Sun Jan 7 18:01:22 2018 UTC ()
Pullup ticket #5676 - requested by taca
lang/php72: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.201
- lang/php72/distinfo                                           1.11

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Fri Jan  5 03:12:12 UTC 2018

   Modified Files:
   	pkgsrc/lang/php: phpversion.mk
   	pkgsrc/lang/php72: distinfo

   Log Message:
   lang/php72: update to 7.2.1

   04 Jan 2018, PHP 7.2.1

   - Core:
     . Fixed bug #75573 (Segmentation fault in 7.1.12 and 7.0.26). (Laruence)
     . Fixed bug #75384 (PHP seems incompatible with OneDrive files on demand).
       (Anatol)
     . Fixed bug #75525 (Access Violation in vcruntime140.dll). (Anatol)
     . Fixed bug #74862 (Unable to clone instance when private __clone defined).
       (Daniel Ciochiu)
     . Fixed bug #75074 (php-process crash when is_file() is used with strings
       longer 260 chars). (Anatol)

   - CLI server:
     . Fixed bug #73830 (Directory does not exist). (Anatol)

   - FPM:
     . Fixed bug #64938 (libxml_disable_entity_loader setting is shared between
       requests). (Remi)

   - GD:
     . Fixed bug #75571 (Potential infinite loop in gdImageCreateFromGifCtx).
       (Christoph)

   - Opcache:
     . Fixed bug #75608 ("Narrowing occurred during type inference" error).
       (Laruence, Dmitry)
     . Fixed bug #75579 (Interned strings buffer overflow may cause crash).
       (Dmitry)
     . Fixed bug #75570 ("Narrowing occurred during type inference" error).
       (Dmitry)
     . Fixed bug #75556 (Invalid opcode 138/1/1). (Laruence)

   - PCRE:
     . Fixed bug #74183 (preg_last_error not returning error code after error).
       (Andrew Nester)

   - Phar:
     . Fixed bug #74782 (remove file name from output to avoid XSS). (stas)

   - Standard:
     . Fixed bug #75511 (fread not free unused buffer). (Laruence)
     . Fixed bug #75514 (mt_rand returns value outside [$min,$max]+ on 32-bit)
       (Remi)
     . Fixed bug #75535 (Inappropriately parsing HTTP response leads to PHP
       segment fault). (Nikita)
     . Fixed bug #75409 (accept EFAULT in addition to ENOSYS as indicator
       that getrandom() is missing). (sarciszewski)
     . Fixed bug #73124 (php_ini_scanned_files() not reporting correctly).
       (John Stevenson)
     . Fixed bug #75574 (putenv does not work properly if parameter contains
       non-ASCII unicode character). (Anatol)

   - Zip:
     . Fixed bug #75540 (Segfault with libzip 1.3.1). (Remi)


(bsiegert)
diff -r1.197.2.3 -r1.197.2.4 pkgsrc/lang/php/phpversion.mk
diff -r1.10 -r1.10.2.1 pkgsrc/lang/php72/distinfo
cvs diff -r1.197.2.3 -r1.197.2.4 pkgsrc/lang/php/phpversion.mk (expand / switch to unified diff)

