CVS commit: [pkgsrc-2019Q4] pkgsrc/lang

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Wed Jan 29 13:39:33 UTC 2020

Modified Files:
        pkgsrc/lang/php [pkgsrc-2019Q4]: phpversion.mk
        pkgsrc/lang/php72 [pkgsrc-2019Q4]: Makefile distinfo

Log Message:
Pullup ticket #6129 - requested by taca
lang/php72: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.286
- lang/php72/Makefile                                           1.23-1.24
- lang/php72/distinfo                                           1.51

---
   Module Name: pkgsrc
   Committed By:        jperkin
   Date:                Sat Jan 18 21:51:16 UTC 2020

   Modified Files:
        pkgsrc/lang/php72: Makefile

   Log Message:
   *: Recursive revision bump for openssl 1.1.1.

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Sat Jan 25 17:24:03 UTC 2020

   Modified Files:
        pkgsrc/lang/php: phpversion.mk
        pkgsrc/lang/php72: Makefile distinfo

   Log Message:
   lang/php72: update to 7.2.27

   Update php72 to 7.2.27 (PHP 7.2.27).

   23 Jan 2020, PHP 7.2.27

   - Mbstring:
     . Fixed bug #79037 (global buffer-overflow in `mbfl_filt_conv_big5_wchar`).
       (CVE-2020-7060) (Nikita)

   - Session:
     . Fixed bug #79091 (heap use-after-free in session_create_id()). (cmb, Nikita)

   - Standard:
     . Fixed bug #79099 (OOB read in php_strip_tags_ex). (CVE-2020-7059). (cmb)


To generate a diff of this commit:
cvs rdiff -u -r1.283.4.2 -r1.283.4.3 pkgsrc/lang/php/phpversion.mk
cvs rdiff -u -r1.22 -r1.22.4.1 pkgsrc/lang/php72/Makefile
cvs rdiff -u -r1.50 -r1.50.4.1 pkgsrc/lang/php72/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/php/phpversion.mk
diff -u pkgsrc/lang/php/phpversion.mk:1.283.4.2 pkgsrc/lang/php/phpversion.mk:1.283.4.3
--- pkgsrc/lang/php/phpversion.mk:1.283.4.2     Wed Jan 29 13:34:46 2020
+++ pkgsrc/lang/php/phpversion.mk       Wed Jan 29 13:39:33 2020
@@ -1,4 +1,4 @@
-# $NetBSD: phpversion.mk,v 1.283.4.2 2020/01/29 13:34:46 bsiegert Exp $
+# $NetBSD: phpversion.mk,v 1.283.4.3 2020/01/29 13:39:33 bsiegert Exp $
 #
 # This file selects a PHP version, based on the user's preferences and
 # the installed packages. It does not add a dependency on the PHP
@@ -88,7 +88,7 @@ PHPVERSION_MK=        defined
 
 # Define each PHP's version.
 PHP56_VERSION= 5.6.40
-PHP72_VERSION= 7.2.26
+PHP72_VERSION= 7.2.27
 PHP73_VERSION= 7.3.14
 PHP74_VERSION= 7.4.2
 

Index: pkgsrc/lang/php72/Makefile
diff -u pkgsrc/lang/php72/Makefile:1.22 pkgsrc/lang/php72/Makefile:1.22.4.1
--- pkgsrc/lang/php72/Makefile:1.22     Mon Dec 16 15:58:18 2019
+++ pkgsrc/lang/php72/Makefile  Wed Jan 29 13:39:33 2020
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.22 2019/12/16 15:58:18 taca Exp $
+# $NetBSD: Makefile,v 1.22.4.1 2020/01/29 13:39:33 bsiegert Exp $
 
 #
 # We can't omit PKGNAME here to handle PKG_OPTIONS.

Index: pkgsrc/lang/php72/distinfo
diff -u pkgsrc/lang/php72/distinfo:1.50 pkgsrc/lang/php72/distinfo:1.50.4.1
--- pkgsrc/lang/php72/distinfo:1.50     Sat Dec 21 07:02:15 2019
+++ pkgsrc/lang/php72/distinfo  Wed Jan 29 13:39:33 2020
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.50 2019/12/21 07:02:15 taca Exp $
+$NetBSD: distinfo,v 1.50.4.1 2020/01/29 13:39:33 bsiegert Exp $
 
-SHA1 (php-7.2.26.tar.xz) = 900f24ee0d0851566a63f7ff2c59fcfa03e27aae
-RMD160 (php-7.2.26.tar.xz) = d62f811f36bc146de8f0ddd68f41820f46a74b09
-SHA512 (php-7.2.26.tar.xz) = 457e3420120135e311a22cd11529d5a3efc5885af4f298196f403093141801619d4dcdb38d6a4a5f8d9dcfa619688d8fdf33fea4a30e2d885e987b739a268f12
-Size (php-7.2.26.tar.xz) = 12309176 bytes
+SHA1 (php-7.2.27.tar.xz) = 6c7647acc873ef2a23c6af2130f466509e4ff420
+RMD160 (php-7.2.27.tar.xz) = f07a0007ed55d8535e8bedbc6a5a03ced5f28842
+SHA512 (php-7.2.27.tar.xz) = 02416e2bdfcd47ef660c7403ca25c7358c2f9a685b1dee6a2a95c52d1b1178666f9fa0bb32dc070cfd09febb5c44ecdb70116546142369d7ead4432634dc38c5
+Size (php-7.2.27.tar.xz) = 12307512 bytes
 SHA1 (patch-configure) = 6e66a79e691a84aa7ae461f8dec1752443ad6b61
 SHA1 (patch-disable-filter-url) = e9e92d686ddd1d1a1ece10fe4feee4e368fe510c
 SHA1 (patch-ext_gd_config.m4) = eaecfb31b18700dd642c067ed82748d4f6be2335