[pkgsrc/pkgsrc-2008Q1]: pkgsrc/lang/php5 pullup ticket #2378 - requested by a...

[rtr <rtr%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/582f1eef9b9e
branches:  pkgsrc-2008Q1
changeset: 540341:582f1eef9b9e
user:      rtr <rtr%pkgsrc.org@localhost>
date:      Thu May 15 09:56:31 2008 +0000

description:
pullup ticket #2378 - requested by adrianp
php5: many security fixes

revisions pulled up:
- pkgsrc/lang/php5/Makefile             1.64
- pkgsrc/lang/php5/Makefile.common      1.29
- pkgsrc/lang/php5/distinfo             1.52

   Module Name: pkgsrc
   Committed By:        adrianp
   Date:                Sun May  4 16:50:44 UTC 2008

   Modified Files:
        pkgsrc/lang/php5: Makefile Makefile.common distinfo

   Log Message:
   Security Enhancements and Fixes in PHP 5.2.6:

   Fixed possible stack buffer overflow in the FastCGI SAPI identified by Andrei Nigmatulin.
   Fixed integer overflow in printf() identified by Maksymilian Aciemowicz.
   Fixed security issue detailed in CVE-2008-0599 identified by Ryan Permeh.
   Fixed a safe_mode bypass in cURL identified by Maksymilian Arciemowicz.
   Properly address incomplete multibyte chars inside escapeshellcmd() identified by Stefan Esser.
   Upgraded bundled PCRE to version 7.6

   Key enhancements in PHP 5.2.6 include:
   * Fixed two possible crashes inside the posix extension.
   * Fixed bug 44069 (Huge memory usage with concatenation using . instead of .=)
   * Fixed bug 44141 (private parent constructor callable through static function).
   * Fixed bug 43589 (a possible infinite loop in bz2_filter.c).
   * Fixed bug 43450 (Memory leak on some functions with implicit object __toString() call).
   * Fixed bug 43201 (Crash on using uninitialized vals and __get/__set).
   * Fixed bug 42978 (mismatch between number of bound params and values causes a crash in pdo_pgsql).
   * Fixed bug 42937 (__call() method not invoked when methods are called on parent from child class).
   * Fixed bug 42736 (xmlrpc_server_call_method() crashes).
   * Fixed bug 42369 (Implicit conversion to string leaks memory).
   * Fixed bug 41562 (SimpleXML memory issue).
   * Over 120 bug fixes.

diffstat:

 lang/php5/Makefile        |  3 +--
 lang/php5/Makefile.common |  4 ++--
 lang/php5/distinfo        |  8 ++++----
 3 files changed, 7 insertions(+), 8 deletions(-)

diffs (46 lines):

diff -r fa62c225d2d7 -r 582f1eef9b9e lang/php5/Makefile
--- a/lang/php5/Makefile        Thu May 15 09:39:47 2008 +0000
+++ b/lang/php5/Makefile        Thu May 15 09:56:31 2008 +0000
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.63 2008/01/18 05:06:44 tnn Exp $
+# $NetBSD: Makefile,v 1.63.2.1 2008/05/15 09:56:31 rtr Exp $
 
 PKGNAME=               php-${PHP_BASE_VERS}
-PKGREVISION=           1
 CATEGORIES=            lang
 
 HOMEPAGE=              http://www.php.net/
diff -r fa62c225d2d7 -r 582f1eef9b9e lang/php5/Makefile.common
--- a/lang/php5/Makefile.common Thu May 15 09:39:47 2008 +0000
+++ b/lang/php5/Makefile.common Thu May 15 09:56:31 2008 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile.common,v 1.28 2007/11/23 13:20:00 adrianp Exp $
+# $NetBSD: Makefile.common,v 1.28.4.1 2008/05/15 09:56:31 rtr Exp $
 
 .if !defined(DISTNAME)
 DISTNAME=              php-${PHP_BASE_VERS}
@@ -15,7 +15,7 @@
 MAINTAINER?=           jdolecek%NetBSD.org@localhost
 HOMEPAGE?=             http://www.php.net/
 
-PHP_BASE_VERS=         5.2.5
+PHP_BASE_VERS=         5.2.6
 
 PHP_EXTENSION_DIR=     lib/php/20040412
 PLIST_SUBST+=          PHP_EXTENSION_DIR=${PHP_EXTENSION_DIR:Q}
diff -r fa62c225d2d7 -r 582f1eef9b9e lang/php5/distinfo
--- a/lang/php5/distinfo        Thu May 15 09:39:47 2008 +0000
+++ b/lang/php5/distinfo        Thu May 15 09:56:31 2008 +0000
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.51 2008/03/04 18:58:52 sborrill Exp $
+$NetBSD: distinfo,v 1.51.2.1 2008/05/15 09:56:31 rtr Exp $
 
-SHA1 (php-5.2.5/php-5.2.5.tar.bz2) = 6b46fd095891183b328163b70cdb5acd30a24b7a
-RMD160 (php-5.2.5/php-5.2.5.tar.bz2) = 2d5755f2ae8884e80f0a5c70e8fdfdb6deed46bc
-Size (php-5.2.5/php-5.2.5.tar.bz2) = 7773024 bytes
+SHA1 (php-5.2.6/php-5.2.6.tar.bz2) = 2a2b1afa657a7739a23784c869d57c3e0a7ad6b4
+RMD160 (php-5.2.6/php-5.2.6.tar.bz2) = 27f730d4b1ceb1c42ff03618dbfa0dc87a00990b
+Size (php-5.2.6/php-5.2.6.tar.bz2) = 9571312 bytes
 SHA1 (patch-aa) = 20bc3831e435182d014b11ae9f1f6c537a21af20
 SHA1 (patch-ad) = b324c33b1e70adee5b89dcecdd7690dcadcc18ec
 SHA1 (patch-ag) = 4ccb67ba6f5370b1d16b087e3e714de3e5ae604e