--- pkgsrc/lang/php/phpversion.mk 2018/01/07 17:39:56 1.197.2.3
+++ pkgsrc/lang/php/phpversion.mk 2018/01/07 18:01:22 1.197.2.4
@@ -1,14 +1,14 @@ @@ -1,14 +1,14 @@
1# $NetBSD: phpversion.mk,v 1.197.2.3 2018/01/07 17:39:56 bsiegert Exp $ 1# $NetBSD: phpversion.mk,v 1.197.2.4 2018/01/07 18:01:22 bsiegert Exp $
2# 2#
3# This file selects a PHP version, based on the user's preferences and 3# This file selects a PHP version, based on the user's preferences and
4# the installed packages. It does not add a dependency on the PHP 4# the installed packages. It does not add a dependency on the PHP
5# package. 5# package.
6# 6#
7# === User-settable variables === 7# === User-settable variables ===
8# 8#
9# PHP_VERSION_DEFAULT 9# PHP_VERSION_DEFAULT
10# The PHP version to choose when more than one is acceptable to 10# The PHP version to choose when more than one is acceptable to
11# the package. 11# the package.
12# 12#
13# Possible: 56 70 71 72 13# Possible: 56 70 71 72
14# Default: 56 14# Default: 56
@@ -80,27 +80,27 @@ @@ -80,27 +80,27 @@
80# 80#
81# Example: lib/php/20140828 81# Example: lib/php/20140828
82# 82#
83# Keywords: php 83# Keywords: php
84# 84#
85 85
86.if !defined(PHPVERSION_MK) 86.if !defined(PHPVERSION_MK)
87PHPVERSION_MK= defined 87PHPVERSION_MK= defined
88 88
89# Define each PHP's version. 89# Define each PHP's version.
90PHP56_VERSION= 5.6.33 90PHP56_VERSION= 5.6.33
91PHP70_VERSION= 7.0.27 91PHP70_VERSION= 7.0.27
92PHP71_VERSION= 7.1.13 92PHP71_VERSION= 7.1.13
93PHP72_VERSION= 7.2.0 93PHP72_VERSION= 7.2.1
94 94
95# Define initial release of major version. 95# Define initial release of major version.
96PHP56_RELDATE= 20140828 96PHP56_RELDATE= 20140828
97PHP70_RELDATE= 20151203 97PHP70_RELDATE= 20151203
98PHP71_RELDATE= 20160303 98PHP71_RELDATE= 20160303
99PHP72_RELDATE= 20170718 99PHP72_RELDATE= 20170718
100 100
101_VARGROUPS+= php 101_VARGROUPS+= php
102_USER_VARS.php= PHP_VERSION_DEFAULT 102_USER_VARS.php= PHP_VERSION_DEFAULT
103_PKG_VARS.php= PHP_VERSIONS_ACCEPTED PHP_VERSION_REQD 103_PKG_VARS.php= PHP_VERSIONS_ACCEPTED PHP_VERSION_REQD
104_SYS_VARS.php= PKG_PHP_VERSION PKG_PHP PHPPKGSRCDIR PHP_PKG_PREFIX \ 104_SYS_VARS.php= PKG_PHP_VERSION PKG_PHP PHPPKGSRCDIR PHP_PKG_PREFIX \
105 PKG_PHP_MAJOR_VERS 105 PKG_PHP_MAJOR_VERS
106 106
cvs diff -r1.10 -r1.10.2.1 pkgsrc/lang/php72/Attic/distinfo (expand / switch to unified diff)

