Subject: CVS commit: [pkgsrc-2015Q4] pkgsrc/lang
From: Benny Siegert
Date: 2016-02-10 21:36:47
Message id: 20160210203647.53025FBB7@cvs.NetBSD.org

Log Message:
Pullup ticket #4917 - requested by taca
lang/php56: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.124
- lang/php56/distinfo                                           1.22

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sat Feb  6 07:13:02 UTC 2016

   Modified Files:
   	pkgsrc/lang/php: phpversion.mk
   	pkgsrc/lang/php56: distinfo

   Log Message:
   Update php56 to 5.6.18 (PHP 5.6.18).

   04 Feb 2016, PHP 5.6.18

   - Core:
     . Fixed bug #71039 (exec functions ignore length but look for NULL termination).
       (Anatol)
     . Fixed bug #71089 (No check to duplicate zend_extension). (Remi)
     . Fixed bug #71201 (round() segfault on 64-bit builds). (Anatol)
     . Added support for new HTTP 451 code. (Julien)
     . Fixed bug #71273 (A wrong ext directory setup in php.ini leads to crash).
       (Anatol)
     . Fixed bug #71323 (Output of stream_get_meta_data can be falsified by its
       input). (Leo Gaspard)
     . Fixed bug #71459 (Integer overflow in iptcembed()). (Stas)

   - Apache2handler:
     . Fix >2G Content-Length headers in apache2handler. (Adam Harvey)

   - FTP:
     . Implemented FR #55651 (Option to ignore the returned FTP PASV address).
       (abrender at elitehosts dot com)

   - Opcache:
     . Fixed bug #71127 (Define in auto_prepend_file is overwrite). (Laruence)
     . Fixed bug #71024 (Unable to use PHP 7.0 x64 side-by-side with PHP 5.6 x32
       on the same server). (Anatol)

   - Phar:
     . Fixed bug #71354 (Heap corruption in tar/zip/phar parser). (Stas)
     . Fixed bug #71391 (NULL Pointer Dereference in phar_tar_setupmetadata()).
       (Stas)
     . Fixed bug #71488 (Stack overflow when decompressing tar archives). (Stas)

   - Session:
     . Fixed bug #69111 (Crash in SessionHandler::read()). (Anatol)

   - SOAP:
     . Fixed bug #70979 (crash with bad soap request). (Anatol)

   - SPL:
     . Fixed bug #71204 (segfault if clean spl_autoload_funcs while autoloading).
       (Laruence)

   - WDDX:
     . Fixed bug #71335 (Type Confusion in WDDX Packet Deserialization). (Stas)

Files:
RevisionActionfile
1.20.2.2modifypkgsrc/lang/php56/distinfo