Sun Jan 7 18:01:22 2018 UTC ()
Pullup ticket #5676 - requested by taca
lang/php72: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.201
- lang/php72/distinfo                                           1.11

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Fri Jan  5 03:12:12 UTC 2018

   Modified Files:
   	pkgsrc/lang/php: phpversion.mk
   	pkgsrc/lang/php72: distinfo

   Log Message:
   lang/php72: update to 7.2.1

   04 Jan 2018, PHP 7.2.1

   - Core:
     . Fixed bug #75573 (Segmentation fault in 7.1.12 and 7.0.26). (Laruence)
     . Fixed bug #75384 (PHP seems incompatible with OneDrive files on demand).
       (Anatol)
     . Fixed bug #75525 (Access Violation in vcruntime140.dll). (Anatol)
     . Fixed bug #74862 (Unable to clone instance when private __clone defined).
       (Daniel Ciochiu)
     . Fixed bug #75074 (php-process crash when is_file() is used with strings
       longer 260 chars). (Anatol)

   - CLI server:
     . Fixed bug #73830 (Directory does not exist). (Anatol)

   - FPM:
     . Fixed bug #64938 (libxml_disable_entity_loader setting is shared between
       requests). (Remi)

   - GD:
     . Fixed bug #75571 (Potential infinite loop in gdImageCreateFromGifCtx).
       (Christoph)

   - Opcache:
     . Fixed bug #75608 ("Narrowing occurred during type inference" error).
       (Laruence, Dmitry)
     . Fixed bug #75579 (Interned strings buffer overflow may cause crash).
       (Dmitry)
     . Fixed bug #75570 ("Narrowing occurred during type inference" error).
       (Dmitry)
     . Fixed bug #75556 (Invalid opcode 138/1/1). (Laruence)

   - PCRE:
     . Fixed bug #74183 (preg_last_error not returning error code after error).
       (Andrew Nester)

   - Phar:
     . Fixed bug #74782 (remove file name from output to avoid XSS). (stas)

   - Standard:
     . Fixed bug #75511 (fread not free unused buffer). (Laruence)
     . Fixed bug #75514 (mt_rand returns value outside [$min,$max]+ on 32-bit)
       (Remi)
     . Fixed bug #75535 (Inappropriately parsing HTTP response leads to PHP
       segment fault). (Nikita)
     . Fixed bug #75409 (accept EFAULT in addition to ENOSYS as indicator
       that getrandom() is missing). (sarciszewski)
     . Fixed bug #73124 (php_ini_scanned_files() not reporting correctly).
       (John Stevenson)
     . Fixed bug #75574 (putenv does not work properly if parameter contains
       non-ASCII unicode character). (Anatol)

   - Zip:
     . Fixed bug #75540 (Segfault with libzip 1.3.1). (Remi)


(bsiegert)
diff -r1.197.2.3 -r1.197.2.4 pkgsrc/lang/php/phpversion.mk
diff -r1.10 -r1.10.2.1 pkgsrc/lang/php72/distinfo

cvs diff -r1.197.2.3 -r1.197.2.4 pkgsrc/lang/php/phpversion.mk (expand / switch to context diff)
--- pkgsrc/lang/php/phpversion.mk 2018/01/07 17:39:56 1.197.2.3
+++ pkgsrc/lang/php/phpversion.mk 2018/01/07 18:01:22 1.197.2.4
@@ -1,4 +1,4 @@
-# $NetBSD: phpversion.mk,v 1.197.2.3 2018/01/07 17:39:56 bsiegert Exp $
+# $NetBSD: phpversion.mk,v 1.197.2.4 2018/01/07 18:01:22 bsiegert Exp $
 #
 # This file selects a PHP version, based on the user's preferences and
 # the installed packages. It does not add a dependency on the PHP
@@ -90,7 +90,7 @@
 PHP56_VERSION=	5.6.33
 PHP70_VERSION=	7.0.27
 PHP71_VERSION=	7.1.13
-PHP72_VERSION=	7.2.0
+PHP72_VERSION=	7.2.1
 
 # Define initial release of major version.
 PHP56_RELDATE=	20140828

cvs diff -r1.10 -r1.10.2.1 pkgsrc/lang/php72/Attic/distinfo (expand / switch to context diff)
--- pkgsrc/lang/php72/Attic/distinfo 2017/12/24 13:37:12 1.10
+++ pkgsrc/lang/php72/Attic/distinfo 2018/01/07 18:01:22 1.10.2.1
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.10 2017/12/24 13:37:12 jdolecek Exp $
+$NetBSD: distinfo,v 1.10.2.1 2018/01/07 18:01:22 bsiegert Exp $
 
-SHA1 (php-7.2.0.tar.bz2) = b15bd8fef8d5b99b993784e9c2254ab82f616c64
-RMD160 (php-7.2.0.tar.bz2) = a39b7057bcb93b656fda39008ee4743c4f7f2a0f
-SHA512 (php-7.2.0.tar.bz2) = f4b4d97a0b662cab9ed47a549453ad522da45fa5aa34e3ece49a8b85b49b7a5921d2d7cdd0a6766b09d63c4f7fd022502222656ce112fc80f85e8f2409c5c826
-Size (php-7.2.0.tar.bz2) = 14594486 bytes
+SHA1 (php-7.2.1.tar.bz2) = 3e5ad89b44fb83b9c356ba11c1c62b9ff3fad633
+RMD160 (php-7.2.1.tar.bz2) = 1959cd1fff0b222d20afd0aaf57f4c557ce72b51
+SHA512 (php-7.2.1.tar.bz2) = e9b6c013a06a771c2fa7581e49e6d6e019fe8fc6f8881a43905f7e87df5fc05420559fe40fb663d272ffc5cc188c4ef7c3ca835f5c542a28ca8de1cd42782865
+Size (php-7.2.1.tar.bz2) = 14980278 bytes
 SHA1 (patch-configure) = 71d2e8334bea48db1e65c82219f2a93cf8d46159
 SHA1 (patch-ext_curl_config.m4) = 86a293d57aafcd42d1feab4a6d0d4f88dbcfb5c8
 SHA1 (patch-ext_gd_config.m4) = 67730ccc13410adaf8829f77a6b044f16e412489