Subject: CVS commit: [pkgsrc-2012Q2] pkgsrc
From: Matthias Scheler
Date: 2012-07-23 20:24:35
Message id: 20120723182435.9B582175DD@cvs.netbsd.org

Log Message:
Pullup ticket #3866 - requested by taca
archivers/php-bz2: security update
archivers/php-zip: security update
archivers/php-zlib: security update
converters/php-iconv: security update
converters/php-mbstring: security update
databases/php-dba: security update
databases/php-ldap: security update
databases/php-mssql: security update
databases/php-mysql: security update
databases/php-mysqli: security update
databases/php-pdo: security update
databases/php-pdo_dblib: security update
databases/php-pdo_mysql: security update
databases/php-pdo_pgsql: security update
databases/php-pdo_sqlite: security update
databases/php-pgsql: security update
databases/php-sqlite: security update
devel/php-gettext: security update
devel/php-gmp: security update
devel/php-pcntl: security update
devel/php-posix: security update
devel/php-shmop: security update
devel/php-sysvmsg: security update
devel/php-sysvsem: security update
devel/php-sysvshm: security update
graphics/php-exif: security update
graphics/php-gd: security update
lang/php53: security update
lang/php54: security update
mail/php-imap: security update
math/php-bcmath: security update
net/php-ftp: security update
net/php-snmp: security update
net/php-soap: security update
net/php-sockets: security update
net/php-xmlrpc: security update
security/php-mcrypt: security update
textproc/php-dom: security update
textproc/php-enchant: security update
textproc/php-intl: security update
textproc/php-json: security update
textproc/php-pspell: security update
textproc/php-wddx: security update
textproc/php-xsl: security update
time/php-calendar: security update
www/ap-php: security update
www/php-curl: security update
www/php-fpm: security update
www/php-tidy: security update

Revisions pulled up:
- archivers/php-zip/Makefile                                    1.15
- databases/php-dba/Makefile                                    1.15
- databases/php-mssql/Makefile                                  1.14
- databases/php-pdo_dblib/Makefile                              1.15
- databases/php-pdo_sqlite/Makefile                             1.12
- databases/php-sqlite/Makefile                                 1.16
- devel/php-gettext/Makefile                                    1.11
- devel/php-shmop/Makefile                                      1.11
- graphics/php-exif/Makefile                                    1.11
- graphics/php-gd/Makefile                                      1.28
- lang/php53/Makefile.common                                    1.15
- lang/php53/Makefile.php                                       1.19
- lang/php53/distinfo                                           1.46
- lang/php53/patches/patch-aj                                   1.2
- lang/php54/Makefile.common                                    1.2
- lang/php54/distinfo                                           1.2
- lang/php54/patches/patch-run-tests.php                        1.2
- net/php-soap/Makefile                                         1.4
- net/php-xmlrpc/Makefile                                       1.15
- textproc/php-dom/Makefile                                     1.4
- textproc/php-intl/Makefile                                    1.13
- textproc/php-pspell/Makefile                                  1.13
- textproc/php-wddx/Makefile                                    1.17
- textproc/php-xsl/Makefile                                     1.5
- www/ap-php/Makefile                                           1.27
- www/php-curl/Makefile                                         1.18

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Fri Jul 20 12:28:18 UTC 2012

   Modified Files:
   	pkgsrc/lang/php53: Makefile.common Makefile.php distinfo
   	pkgsrc/lang/php53/patches: patch-aj

   Log Message:
   Update php53 pacakge to 5.3.15 (PHP 5.3.15).

   19-July-2012

   o Zend Engine
   	* Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value
   	  that includes a semi-colon)

   o COM
   	* Fixed bug #62146 com_dotnet cannot be built shared

   o Core
   	* Fixed potential overflow in _php_stream_scandir, CVE-2012-2688
   	* Fixed bug #62432 (ReflectionMethod random corrupt memory on high
   	  concurrent)
   	* Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed Salt)

