./lang/php56, PHP Hypertext Preprocessor version 5.6

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: pkgsrc-2017Q2, Version: 5.6.31, Package name: php-5.6.31, Maintainer: pkgsrc-users

PHP is an HTML-embedded scripting language. It is modular, with
some object-oriented features. Much of its syntax is borrowed from
C, Java and Perl with a couple of unique PHP-specific features
thrown in. The language is designed to allow web developers to
write dynamically generated pages quickly.

This package provides PHP version 5.6.x.


Required to run:
[textproc/libxml2]

Required to build:
[pkgtools/cwrappers]

Package options: inet6, ssl

Master sites: (Expand)

SHA1: a4ea2b095c60d61958a43ca4151acfaf4ac82e4c
RMD160: e1512f94a9d1054ef136921787a47359d9cdd9bf
Filesize: 14676.575 KB

Version history: (Expand)

CVS history: (Expand)


   2017-07-15 21:23:44 by Benny Siegert | Files touched by this commit (2) 
Log message:
Pullup ticket #5509 - requested by taca
lang/php56: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.184
- lang/php56/Makefile                                           1.14
- lang/php56/distinfo                                           1.42

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Fri Jul  7 03:13:48 UTC 2017

   Modified Files:
   	pkgsrc/lang/php: phpversion.mk
   	pkgsrc/lang/php56: Makefile distinfo

   Log message:
   Update php56 to 5.6.31.

   06 Jul 2017, PHP 5.6.31

   - Core:
     . Fixed bug #73807 (Performance problem with processing post request over
       2000000 chars). (Nikita)
     . Fixed bug #74111 (Heap buffer overread (READ: 1) finish_nested_data from
       unserialize). (Nikita)
     . Fixed bug #74603 (PHP INI Parsing Stack Buffer Overflow Vulnerability).
       (Stas)
     . Fixed bug #74819 (wddx_deserialize() heap out-of-bound read via
       php_parse_date()). (Derick)

   - GD:
     . Fixed bug #74435 (Buffer over-read into uninitialized memory). (cmb)

   - mbstring:
     . Add oniguruma upstream fix (CVE-2017-9224, CVE-2017-9226, CVE-2017-9227,
       CVE-2017-9228, CVE-2017-9229) (Remi, Mamoru TASAKA)

   - OpenSSL:
     . Fixed bug #74651 (negative-size-param (-1) in memcpy in zif_openssl_seal()).
       (Stas)

   - PCRE:
     . Fixed bug #74087 (Segmentation fault in PHP7.1.1(compiled using the \ 
bundled PCRE library)).
       (Stas)

   - WDDX:
      . Fixed bug #74145 (wddx parsing empty boolean tag leads to SIGSEGV). (Stas)