CVS commit: [pkgsrc-2017Q2] pkgsrc/lang

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Sat Jul 15 19:16:20 UTC 2017

Modified Files:
        pkgsrc/lang/php [pkgsrc-2017Q2]: phpversion.mk
        pkgsrc/lang/php71 [pkgsrc-2017Q2]: distinfo

Log Message:
Pullup ticket #5508 - requested by taca
lang/php71: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.183
- lang/php71/distinfo                                           1.23

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Fri Jul  7 03:12:23 UTC 2017

   Modified Files:
        pkgsrc/lang/php: phpversion.mk
        pkgsrc/lang/php71: distinfo

   Log Message:
   Update php71 to 7.1.7.

   06 Jul 2017, PHP 7.1.7

   - Core:
     . Fixed bug #74738 (Multiple [PATH=] and [HOST=] sections not properly
       parsed). (Manuel Mausz)
     . Fixed bug #74658 (Undefined constants in array properties result in broken
       properties). (Laruence)
     . Fixed misparsing of abstract unix domain socket names. (Sara)
     . Fixed bug #74603 (PHP INI Parsing Stack Buffer Overflow Vulnerability).
       (Stas)
     . Fixed bug #74101, bug #74614 (Unserialize Heap Use-After-Free (READ: 1) in
       zval_get_type). (Nikita)
     . Fixed bug #74111 (Heap buffer overread (READ: 1) finish_nested_data from
       unserialize). (Nikita)
     . Fixed bug #74819 (wddx_deserialize() heap out-of-bound read via
       php_parse_date()). (Derick)

   - Date:
     . Fixed bug #74639 (implement clone for DatePeriod and DateInterval).
       (andrewnester)

   - DOM:
     . Fixed bug #69373 (References to deleted XPath query results). (ttoohey)

   - GD:
     . Fixed bug #74435 (Buffer over-read into uninitialized memory). (cmb)

   - Intl:
     . Fixed bug #73473 (Stack Buffer Overflow in msgfmt_parse_message). (libnex)
     . Fixed bug #74705 (Wrong reflection on Collator::getSortKey and
       collator_get_sort_key). (Tyson Andre, Remi)

   - Mbstring:
     . Add oniguruma upstream fix (CVE-2017-9224, CVE-2017-9226, CVE-2017-9227,
       CVE-2017-9228, CVE-2017-9229) (Remi, Mamoru TASAKA)

   - OCI8:
    . Add TAF callback (PR #2459). (KoenigsKind)

   - Opcache:
     . Fixed bug #74663 (Segfault with opcache.memory_protect and
       validate_timestamp). (Laruence)
     . Revert opcache.enable_cli to default disabled. (Nikita)

   - OpenSSL:
     . Fixed bug #74720 (pkcs7_en/decrypt does not work if \x1a is used in
       content). (Anatol)
     . Fixed bug #74651 (negative-size-param (-1) in memcpy in zif_openssl_seal()).
       (Stas)

   - PDO_OCI:
     . Support Instant Client 12.2 in --with-pdo-oci configure option.
       (Tianfang Yang)

   - Reflection:
     . Fixed bug #74673 (Segfault when cast Reflection object to string with
       undefined constant). (Laruence)

   - SPL:
     . Fixed bug #74478 (null coalescing operator failing with SplFixedArray).
       (jhdxr)

   - FTP:
     . Fixed bug #74598 (ftp:// wrapper ignores context arg). (Sara)

   - PHAR:
     . Fixed bug #74386 (Phar::__construct reflection incorrect). (villfa)

   - SOAP
     . Fixed bug #74679 (Incorrect conversion array with WSDL_CACHE_MEMORY).
       (Dmitry)

   - Streams:
     . Fixed bug #74556 (stream_socket_get_name() returns '\0'). (Sara)


To generate a diff of this commit:
cvs rdiff -u -r1.181.2.1 -r1.181.2.2 pkgsrc/lang/php/phpversion.mk
cvs rdiff -u -r1.22 -r1.22.2.1 pkgsrc/lang/php71/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/php/phpversion.mk
diff -u pkgsrc/lang/php/phpversion.mk:1.181.2.1 pkgsrc/lang/php/phpversion.mk:1.181.2.2
--- pkgsrc/lang/php/phpversion.mk:1.181.2.1     Sat Jul 15 18:58:04 2017
+++ pkgsrc/lang/php/phpversion.mk       Sat Jul 15 19:16:20 2017
@@ -1,4 +1,4 @@
-# $NetBSD: phpversion.mk,v 1.181.2.1 2017/07/15 18:58:04 bsiegert Exp $
+# $NetBSD: phpversion.mk,v 1.181.2.2 2017/07/15 19:16:20 bsiegert Exp $
 #
 # This file selects a PHP version, based on the user's preferences and
 # the installed packages. It does not add a dependency on the PHP
@@ -89,7 +89,7 @@ PHPVERSION_MK=        defined
 # Define each PHP's version.
 PHP56_VERSION= 5.6.30
 PHP70_VERSION= 7.0.21
-PHP71_VERSION= 7.1.6
+PHP71_VERSION= 7.1.7
 
 # Define initial release of major version.
 PHP56_RELDATE= 20140828

Index: pkgsrc/lang/php71/distinfo
diff -u pkgsrc/lang/php71/distinfo:1.22 pkgsrc/lang/php71/distinfo:1.22.2.1
--- pkgsrc/lang/php71/distinfo:1.22     Fri Jun  9 01:23:25 2017
+++ pkgsrc/lang/php71/distinfo  Sat Jul 15 19:16:20 2017
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.22 2017/06/09 01:23:25 taca Exp $
+$NetBSD: distinfo,v 1.22.2.1 2017/07/15 19:16:20 bsiegert Exp $
 
-SHA1 (php-7.1.6.tar.bz2) = cad3af5b10a4c303da8ef825aa5294f276267344
-RMD160 (php-7.1.6.tar.bz2) = cf898da92c8fd2f7551411e0907e9e7a3347745b
-SHA512 (php-7.1.6.tar.bz2) = 9f4e815b4c8e6241d73dd6220e8b2b09cb4d7f24b7891119414535ae905b482ce3ee2c9581cf9c35a61af77e62fed4e4856339e7d928047f2c05c10100c5009e
-Size (php-7.1.6.tar.bz2) = 15732452 bytes
+SHA1 (php-7.1.7.tar.bz2) = 1d7112102e79b052ebc47e3fd90ad24ddcfb8394
+RMD160 (php-7.1.7.tar.bz2) = bcba338427733569b3be8ed27c5dba2afc3fca80
+SHA512 (php-7.1.7.tar.bz2) = a505f8d1e140edff3f5bf6407adecf07cba1223fc905a978249684e9106832bcac0e9879ed07eed271c3bccd8204823d0e5ce2712dcb4432f50a3cf026e7bc84
+Size (php-7.1.7.tar.bz2) = 15751686 bytes
 SHA1 (patch-acinclude.m4) = b682280fd89950c082c2226bdb7364b0dc475bad
 SHA1 (patch-configure) = a129e19ef87338f6e53ccc967c40ddcde7c7357c
 SHA1 (patch-ext_gd_config.m4) = 93b62daad93b9ee6dc28e06016f739bc26b0dc9f