--- pkgsrc/lang/php72/Attic/distinfo 2017/12/24 13:37:12 1.10
+++ pkgsrc/lang/php72/Attic/distinfo 2018/01/07 18:01:22 1.10.2.1
@@ -1,19 +1,19 @@ @@ -1,19 +1,19 @@
1$NetBSD: distinfo,v 1.10 2017/12/24 13:37:12 jdolecek Exp $ 1$NetBSD: distinfo,v 1.10.2.1 2018/01/07 18:01:22 bsiegert Exp $
2 2
3SHA1 (php-7.2.0.tar.bz2) = b15bd8fef8d5b99b993784e9c2254ab82f616c64 3SHA1 (php-7.2.1.tar.bz2) = 3e5ad89b44fb83b9c356ba11c1c62b9ff3fad633
4RMD160 (php-7.2.0.tar.bz2) = a39b7057bcb93b656fda39008ee4743c4f7f2a0f 4RMD160 (php-7.2.1.tar.bz2) = 1959cd1fff0b222d20afd0aaf57f4c557ce72b51
5SHA512 (php-7.2.0.tar.bz2) = f4b4d97a0b662cab9ed47a549453ad522da45fa5aa34e3ece49a8b85b49b7a5921d2d7cdd0a6766b09d63c4f7fd022502222656ce112fc80f85e8f2409c5c826 5SHA512 (php-7.2.1.tar.bz2) = e9b6c013a06a771c2fa7581e49e6d6e019fe8fc6f8881a43905f7e87df5fc05420559fe40fb663d272ffc5cc188c4ef7c3ca835f5c542a28ca8de1cd42782865
6Size (php-7.2.0.tar.bz2) = 14594486 bytes 6Size (php-7.2.1.tar.bz2) = 14980278 bytes
7SHA1 (patch-configure) = 71d2e8334bea48db1e65c82219f2a93cf8d46159 7SHA1 (patch-configure) = 71d2e8334bea48db1e65c82219f2a93cf8d46159
8SHA1 (patch-ext_curl_config.m4) = 86a293d57aafcd42d1feab4a6d0d4f88dbcfb5c8 8SHA1 (patch-ext_curl_config.m4) = 86a293d57aafcd42d1feab4a6d0d4f88dbcfb5c8
9SHA1 (patch-ext_gd_config.m4) = 67730ccc13410adaf8829f77a6b044f16e412489 9SHA1 (patch-ext_gd_config.m4) = 67730ccc13410adaf8829f77a6b044f16e412489
10SHA1 (patch-ext_imap_config.m4) = f4e10ab81697b72019313f63bc630627a08efd92 10SHA1 (patch-ext_imap_config.m4) = f4e10ab81697b72019313f63bc630627a08efd92
11SHA1 (patch-ext_pcre_pcrelib_config.h) = c5fba95856628f68639fe63feeef04a5f83d3916 11SHA1 (patch-ext_pcre_pcrelib_config.h) = c5fba95856628f68639fe63feeef04a5f83d3916
12SHA1 (patch-ext_pdo__mysql_config.m4) = f7026001b9c40ae92f13400bd8002e59d4c17311 12SHA1 (patch-ext_pdo__mysql_config.m4) = f7026001b9c40ae92f13400bd8002e59d4c17311
13SHA1 (patch-ext_pdo_config.m4) = 95f3c1ccf696f6686da320e309b48cfcaadb5e43 13SHA1 (patch-ext_pdo_config.m4) = 95f3c1ccf696f6686da320e309b48cfcaadb5e43
14SHA1 (patch-ext_phar_Makefile.frag) = 558869b60f8ed6674a3ba1d595a65f010df4c426 14SHA1 (patch-ext_phar_Makefile.frag) = 558869b60f8ed6674a3ba1d595a65f010df4c426
15SHA1 (patch-ext_phar_phar_phar.php) = f630e3946b21b76d4fe857a43e00e25c9445f2c8 15SHA1 (patch-ext_phar_phar_phar.php) = f630e3946b21b76d4fe857a43e00e25c9445f2c8
16SHA1 (patch-ext_recode_recode.c) = 639bf762302c7a30c88d3f3fa862494e0f847bdb 16SHA1 (patch-ext_recode_recode.c) = 639bf762302c7a30c88d3f3fa862494e0f847bdb
17SHA1 (patch-ext_sqlite3_libsqlite_sqlite3.c) = 8a529a1b3f7c97731f2e719d006f67c3a7259bb5 17SHA1 (patch-ext_sqlite3_libsqlite_sqlite3.c) = 8a529a1b3f7c97731f2e719d006f67c3a7259bb5
18SHA1 (patch-ext_xsl_php__xsl.h) = a9877bff7bacc77926a4541a0ac171c00ad1a627 18SHA1 (patch-ext_xsl_php__xsl.h) = a9877bff7bacc77926a4541a0ac171c00ad1a627
19SHA1 (patch-makedist) = 3e796ab59bece3f762f41fd0c6f142c88c2d88a8 19SHA1 (patch-makedist) = 3e796ab59bece3f762f41fd0c6f142c88c2d88a8