Subject: CVS commit: [pkgsrc-2016Q3] pkgsrc/lang
From: Benny Siegert
Date: 2016-11-28 19:22:29
Message id: 20161128182229.38BA2FBA6@cvs.NetBSD.org

Log Message:
Pullup ticket #5159 - requested by taca
lang/php71: security fix

Revisions pulled up:
- lang/php71/Makefile                                           1.4
- lang/php71/distinfo                                           1.8-1.9

---
   Module Name:	pkgsrc
   Committed By:	jdolecek
   Date:		Sat Nov  5 14:30:31 UTC 2016

   Modified Files:
   	pkgsrc/lang/php: phpversion.mk
   	pkgsrc/lang/php71: Makefile distinfo

   Log Message:
   Update php71 to 7.1.0RC5.

   Changes between RC4 and RC5:

   - Core:
    . Fixed bug #73350 (Exception::__toString() cause circular references).
      (Laruence)
    . Fixed bug #73329 ((Float)"Nano" == NAN). (Anatol)

   - CLI Server:
    . Fixed bug #73360 (Unable to work in root with unicode chars). (Anatol)

   - SQLite3:
    . Fixed bug #73333 (2147483647 is fetched as string). (cmb)

   Change since RC3 and RC4:

   - Core:
    . Fixed bug #73288 (Segfault in __clone > Exception.toString > __get).
      (Laruence)
    . Fixed for #73240 (Write out of bounds at number_format). (Stas)
    . Fix pthreads detection when cross-compiling (ffontaine)
    . Fixed bug #73337 (try/catch not working with two exceptions inside a same
      operation). (Dmitry)

   - BCmath:
    . Fix bug #73190 (memcpy negative parameter _bc_new_num_ex). (Stas)

   - Date:
    . Fixed bug #45554 (Inconsistent behavior of the u format char). (Derick)
    . Fixed bug #48225 (DateTime parser doesn't set microseconds for \ 
"now").
      (Derick)
    . Fixed bug #52514 (microseconds are missing in DateTime class). (Derick)
    . Fixed bug #52519 (microseconds in DateInterval are missing). (Derick)
    . Fixed bug #60089 (DateTime::createFromFormat() U after u nukes microtime).
      (Derick)
    . Fixed bug #64887 (Allow DateTime modification with subsecond items).
      (Derick)
    . Fixed bug #68506 (General DateTime improvments needed for microseconds to
      become useful). (Derick)
    . Fixed bug #73109 (timelib_meridian doesn't parse dots correctly). (Derick)
    . Fixed bug #73247 (DateTime constructor does not initialise microseconds
      property). (Derick)
    . Fixed bug #73147 (Use After Free in PHP7 unserialize()). (Stas)
    . Fixed bug #73189 (Memcpy negative size parameter php_resolve_path). (Stas)

   - DOM:
    . Fixed bug #73150 (missing NULL check in dom_document_save_html). (Stas)

   - GD:
    . Fixed bug #73213 (Integer overflow in imageline() with antialiasing). (cmb)
    . Fixed bug #73272 (imagescale() is not affected by, but affects
      imagesetinterpolation()). (cmb)
    . Fixed bug #73279 (Integer overflow in gdImageScaleBilinearPalette()). (cmb)
    . Fixed bug #73280 (Stack Buffer Overflow in GD dynamicGetbuf). (cmb)

   - Intl:
    . Fixed bug #73007 (add locale length check). (Stas)
    . Fixed bug #73218 (add mitigation for ICU int overflow). (Stas)

   - OCI8
    . Fixed bug #71148 (Bind reference overwritten on PHP 7). (Oracle Corp.)

   - OpenSSL:
    . Fixed bug #73276 (crash in openssl_random_pseudo_bytes function). (Stas)

   - Session:
    . Fixed bug #73273 (session_unset() empties values from all variables in which
      is $_session stored). (Nikita)

   - SOAP:
    . Fixed bug #73037 (SoapServer reports Bad Request when gzipped). (Anatol)
    . Fixed bug #73237 (Nested object in "any" element overwrites \ 
other fields).
      (Keith Smiley)
    . Fixed bug #69137 (Peer verification fails when using a proxy with SoapClient)
      (Keith Smiley)

   - SimpleXML:
    . Fixed bug #73293 (NULL pointer dereference in SimpleXMLElement::asXML()).
      (Stas)

   - SQLite3:
    . Updated to SQLite3 3.15.0. (cmb)

   - Standard:
    . Fixed bug #73203 (passing additional_parameters causes mail to fail). (cmb)

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sat Nov 12 15:41:24 UTC 2016

   Modified Files:
   	pkgsrc/lang/php: phpversion.mk
   	pkgsrc/lang/php71: distinfo

   Log Message:
   Update php71 to 7.1.0rc6 (PHP 7.1.0RC6), including security fix.

   10 Nov 2016, PHP 7.1.0RC6

   - Core:
    . Fixded bug #72736 (Slow performance when fetching large dataset with mysqli
      / PDO). (Dmitry)

   - Date:
    . Fixed bug #73426 (createFromFormat with 'z' format char results in
      incorrect time). (Derick)

   - JSON:
    . Introduced encoder struct instead of global which fixes bugs #66025 and
      #73254 related to pretty print indentation. (Jakub Zelenka)

   - ODBC:
    . Fixed bug #73448 (odbc_errormsg returns trash, always 513 bytes).
      (Anatol)

   - PCRE:
    . Fixed bug #73392 (A use-after-free in zend allocator management).
      (Laruence)

   - PDO_Firebird:
    . Fixed bug #73087, #61183, #71494 (Memory corruption in bindParam).
      (Dorin Marcoci)

   - SPL:
    . Fixed bug #73423 (Reproducible crash with GDB backtrace). (Laruence)

Files:
RevisionActionfile
1.3.2.1modifypkgsrc/lang/php71/Makefile
1.6.2.2modifypkgsrc/lang/php71/distinfo