Commit graph

6 commits

Author SHA1 Message Date
Torsten Zuehlsdorff
fb0a15a002 Update PHP 7.2 from 7.2.20 to 7.2.21
Changelog:

    Date:
        Fixed bug #69044 (discrepency between time and microtime).
    EXIF:
        Fixed bug #78256 (heap-buffer-overflow on exif_process_user_comment). (CVE-2019-11042)
        Fixed bug #78222 (heap-buffer-overflow on exif_scan_thumbnail). (CVE-2019-11041)
    Fileinfo:
        Fixed bug #78183 (finfo_file shows wrong mime-type for .tga file).
    FTP:
        Fixed bug #77124 (FTP with SSL memory leak).
    Libxml:
        Fixed bug #78279 (libxml_disable_entity_loader settings is shared between requests (cgi-fcgi)).
    LiteSpeed:
        Updated to LiteSpeed SAPI V7.4.3 (increased response header count limit from 100 to 1000, added crash handler to cleanly shutdown PHP request, added CloudLinux mod_lsapi mode).
        Fixed bug #76058 (After "POST data can't be buffered", using php://input makes huge tmp files).
    Openssl:
        Fixed bug #78231 (Segmentation fault upon stream_socket_accept of exported socket-to-stream).
    OPcache:
        Fixed bug #78189 (file cache strips last character of uname hash).
        Fixed bug #78202 (Opcache stats for cache hits are capped at 32bit NUM).
        Fixed bug #78291 (opcache_get_configuration doesn't list all directives).
    Phar:
        Fixed bug #77919 (Potential UAF in Phar RSHUTDOWN).
    Phpdbg:
        Fixed bug #78297 (Include unexistent file memory leak).
    PDO_Sqlite:
        Fixed bug #78192 (SegFault when reuse statement after schema has changed).
    SQLite:
        Upgraded to SQLite 3.28.0.
    Standard:
        Fixed bug #78241 (touch() does not handle dates after 2038 in PHP 64-bit).
        Fixed bug #78269 (password_hash uses weak options for argon2).
    XMLRPC:
        Fixed bug #78173 (XML-RPC mutates immutable objects during encoding).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.2.21

MFH:		2019Q3
2019-08-03 18:28:12 +00:00
Gerald Pfeifer
ea8c8ec7da Bump PORTREVISION for ports depending on the canonical version of GCC
as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3
to GCC 9.1 under most circumstances now after revision 507371.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.

PR:		238330
2019-07-26 20:46:53 +00:00
Torsten Zuehlsdorff
3b852c2cd4 lang/php72: Upgrade from 7.2.13 to 7.2.14
Changelog:

    Core:
        Fixed bug #77369 (memcpy with negative length via crafted DNS response).
        Fixed bug #71041 (zend_signal_startup() needs ZEND_API).
        Fixed bug #76046 (PHP generates "FE_FREE" opcode on the wrong line).
    COM:
        Fixed bug #77177 (Serializing or unserializing COM objects crashes).
    Date:
        Fixed bug #77097 (DateTime::diff gives wrong diff when the actual diff is less than 1 second).
    Exif:
        Fixed bug #77184 (Unsigned rational numbers are written out as signed rationals).
    GD:
        Fixed bug #77269 (efree() on uninitialized Heap data in imagescale leads to use-after-free).
        Fixed bug #77270 (imagecolormatch Out Of Bounds Write on Heap).
        Fixed bug #77195 (Incorrect error handling of imagecreatefromjpeg()).
        Fixed bug #77198 (auto cropping has insufficient precision).
        Fixed bug #77200 (imagecropauto(…, GD_CROP_SIDES) crops left but not right).
    IMAP:
        Fixed bug #77020 (null pointer dereference in imap_mail).
    Mbstring:
        Fixed bug #77370 (Buffer overflow on mb regex functions - fetch_token).
        Fixed bug #77371 (heap buffer overflow in mb regex functions - compile_string_node).
        Fixed bug #77381 (heap buffer overflow in multibyte match_at).
        Fixed bug #77382 (heap buffer overflow due to incorrect length in expand_case_fold_string).
        Fixed bug #77385 (buffer overflow in fetch_token).
        Fixed bug #77394 (Buffer overflow in multibyte case folding - unicode).
        Fixed bug #77418 (Heap overflow in utf32be_mbc_to_code).
    OCI8:
        Fixed bug #76804 (oci_pconnect with OCI_CRED_EXT not working).
        Added oci_set_call_timeout() for call timeouts.
        Added oci_set_db_operation() for the DBOP end-to-end-tracing attribute.
    Opcache:
        Fixed bug #77215 (CFG assertion failure on multiple finalizing switch frees in one block).
    PDO:
        Handle invalid index passed to PDOStatement::fetchColumn() as error.
    Phar:
        Fixed bug #77247 (heap buffer overflow in phar_detect_phar_fname_ext).
    Sockets:
        Fixed bug #77136 (Unsupported IPV6_RECVPKTINFO constants on macOS).
    SQLite3:
        Fixed bug #77051 (Issue with re-binding on SQLite3).
    Xmlrpc:
        Fixed bug #77242 (heap out of bounds read in xmlrpc_decode()).
        Fixed bug #77380 (Global out of bounds read in xmlrpc base64 code).

Changelog taken from: http://www.php.net/ChangeLog-7.php#7.2.14

MFH:		2019Q1
2019-01-14 11:03:01 +00:00
Gerald Pfeifer
a9f015d155 Bump PORTREVISION for ports depending on the canonical version of GCC
defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t
GCC 8.2 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.

PR:		231590
2018-12-12 01:35:33 +00:00
Torsten Zuehlsdorff
b817a5b90e PHP 7.1 and PHP 7.2: add TEST_TARGET to all extensions
This enables "make test" in every extension and eases
the test of changes to PHP.

I did ignore PHP 7.0 intentionally since it only receives
security updates and will EOL at the end of the year. Therefore
no great amount of work is expected for 7.0.
2018-07-24 08:44:32 +00:00
Torsten Zuehlsdorff
687591dd75 Add PHP 7.2 RC6
Notable changes:
- mcrypt module was removed
- sodium module was added
- sybase_ct artifacts removed

Also many PECL ports will not work with this version
since some files got renamed.

Reviewed by:           mat, ale, Rainer Duffner <rainer@ultra-secure.de>
Differential Revision: https://reviews.freebsd.org/D12980
2017-11-16 10:48:48 +00:00