Subject: CVS commit: [pkgsrc-2011Q4] pkgsrc/lang/php53
From: Steven Drake
Date: 2012-02-04 09:32:55
Message id: 20120204083255.7D2B4175DD@cvs.netbsd.org

Log Message:
Pullup ticket #3671 - requested by taca
lang/php53 security and build fixes.

Revisions pulled up:
- lang/php53/Makefile                                           1.22-1.23
- lang/php53/Makefile.common                                    1.10
- lang/php53/Makefile.php                                       1.13
- lang/php53/distinfo                                           1.32-1.35
- lang/php53/patches/patch-main_php__variables.c                deleted
- lang/php53/patches/patch-main_streams_cast.c                  1.1

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Feb  2 15:44:09 UTC 2012

   Modified Files:
   	pkgsrc/lang/php53: distinfo
   Added Files:
   	pkgsrc/lang/php53/patches: patch-main_streams_cast.c

   Log Message:
   Trying to fix build problem on NetBSD current recently.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Feb  2 16:00:40 UTC 2012

   Modified Files:
   	pkgsrc/lang/php53: Makefile distinfo
   Added Files:
   	pkgsrc/lang/php53/patches: patch-main_php__variables.c

   Log Message:
   Add fix for "Critical PHP Remote Vulnerability Introduced in Fix for PHP
   Hashtable Collision DOS" by revision 323007 from PHP's repository.

   \ 
http://thexploit.com/sec/critical-php-remote-vulnerability-introduced-in-fix-for-php-hashtable-collision-dos/

   Bump PKGREVISION.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Feb  2 16:19:44 UTC 2012

   Modified Files:
   	pkgsrc/lang/php53: distinfo
   	pkgsrc/lang/php53/patches: patch-main_php__variables.c

   Log Message:
   And more fix for memory leaks by revision 323013 from PHP's repository.
   Hopefully, these 18 minutes is allowed to avoid to PKGREVISION bump.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Fri Feb  3 03:10:34 UTC 2012

   Modified Files:
   	pkgsrc/lang/php53: Makefile Makefile.common Makefile.php distinfo
   Removed Files:
   	pkgsrc/lang/php53/patches: patch-main_php__variables.c

   Log Message:
   Update php53 package to 5.3.10.  Below security fix is already included
   in php-5.3.9nb2 package.

   02 Feb 2012, PHP 5.3.10

   - Core:
     . Fixed arbitrary remote code execution vulnerability reported by Stefan
       Esser, CVE-2012-0830. (Stas, Dmitry)

Files:
RevisionActionfile
1.19.2.3modifypkgsrc/lang/php53/Makefile
1.8.4.2modifypkgsrc/lang/php53/Makefile.common
1.10.2.3modifypkgsrc/lang/php53/Makefile.php
1.28.2.4modifypkgsrc/lang/php53/distinfo
1.1.2.2addpkgsrc/lang/php53/patches/patch-main_streams_cast.c