[pkgsrc/pkgsrc-2016Q3]: pkgsrc/lang Pullup ticket #5157 - requested by taca

[bsiegert <bsiegert%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/3e56a6f8f6e8
branches:  pkgsrc-2016Q3
changeset: 408814:3e56a6f8f6e8
user:      bsiegert <bsiegert%pkgsrc.org@localhost>
date:      Mon Nov 21 06:08:51 2016 +0000

description:
Pullup ticket #5157 - requested by taca
lang/php56: security fix

Revisions pulled up:
- lang/php56/distinfo                                           1.36

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Sat Nov 12 15:34:00 UTC 2016

   Modified Files:
        pkgsrc/lang/php: phpversion.mk
        pkgsrc/lang/php56: distinfo

   Log Message:
   Update php56 to 5.6.28 (PHP 5.6.28), including security fix (as usual).

   10 Nov 2016, PHP 5.6.28

   - Core:
     . Fixed bug #73337 (try/catch not working with two exceptions inside a same
       operation). (Dmitry)

   - Bz2:
     . Fixed bug #73356 (crash in bzcompress function). (Stas)

   -GD:
     . Fixed bug #73213 (Integer overflow in imageline() with antialiasing). (cmb)
     . Fixed bug #73272 (imagescale() is not affected by, but affects
       imagesetinterpolation()). (cmb)
     . Fixed bug #73279 (Integer overflow in gdImageScaleBilinearPalette()). (cmb)
     . Fixed bug #73280 (Stack Buffer Overflow in GD dynamicGetbuf). (cmb)
     . Fixed bug #72482 (Illegal write/read access caused by gdImageAALine overflow).
       (cmb)
     . Fixed bug #72696 (imagefilltoborder stackoverflow on truecolor images). (cmb)

   - Imap:
     . Fixed bug #73418 (Integer Overflow in "_php_imap_mail" leads Heap Overflow).
       (Anatol)

   - SPL:
     . Fixed bug #73144 (Use-after-free in ArrayObject Deserialization). (Stas)

   - SOAP:
     . Fixed bug #73037 (SoapServer reports Bad Request when gzipped). (Anatol)

   - SQLite3:
     . Fixed bug #73333 (2147483647 is fetched as string). (cmb)

   - Standard:
     . Fixed bug #73203 (passing additional_parameters causes mail to fail). (cmb)
     . Fixed bug #73188 (use after free in userspace streams). (Sara)

   - Wddx:
     . Fixed bug #73331 (NULL Pointer Dereference in WDDX Packet Deserialization
       with PDORow). (Stas)

diffstat:

 lang/php/phpversion.mk |   4 ++--
 lang/php56/distinfo    |  10 +++++-----
 2 files changed, 7 insertions(+), 7 deletions(-)

diffs (36 lines):

diff -r 9288a36285f9 -r 3e56a6f8f6e8 lang/php/phpversion.mk
--- a/lang/php/phpversion.mk    Mon Nov 07 19:16:38 2016 +0000
+++ b/lang/php/phpversion.mk    Mon Nov 21 06:08:51 2016 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: phpversion.mk,v 1.158.2.3 2016/10/21 18:47:32 bsiegert Exp $
+# $NetBSD: phpversion.mk,v 1.158.2.4 2016/11/21 06:08:51 bsiegert Exp $
 #
 # This file selects a PHP version, based on the user's preferences and
 # the installed packages. It does not add a dependency on the PHP
@@ -87,7 +87,7 @@
 PHPVERSION_MK= defined
 
 # Define each PHP's version.
-PHP56_VERSION= 5.6.27
+PHP56_VERSION= 5.6.28
 PHP70_VERSION= 7.0.12
 PHP71_VERSION= 7.1.0RC3
 
diff -r 9288a36285f9 -r 3e56a6f8f6e8 lang/php56/distinfo
--- a/lang/php56/distinfo       Mon Nov 07 19:16:38 2016 +0000
+++ b/lang/php56/distinfo       Mon Nov 21 06:08:51 2016 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.34.2.1 2016/10/21 18:47:33 bsiegert Exp $
+$NetBSD: distinfo,v 1.34.2.2 2016/11/21 06:08:51 bsiegert Exp $
 
-SHA1 (php-5.6.27.tar.bz2) = d633816758b0ab0481b1dabda098a70f5ad3ef4b
-RMD160 (php-5.6.27.tar.bz2) = 04ee43239ece4dfaf28440429848e9020eab3f99
-SHA512 (php-5.6.27.tar.bz2) = d9118b7937eb111cebf1020296a3105dc4ae5aee9a5e655643b872d6948e68ceb3340e861810b8fcaa4a201c5aec6c1009a7e3cf3ff1678e0ea68aefb632f10b
-Size (php-5.6.27.tar.bz2) = 14977600 bytes
+SHA1 (php-5.6.28.tar.bz2) = 57fa0f8a69ecebc6da4fb79162ed8b1f9a6248db
+RMD160 (php-5.6.28.tar.bz2) = 8444619a3dd44d6db049d8783fc77b86f42a2cca
+SHA512 (php-5.6.28.tar.bz2) = 57efbbf422b74d74cdbc701ada03e3eb517bbc543169de642bada5843f612e2f1a43f1654b0ab92d015d3d1e777ac15c630d05f98f0ee259f2e3c0ba63b9dbc2
+Size (php-5.6.28.tar.bz2) = 14987935 bytes
 SHA1 (patch-acinclude.m4) = b38fc34c3a3847dc317e8e286612b21ec8fd5ce8
 SHA1 (patch-configure) = 5d76f71aa903efa3c3491b908ff76419aa4af27c
 SHA1 (patch-ext_gd_config.m4) = b92ab4c7fe8aceaef7787a607a7d2eac258fee19