   o Fileinfo
   	* Fixed magic file regex support

   o FPM
   	* Fixed bug #61045 (fpm don't send error log to fastcgi clients)
   	* Fixed bug #61835 (php-fpm is not allowed to run as root)
   	* Fixed bug #61295 (php-fpm should not fail with commented 'user' for
   	  non-root start)
   	* Fixed bug #61026 (FPM pools can listen on the same address)
   	* Fixed bug #62033 (php-fpm exits with status 0 on some failures to
   	  start)
   	* Fixed bug #62153 (when using unix sockets, multiples FPM instances
   	  can be launched without errors)
   	* Fixed bug #62160 (Add process.priority to set nice(2) priorities)
   	* Fixed bug #61218 (FPM drops connection while receiving some binary
   	  values in FastCGI requests)
   	* Fixed bug #62205 (php-fpm segfaults (null passed to strstr))

   o Intl
   	* Fixed bug #62083 (grapheme_extract() memory leaks)
   	* Fixed bug #62081 (IntlDateFormatter constructor leaks memory when
   	  called twice)
   	* Fixed bug #62070 (Collator::getSortKey() returns garbage)
   	* Fixed bug #62017 (datefmt_create with incorrectly encoded timezone
   	  leaks pattern)
   	* Fixed bug #60785 (memory leak in IntlDateFormatter constructor)

   o JSON
   	* Reverted fix for bug #61537

   o Phar
   	* Fixed bug #62227 (Invalid phar stream path causes crash)

   o Reflection
   	* Fixed bug #62384 (Attempting to invoke a Closure more than once
   	  causes segfault)
   	* Fixed bug #62202 (ReflectionParameter::getDefaultValue() memory
   	  leaks with constant)

   o SPL
   	* Fixed bug #62262 (RecursiveArrayIterator does not implement Countable)

   o SQLite
   	* Fixed open_basedir bypass, CVE-2012-3365

   o XML Write
   	* Fixed bug #62064 (memory leak in the XML Writer module)

   o Zip
   	* Upgraded libzip to 0.10

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Fri Jul 20 12:29:05 UTC 2012

   Modified Files:
   	pkgsrc/lang/php54: Makefile.common distinfo
   	pkgsrc/lang/php54/patches: patch-run-tests.php

   Log Message:
   Update php54 package to 5.4.5 (PHP 5.4.5).

   19-July-2012

   o Core
   	* Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed Salt)
   	* Fixed bug #62432 (ReflectionMethod random corrupt memory on high
   	  concurrent)
   	* Fixed bug #62373 (serialize() generates wrong reference to the
   	  object).
   	* Fixed bug #62357 (compile failure: (S) Arguments missing for
   	  built-in function __memcmp)
   	* Fixed bug #61998 (Using traits with method aliases appears to result
   	  in crash during execution)
   	* Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value
   	  that includes a semi-colon)
   	* Fixed potential overflow in _php_stream_scandir (CVE-2012-2688)

   o EXIF
   	* Fixed information leak in ext exi

   o FPM
   	* Fixed bug #62205 (php-fpm segfaults (null passed to strstr)
   	* Fixed bug #62160 (Add process.priority to set nice(2) priorities)
   	* Fixed bug #62153 (when using unix sockets, multiples FPM instances)
   	* Fixed bug #62033 (php-fpm exits with status 0 on some failures to
   	  start)
   	* Fixed bug #61839 (Unable to cross-compile PHP with --enable-fpm)
   	* Fixed bug #61835 (php-fpm is not allowed to run as root)
   	* Fixed bug #61295 (php-fpm should not fail with commented 'user'
   	* Fixed bug #61218 (FPM drops connection while receiving some binary
   	  values in FastCGI requests)
   	* Fixed bug #61045 (fpm don't send error log to fastcgi clients).
   	  (fat) for non-root start)
   	* Fixed bug #61026 (FPM pools can listen on the same address).
   	  (fat) can be launched without errors)

   o Iconv
   	* Fixed bug #55042 (Erealloc in iconv.c unsafe)

   o Intl
   	* Fixed bug #62083 (grapheme_extract() memory leaks)
   	* Fixed bug #62081 (IntlDateFormatter constructor leaks memory when
   	  called twice)
   	* Fixed bug #62070 (Collator::getSortKey() returns garbage)
   	* Fixed bug #62017 (datefmt_create with incorrectly encoded timezone
   	  leaks pattern)
   	* Fixed bug #60785 (memory leak in IntlDateFormatter constructor)
   	* ResourceBundle constructor now accepts NULL for the first two arguments

   o JSON
   	* Fixed bug #61359 (json_encode() calls too many reallocs)

   o libxml
   	* Fixed bug #62266 (Custom extension segfaults during xmlParseFile
   	  with FPM SAPI)

