Next | Query returned 2 messages, browsing 1 to 10 | previous

History of commit frequency

CVS Commit History:


   2017-08-13 21:07:26 by Benny Siegert | Files touched by this commit (2)
Log message:
Pullup ticket #5532 - requested by taca
lang/php71: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.186
- lang/php71/Makefile.php                                       1.6
- lang/php71/distinfo                                           1.26

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Fri Aug  4 23:08:47 UTC 2017

   Modified Files:
   	pkgsrc/lang/php: phpversion.mk
   	pkgsrc/lang/php71: Makefile.php distinfo

   Log message:
   Update php71 to 7.1.8.

   * pkgsrc change: enable readline PKG_OPTIONS default.

   03 Aug 2017, PHP 7.1.8

   - Core:
     . Fixed bug #74832 (Loading PHP extension with already registered function
       name leads to a crash). (jpauli)
     . Fixed bug #74780 (parse_url() broken when query string contains colon).
       (jhdxr)
     . Fixed bug #74761 (Unary operator expected error on some systems). (petk)
     . Fixed bug #73900 (Use After Free in unserialize() SplFixedArray). (nikic)
     . Fixed bug #74923 (Crash when crawling through network share). (Anatol)
     . Fixed bug #74913 (fixed incorrect poll.h include). (petk)
     . Fixed bug #74906 (fixed incorrect errno.h include). (petk)

   - Date:
     . Fixed bug #74852 (property_exists returns true on unknown DateInterval
       property). (jhdxr)

   - OCI8:
     . Fixed bug #74625 (Integer overflow in oci_bind_array_by_name). (Ingmar Runge)

   - Opcache:
     . Fixed bug #74623 (Infinite loop in type inference when using HTMLPurifier).
       (nikic)

   - OpenSSL:
    . Fixed bug #74798 (pkcs7_en/decrypt does not work if \x0a is used in content).
      (Anatol)
    . Added OPENSSL_DONT_ZERO_PAD_KEY constant to prevent key padding and fix bug
      #71917 (openssl_open() returns junk on envelope < 16 bytes) and bug #72362
      (OpenSSL Blowfish encryption is incorrect for short keys). (Jakub Zelenka)

   - PDO:
     . Fixed bug #69356 (PDOStatement::debugDumpParams() truncates query). (Adam
       Baratz)

   - SPL:
     . Fixed bug #73471 (PHP freezes with AppendIterator). (jhdxr)

   - SQLite3:
     . Fixed bug #74883 (SQLite3::__construct() produces "out of \ 
memory" exception
       with invalid flags). (Anatol)

   - Wddx:
     . Fixed bug #73173 (huge memleak when wddx_unserialize).
       (tloi at fortinet dot com)

   - zlib:
     . Fixed bug #73944 (dictionary option of inflate_init() does not work).
       (wapmorgan)
   2017-07-15 21:16:20 by Benny Siegert | Files touched by this commit (1)
Log message:
Pullup ticket #5508 - requested by taca
lang/php71: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.183
- lang/php71/distinfo                                           1.23

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Fri Jul  7 03:12:23 UTC 2017

   Modified Files:
   	pkgsrc/lang/php: phpversion.mk
   	pkgsrc/lang/php71: distinfo

   Log message:
   Update php71 to 7.1.7.

   06 Jul 2017, PHP 7.1.7

   - Core:
     . Fixed bug #74738 (Multiple [PATH=] and [HOST=] sections not properly
       parsed). (Manuel Mausz)
     . Fixed bug #74658 (Undefined constants in array properties result in broken
       properties). (Laruence)
     . Fixed misparsing of abstract unix domain socket names. (Sara)
     . Fixed bug #74603 (PHP INI Parsing Stack Buffer Overflow Vulnerability).
       (Stas)
     . Fixed bug #74101, bug #74614 (Unserialize Heap Use-After-Free (READ: 1) in
       zval_get_type). (Nikita)
     . Fixed bug #74111 (Heap buffer overread (READ: 1) finish_nested_data from
       unserialize). (Nikita)
     . Fixed bug #74819 (wddx_deserialize() heap out-of-bound read via
       php_parse_date()). (Derick)

   - Date:
     . Fixed bug #74639 (implement clone for DatePeriod and DateInterval).
       (andrewnester)

   - DOM:
     . Fixed bug #69373 (References to deleted XPath query results). (ttoohey)

   - GD:
     . Fixed bug #74435 (Buffer over-read into uninitialized memory). (cmb)

   - Intl:
     . Fixed bug #73473 (Stack Buffer Overflow in msgfmt_parse_message). (libnex)
     . Fixed bug #74705 (Wrong reflection on Collator::getSortKey and
       collator_get_sort_key). (Tyson Andre, Remi)

   - Mbstring:
     . Add oniguruma upstream fix (CVE-2017-9224, CVE-2017-9226, CVE-2017-9227,
       CVE-2017-9228, CVE-2017-9229) (Remi, Mamoru TASAKA)

   - OCI8:
    . Add TAF callback (PR #2459). (KoenigsKind)

   - Opcache:
     . Fixed bug #74663 (Segfault with opcache.memory_protect and
       validate_timestamp). (Laruence)
     . Revert opcache.enable_cli to default disabled. (Nikita)

   - OpenSSL:
     . Fixed bug #74720 (pkcs7_en/decrypt does not work if \x1a is used in
       content). (Anatol)
     . Fixed bug #74651 (negative-size-param (-1) in memcpy in zif_openssl_seal()).
       (Stas)

   - PDO_OCI:
     . Support Instant Client 12.2 in --with-pdo-oci configure option.
       (Tianfang Yang)

   - Reflection:
     . Fixed bug #74673 (Segfault when cast Reflection object to string with
       undefined constant). (Laruence)

   - SPL:
     . Fixed bug #74478 (null coalescing operator failing with SplFixedArray).
       (jhdxr)

   - FTP:
     . Fixed bug #74598 (ftp:// wrapper ignores context arg). (Sara)

   - PHAR:
     . Fixed bug #74386 (Phar::__construct reflection incorrect). (villfa)

   - SOAP
     . Fixed bug #74679 (Incorrect conversion array with WSDL_CACHE_MEMORY).
       (Dmitry)

   - Streams:
     . Fixed bug #74556 (stream_socket_get_name() returns '\0'). (Sara)

Next | Query returned 2 messages, browsing 1 to 10 | previous