Subject: CVS commit: pkgsrc/lang/php5
From: Takahiro Kambe
Date: 2009-12-23 08:07:35
Message id: 20091223070735.2B0CB175DD@cvs.netbsd.org

Log Message:
Update lang/php5 to 5.2.12, security update.

Security Enhancements and Fixes in PHP 5.2.12:

* Fixed a safe_mode bypass in tempnam() identified by Grzegorz
  Stachowiak. (CVE-2009-3557, Rasmus)
* Fixed a open_basedir bypass in posix_mkfifo() identified by Grzegorz
  Stachowiak. (CVE-2009-3558, Rasmus)
* Added "max_file_uploads" INI directive, which can be set to limit the
  number of file uploads per-request to 20 by default, to prevent possible
  DOS via temporary file exhaustion, identified by Bogdan
  Calin. (CVE-2009-4017, Ilia)
* Added protection for $_SESSION from interrupt corruption and improved
  "session.save_path" check, identified by Stefan Esser. (CVE-2009-4143,
  Stas)
* Fixed bug #49785 (insufficient input string validation of
  htmlspecialchars()). (CVE-2009-4142, Moriyoshi, hello at iwamot dot com)

Key enhancements in PHP 5.2.12 include:

* Fixed unnecessary invocation of setitimer when timeouts have been
  disabled. (Arvind Srinivasan)
* Fixed crash in com_print_typeinfo when an invalid typelib is given. (Pierre)
* Fixed crash in SQLiteDatabase::ArrayQuery() and
  SQLiteDatabase::SingleQuery() when calling using Reflection. (Felipe)
* Fixed crash when instantiating PDORow and PDOStatement through
  Reflection. (Felipe)
* Fixed memory leak in openssl_pkcs12_export_to_file(). (Felipe)
* Fixed bug #50207 (segmentation fault when concatenating very large strings
  on 64bit linux). (Ilia)
* Fixed bug #50162 (Memory leak when fetching timestamp column from Oracle
  database). (Felipe)
* Fixed bug #50006 (Segfault caused by uksort()). (Felipe)
* Fixed bug #50005 (Throwing through Reflection modified Exception object
  makes segmentation fault). (Felipe)
* Fixed bug #49174 (crash when extending PDOStatement and trying to set
  queryString property). (Felipe)
* Fixed bug #49098 (mysqli segfault on error). (Rasmus)
* Over 50 other bug fixes.

Files:
RevisionActionfile
1.75modifypkgsrc/lang/php5/Makefile
1.39modifypkgsrc/lang/php5/Makefile.common
1.25modifypkgsrc/lang/php5/PLIST
1.71modifypkgsrc/lang/php5/distinfo
1.4modifypkgsrc/lang/php5/patches/patch-ag
1.3modifypkgsrc/lang/php5/patches/patch-ah
1.2removepkgsrc/lang/php5/patches/patch-ay
1.2removepkgsrc/lang/php5/patches/patch-az
1.1removepkgsrc/lang/php5/patches/patch-ba
1.1removepkgsrc/lang/php5/patches/patch-bb
1.1removepkgsrc/lang/php5/patches/patch-bc
1.1removepkgsrc/lang/php5/patches/patch-bd