP_VERSION_REQD | |
| 102 | _SYS_VARS.php= PKG_PHP_VERSION PKG_PHP PHPPKGSRCDIR PHP_PKG_PREFIX \ | 102 | _SYS_VARS.php= PKG_PHP_VERSION PKG_PHP PHPPKGSRCDIR PHP_PKG_PREFIX \ | |
| 103 | PKG_PHP_MAJOR_VERS | 103 | PKG_PHP_MAJOR_VERS | |
| 104 | 104 | |||
| 105 | .include "../../mk/bsd.prefs.mk" | 105 | .include "../../mk/bsd.prefs.mk" |
| @@ -1,27 +1,27 @@ | @@ -1,27 +1,27 @@ | |||
| 1 | # $NetBSD: Makefile,v 1.3 2016/09/12 15:38:01 taca Exp $ | 1 | # $NetBSD: Makefile,v 1.3.2.1 2016/11/28 18:22:28 bsiegert Exp $ | |
| 2 | 2 | |||
| 3 | # | 3 | # | |
| 4 | # We can't omit PKGNAME here to handle PKG_OPTIONS. | 4 | # We can't omit PKGNAME here to handle PKG_OPTIONS. | |
| 5 | # | 5 | # | |
| 6 | PKGNAME= php-${PHP_VERSION:S/RC/rc/} | 6 | PKGNAME= php-${PHP_VERSION:S/RC/rc/} | |
| 7 | CATEGORIES= lang | 7 | CATEGORIES= lang | |
| 8 | 8 | |||
| 9 | HOMEPAGE= http://www.php.net/ | 9 | HOMEPAGE= http://www.php.net/ | |
| 10 | COMMENT= PHP Hypertext Preprocessor version 7.1 | 10 | COMMENT= PHP Hypertext Preprocessor version 7.1 | |
| 11 | LICENSE= php | 11 | LICENSE= php | |
| 12 | 12 | |||
| 13 | # 7.1 is in beta, available only on dev location | 13 | # 7.1 is in beta, available only on dev location | |
| 14 | MASTER_SITES= https://downloads.php.net/~davey/ | 14 | MASTER_SITES= https://downloads.php.net/~krakjoe/ | |
| 15 | 15 | |||
| 16 | TEST_TARGET= test | 16 | TEST_TARGET= test | |
| 17 | 17 | |||
| 18 | USE_TOOLS+= gmake lex pkg-config | 18 | USE_TOOLS+= gmake lex pkg-config | |
| 19 | LIBTOOL_OVERRIDE= # empty | 19 | LIBTOOL_OVERRIDE= # empty | |
| 20 | PHP_CHECK_INSTALLED= No | 20 | PHP_CHECK_INSTALLED= No | |
| 21 | 21 | |||
| 22 | PHP_VERSIONS_ACCEPTED= 71 | 22 | PHP_VERSIONS_ACCEPTED= 71 | |
| 23 | 23 | |||
| 24 | .include "Makefile.php" | 24 | .include "Makefile.php" | |
| 25 | 25 | |||
| 26 | CGIDIR= ${PREFIX}/libexec/cgi-bin | 26 | CGIDIR= ${PREFIX}/libexec/cgi-bin | |
| 27 | EGDIR= ${PREFIX}/share/examples/php | 27 | EGDIR= ${PREFIX}/share/examples/php |
| @@ -1,19 +1,19 @@ | @@ -1,19 +1,19 @@ | |||
| 1 | $NetBSD: distinfo,v 1.6.2.1 2016/10/21 18:40:41 bsiegert Exp $ | 1 | $NetBSD: distinfo,v 1.6.2.2 2016/11/28 18:22:28 bsiegert Exp $ | |
| 2 | 2 | |||
| 3 | SHA1 (php-7.1.0RC3.tar.bz2) = e12ba1e7adaba8f69e60b89277c7d0f9d858762e | 3 | SHA1 (php-7.1.0RC6.tar.bz2) = 46144d74951f0ecfb2ce8d1c5d7890175cfd47b4 | |
| 4 | RMD160 (php-7.1.0RC3.tar.bz2) = 903a92ae604d0c6c531cb335dcf87acfff47004b | 4 | RMD160 (php-7.1.0RC6.tar.bz2) = 3020a5f6ea44d88e49fb642d722c7819557304a7 | |
