./lang/php70, PHP Hypertext Preprocessor version 7.0

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]


Branch: CURRENT, Version: 7.0.32, Package name: php-7.0.32, Maintainer: pkgsrc-users

PHP is an HTML-embedded scripting language. It is modular, with
some object-oriented features. Much of its syntax is borrowed from
C, Java and Perl with a couple of unique PHP-specific features
thrown in. The language is designed to allow web developers to
write dynamically generated pages quickly.

This package provides PHP version 7.0.x.

PHP 7.0.0 comes with a new version of the Zend Engine, numerous improvements
and new features such as

* Improved performance: PHP 7 is up to twice as fast as PHP 5.6
* Significantly reduced memory usage
* Abstract Syntax Tree
* Consistent 64-bit support
* Improved Exception hierarchy
* Many fatal errors converted to Exceptions
* Secure random number generator
* Removed old and unsupported SAPIs and extensions
* The null coalescing operator (??)
* Return and Scalar Type Declarations
* Anonymous Classes
* Zero cost asserts

NOTE: This version is on security support only, with planned End of Live
on December 3 2018. Update to PHP 7.1.x or 7.2.x is recommended.


Required to run:
[textproc/libxml2] [devel/readline]

Required to build:
[pkgtools/cwrappers]

Package options: inet6, readline, ssl

Master sites: (Expand)

SHA1: b323e00d91bfdfae087a025b9233527e48d99772
RMD160: f26eb5d3e82555502ddf749bc7b08d9d2a72db22
Filesize: 14300.515 KB

Version history: (Expand)


CVS history: (Expand)


   2018-09-13 17:46:38 by Takahiro Kambe | Files touched by this commit (1) | Package updated
Log message:
lang/php70: Update to 7.0.32

13 Sep 2018 PHP 7.0.32

- Apache2
  . Fixed bug #76582 (XSS due to the header Transfer-Encoding: chunked). (Stas)
   2018-07-31 03:17:56 by Maya Rashish | Files touched by this commit (6)
Log message:
move --disable-gcc-global-regs to Makefile.php.
Seems to make a previously segfaulting netbsd-8/i386's build not segfault.
ap-php runs PHP's configure and builds some of its code, so it needs the
same flag.

Now we can stop requiring an arbitrary GCC version. The test case in the
GCC bugzilla fails on all GCC versions I tested, but magically some
versions of GCC manage to build a working PHP.
   2018-07-30 09:17:16 by Emmanuel Dreyfus | Files touched by this commit (3)
Log message:
Fix PHP buidl on i386

The --disable-gcc-global-regs fix is not enough, we really need
GCC 6 to avoid php crashing during www/ap-ph build.
   2018-07-20 15:27:28 by Takahiro Kambe | Files touched by this commit (2) | Package updated
Log message:
lang/php70: update to 7.0.31

19 Jul 2018 PHP 7.0.31

- Exif:
  . Fixed bug #76423 (Int Overflow lead to Heap OverFlow in
    exif_thumbnail_extract of exif.c). (Stas)
  . Fixed bug #76557 (heap-buffer-overflow (READ of size 48) while reading exif
    data). (Stas)

- Win32:
  . Fixed bug #76459 (windows linkinfo lacks openbasedir check). (Anatol)
   2018-07-18 09:33:12 by Emmanuel Dreyfus | Files touched by this commit (12)
Log message:
Add pkgsrc build option disable-filter-url to disable php://filter URL

php://filter URL is a feature documented here:
http://php.net/manual/en/wrappers.php.php

Unfortunately, it allows remote control of include() behavior
beyond what many developpers expected, enabling easy dump of
PHP source files. The administrator may want to disable the
feature for security sake, and this option makes that possible.
   2018-07-16 12:58:50 by Maya Rashish | Files touched by this commit (6)
Log message:
php*: disable global regs on i386.
Fixes PR pkg/53222 that resurfaced

Remove the previous workaround to add GCC_REQD, which isn't sufficient
any more, possibly due to enabling ssp/fortify?

XXX bumping PKGREVISION might not be sufficient, for the same reason the
GCC_REQD had to be moved to Makefile.php, it affects modules too.
   2018-04-26 17:46:57 by Takahiro Kambe | Files touched by this commit (1) | Package updated
Log message:
lang/php70: update to 7.0.30

26 Apr 2018 PHP 7.0.30

- Exif:
  . Fixed bug #76130 (Heap Buffer Overflow (READ: 1786) in exif_iif_add_value).
  (Stas)

- iconv:
  . Fixed bug #76249 (stream filter convert.iconv leads to infinite loop on
    invalid sequence). (Stas)

- LDAP:
  . Fixed bug #76248 (Malicious LDAP-Server Response causes Crash). (Stas)

- Phar:
  . Fixed bug #76129 (fix for CVE-2018-5712 may not be complete). (Stas)

29 Mar 2018 PHP 7.0.29

- FPM:
  . Fixed bug #75605 (Dumpable FPM child processes allow bypassing opcache
    access controls). (Jakub Zelenka)
   2018-03-29 18:22:24 by Takahiro Kambe | Files touched by this commit (1) | Package updated
Log message:
lang/php70: update to 7.0.29

29 Mar 2018 PHP 7.0.29

- FPM:
  . Fixed bug #75605 (Dumpable FPM child processes allow bypassing opcache
    access controls). (Jakub Zelenka)

01 Mar 2018 PHP 7.0.28

- Standard:
  . Fixed bug #75981 (stack-buffer-overflow while parsing HTTP response). (Stas)