CVS commit: [pkgsrc-2016Q3] pkgsrc/lang

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Mon Nov 21 06:08:51 UTC 2016

Modified Files:
        pkgsrc/lang/php [pkgsrc-2016Q3]: phpversion.mk
        pkgsrc/lang/php56 [pkgsrc-2016Q3]: distinfo

Log Message:
Pullup ticket #5157 - requested by taca
lang/php56: security fix

Revisions pulled up:
- lang/php56/distinfo                                           1.36

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Sat Nov 12 15:34:00 UTC 2016

   Modified Files:
        pkgsrc/lang/php: phpversion.mk
        pkgsrc/lang/php56: distinfo

   Log Message:
   Update php56 to 5.6.28 (PHP 5.6.28), including security fix (as usual).

   10 Nov 2016, PHP 5.6.28

   - Core:
     . Fixed bug #73337 (try/catch not working with two exceptions inside a same
       operation). (Dmitry)

   - Bz2:
     . Fixed bug #73356 (crash in bzcompress function). (Stas)

   -GD:
     . Fixed bug #73213 (Integer overflow in imageline() with antialiasing). (cmb)
     . Fixed bug #73272 (imagescale() is not affected by, but affects
       imagesetinterpolation()). (cmb)
     . Fixed bug #73279 (Integer overflow in gdImageScaleBilinearPalette()). (cmb)
     . Fixed bug #73280 (Stack Buffer Overflow in GD dynamicGetbuf). (cmb)
     . Fixed bug #72482 (Illegal write/read access caused by gdImageAALine overflow).
       (cmb)
     . Fixed bug #72696 (imagefilltoborder stackoverflow on truecolor images). (cmb)

   - Imap:
     . Fixed bug #73418 (Integer Overflow in "_php_imap_mail" leads Heap Overflow).
       (Anatol)

   - SPL:
     . Fixed bug #73144 (Use-after-free in ArrayObject Deserialization). (Stas)

   - SOAP:
     . Fixed bug #73037 (SoapServer reports Bad Request when gzipped). (Anatol)

   - SQLite3:
     . Fixed bug #73333 (2147483647 is fetched as string). (cmb)

   - Standard:
     . Fixed bug #73203 (passing additional_parameters causes mail to fail). (cmb)
     . Fixed bug #73188 (use after free in userspace streams). (Sara)

   - Wddx:
     . Fixed bug #73331 (NULL Pointer Dereference in WDDX Packet Deserialization
       with PDORow). (Stas)


To generate a diff of this commit:
cvs rdiff -u -r1.158.2.3 -r1.158.2.4 pkgsrc/lang/php/phpversion.mk
cvs rdiff -u -r1.34.2.1 -r1.34.2.2 pkgsrc/lang/php56/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/php/phpversion.mk
diff -u pkgsrc/lang/php/phpversion.mk:1.158.2.3 pkgsrc/lang/php/phpversion.mk:1.158.2.4
--- pkgsrc/lang/php/phpversion.mk:1.158.2.3     Fri Oct 21 18:47:32 2016
+++ pkgsrc/lang/php/phpversion.mk       Mon Nov 21 06:08:51 2016
@@ -1,4 +1,4 @@
-# $NetBSD: phpversion.mk,v 1.158.2.3 2016/10/21 18:47:32 bsiegert Exp $
+# $NetBSD: phpversion.mk,v 1.158.2.4 2016/11/21 06:08:51 bsiegert Exp $
 #
 # This file selects a PHP version, based on the user's preferences and
 # the installed packages. It does not add a dependency on the PHP
@@ -87,7 +87,7 @@
 PHPVERSION_MK= defined
 
 # Define each PHP's version.
-PHP56_VERSION= 5.6.27
+PHP56_VERSION= 5.6.28
 PHP70_VERSION= 7.0.12
 PHP71_VERSION= 7.1.0RC3
 

Index: pkgsrc/lang/php56/distinfo
diff -u pkgsrc/lang/php56/distinfo:1.34.2.1 pkgsrc/lang/php56/distinfo:1.34.2.2
--- pkgsrc/lang/php56/distinfo:1.34.2.1 Fri Oct 21 18:47:33 2016
+++ pkgsrc/lang/php56/distinfo  Mon Nov 21 06:08:51 2016
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.34.2.1 2016/10/21 18:47:33 bsiegert Exp $
+$NetBSD: distinfo,v 1.34.2.2 2016/11/21 06:08:51 bsiegert Exp $
 
-SHA1 (php-5.6.27.tar.bz2) = d633816758b0ab0481b1dabda098a70f5ad3ef4b
-RMD160 (php-5.6.27.tar.bz2) = 04ee43239ece4dfaf28440429848e9020eab3f99
-SHA512 (php-5.6.27.tar.bz2) = d9118b7937eb111cebf1020296a3105dc4ae5aee9a5e655643b872d6948e68ceb3340e861810b8fcaa4a201c5aec6c1009a7e3cf3ff1678e0ea68aefb632f10b
-Size (php-5.6.27.tar.bz2) = 14977600 bytes
+SHA1 (php-5.6.28.tar.bz2) = 57fa0f8a69ecebc6da4fb79162ed8b1f9a6248db
+RMD160 (php-5.6.28.tar.bz2) = 8444619a3dd44d6db049d8783fc77b86f42a2cca
+SHA512 (php-5.6.28.tar.bz2) = 57efbbf422b74d74cdbc701ada03e3eb517bbc543169de642bada5843f612e2f1a43f1654b0ab92d015d3d1e777ac15c630d05f98f0ee259f2e3c0ba63b9dbc2
+Size (php-5.6.28.tar.bz2) = 14987935 bytes
 SHA1 (patch-acinclude.m4) = b38fc34c3a3847dc317e8e286612b21ec8fd5ce8
 SHA1 (patch-configure) = 5d76f71aa903efa3c3491b908ff76419aa4af27c
 SHA1 (patch-ext_gd_config.m4) = b92ab4c7fe8aceaef7787a607a7d2eac258fee19