   o Phar
   	* Fixed bug #62227 (Invalid phar stream path causes crash)

   o Readline
   	* Fixed bug #62186 (readline fails to compile - void function should
   	  not return a value)

   o Reflection
   	* Fixed bug #62384 (Attempting to invoke a Closure more than once
   	  causes segfault)
   	* Fixed bug #62202 (ReflectionParameter::getDefaultValue() memory
   	  leaks with constant)

   o Sockets
   	* Fixed bug #62025 (__ss_family was changed on AIX 5.3)

   o SPL
   	* Fixed bug #62433 (Inconsistent behavior of
   	  RecursiveDirectoryIterator to dot files)
   	* Fixed bug #62262 (RecursiveArrayIterator does not implement
   	  Countable)

   o XML Writer
   	* Fixed bug #62064 (memory leak in the XML Writer module)

   o Zip
   	* Upgraded libzip to 0.10.
   {

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Fri Jul 20 12:30:38 UTC 2012

   Modified Files:
   	pkgsrc/archivers/php-zip: Makefile
   	pkgsrc/databases/php-dba: Makefile
   	pkgsrc/databases/php-mssql: Makefile
   	pkgsrc/databases/php-pdo_dblib: Makefile
   	pkgsrc/databases/php-pdo_sqlite: Makefile
   	pkgsrc/databases/php-sqlite: Makefile
   	pkgsrc/devel/php-gettext: Makefile
   	pkgsrc/devel/php-shmop: Makefile
   	pkgsrc/graphics/php-exif: Makefile
   	pkgsrc/graphics/php-gd: Makefile
   	pkgsrc/net/php-soap: Makefile
   	pkgsrc/net/php-xmlrpc: Makefile
   	pkgsrc/textproc/php-dom: Makefile
   	pkgsrc/textproc/php-intl: Makefile
   	pkgsrc/textproc/php-pspell: Makefile
   	pkgsrc/textproc/php-wddx: Makefile
   	pkgsrc/textproc/php-xsl: Makefile
   	pkgsrc/www/ap-php: Makefile
   	pkgsrc/www/php-curl: Makefile

   Log Message:
   - Reset PKG_REVISION by both php53 and php54 are updated.
   - Remove supporting php5 (PHP 5.2.x) supporting codes.

Files:
RevisionActionfile
1.14.2.1modifypkgsrc/archivers/php-zip/Makefile
1.14.4.1modifypkgsrc/databases/php-dba/Makefile
1.13.10.1modifypkgsrc/databases/php-mssql/Makefile
1.14.10.1modifypkgsrc/databases/php-pdo_dblib/Makefile
1.11.2.1modifypkgsrc/databases/php-pdo_sqlite/Makefile
1.15.2.1modifypkgsrc/databases/php-sqlite/Makefile
1.10.10.1modifypkgsrc/devel/php-gettext/Makefile
1.10.12.1modifypkgsrc/devel/php-shmop/Makefile
1.10.12.1modifypkgsrc/graphics/php-exif/Makefile
1.27.6.1modifypkgsrc/graphics/php-gd/Makefile
1.14.2.1modifypkgsrc/lang/php53/Makefile.common
1.18.2.1modifypkgsrc/lang/php53/Makefile.php
1.45.2.1modifypkgsrc/lang/php53/distinfo
1.1.1.1.20.1modifypkgsrc/lang/php53/patches/patch-aj
1.1.2.1modifypkgsrc/lang/php54/Makefile.common
1.1.2.1modifypkgsrc/lang/php54/distinfo
1.1.2.1modifypkgsrc/lang/php54/patches/patch-run-tests.php
1.3.2.1modifypkgsrc/net/php-soap/Makefile
1.14.2.1modifypkgsrc/net/php-xmlrpc/Makefile
1.3.2.1modifypkgsrc/textproc/php-dom/Makefile
1.12.2.1modifypkgsrc/textproc/php-intl/Makefile
1.12.2.1modifypkgsrc/textproc/php-pspell/Makefile
1.16.2.1modifypkgsrc/textproc/php-wddx/Makefile
1.4.2.1modifypkgsrc/textproc/php-xsl/Makefile
1.26.8.1modifypkgsrc/www/ap-php/Makefile
1.17.10.1modifypkgsrc/www/php-curl/Makefile