| 5 | SHA512 (php-7.1.0RC3.tar.bz2) = 63b06efbe28577760127db42101a16a5bcb7ce0a5be05777749f514e7c8487dbdfc44f3e10ea2e31e9de8a7c8c7506b93d99f4155f2a2a757808e9987213c74f | 5 | SHA512 (php-7.1.0RC6.tar.bz2) = f0343af4baff40c5411656ca9b9ac4e5e920de8e9cb99df0b957a7f87f59fcb097e80e53b6edb26027f89488086d7955b3e1f8967bef8fb396c8af67bc5455dc | |
| 6 | Size (php-7.1.0RC3.tar.bz2) = 15595095 bytes | 6 | Size (php-7.1.0RC6.tar.bz2) = 15555392 bytes | |
| 7 | SHA1 (patch-acinclude.m4) = b682280fd89950c082c2226bdb7364b0dc475bad | 7 | SHA1 (patch-acinclude.m4) = b682280fd89950c082c2226bdb7364b0dc475bad | |
| 8 | SHA1 (patch-configure) = a129e19ef87338f6e53ccc967c40ddcde7c7357c | 8 | SHA1 (patch-configure) = a129e19ef87338f6e53ccc967c40ddcde7c7357c | |
| 9 | SHA1 (patch-ext_gd_config.m4) = 93b62daad93b9ee6dc28e06016f739bc26b0dc9f | 9 | SHA1 (patch-ext_gd_config.m4) = 93b62daad93b9ee6dc28e06016f739bc26b0dc9f | |
| 10 | SHA1 (patch-ext_imap_config.m4) = f4e10ab81697b72019313f63bc630627a08efd92 | 10 | SHA1 (patch-ext_imap_config.m4) = f4e10ab81697b72019313f63bc630627a08efd92 | |
| 11 | SHA1 (patch-ext_pcre_pcrelib_config.h) = c5fba95856628f68639fe63feeef04a5f83d3916 | 11 | SHA1 (patch-ext_pcre_pcrelib_config.h) = c5fba95856628f68639fe63feeef04a5f83d3916 | |
| 12 | SHA1 (patch-ext_pdo__mysql_config.m4) = b1ef91be5a729040197e9af50da0f5fd1f6c90a8 | 12 | SHA1 (patch-ext_pdo__mysql_config.m4) = b1ef91be5a729040197e9af50da0f5fd1f6c90a8 | |
| 13 | SHA1 (patch-ext_pdo_config.m4) = 522281775cc0e70a135b1f813158988ef1f3e244 | 13 | SHA1 (patch-ext_pdo_config.m4) = 522281775cc0e70a135b1f813158988ef1f3e244 | |
| 14 | SHA1 (patch-ext_phar_Makefile.frag) = 558869b60f8ed6674a3ba1d595a65f010df4c426 | 14 | SHA1 (patch-ext_phar_Makefile.frag) = 558869b60f8ed6674a3ba1d595a65f010df4c426 | |
| 15 | SHA1 (patch-ext_phar_phar_phar.php) = f630e3946b21b76d4fe857a43e00e25c9445f2c8 | 15 | SHA1 (patch-ext_phar_phar_phar.php) = f630e3946b21b76d4fe857a43e00e25c9445f2c8 | |
| 16 | SHA1 (patch-ext_recode_recode.c) = a97a1815d6a41410f68c289debbb9396128a2159 | 16 | SHA1 (patch-ext_recode_recode.c) = a97a1815d6a41410f68c289debbb9396128a2159 | |
| 17 | SHA1 (patch-ext_sqlite3_libsqlite_sqlite3.c) = 8a529a1b3f7c97731f2e719d006f67c3a7259bb5 | 17 | SHA1 (patch-ext_sqlite3_libsqlite_sqlite3.c) = 8a529a1b3f7c97731f2e719d006f67c3a7259bb5 | |
| 18 | SHA1 (patch-ext_standard_basic__functions.c) = f97a2748c7b15fbd9a2d3c21e56079088cc05d56 | 18 | SHA1 (patch-ext_standard_basic__functions.c) = f97a2748c7b15fbd9a2d3c21e56079088cc05d56 | |
| 19 | SHA1 (patch-ext_standard_php__dns.h) = 3687ceac4dff4605263b53acb761b071f7446ccb | 19 | SHA1 (patch-ext_standard_php__dns.h) = 3687ceac4dff4605263b53acb761b071f7446ccb |