[pkgsrc/pkgsrc-2015Q1]: pkgsrc/lang Pullup ticket #4677 - requested by taca

[tron <tron%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/494360a67490
branches:  pkgsrc-2015Q1
changeset: 649182:494360a67490
user:      tron <tron%pkgsrc.org@localhost>
date:      Tue Apr 21 21:50:09 2015 +0000

description:
Pullup ticket #4677 - requested by taca
lang/php54: security update

Revisions pulled up:
- lang/php/phpversion.mk                                        1.94
- lang/php54/distinfo                                           1.56

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Fri Apr 17 16:39:56 UTC 2015

   Modified Files:
        pkgsrc/lang/php: phpversion.mk
        pkgsrc/lang/php54: distinfo

   Log Message:
   Update php54 to 5.4.40.

   16 Apr 2015 PHP 5.4.40

   - Apache2handler:
     . Fixed bug #69218 (potential remote code execution with apache 2.4
       apache2handler). (Gerrit Venema)

   - Core:
     . Additional fix for bug #69152 (Type confusion vulnerability in
       exception::getTraceAsString). (Stas)
     . Fixed bug #69337 (php_stream_url_wrap_http_ex() type-confusion
       vulnerability). (Stas)
     . Fixed bug #69353 (Missing null byte checks for paths in various PHP
       extensions). (Stas)

   - cURL:
     . Fixed bug #69316 (Use-after-free in php_curl related to
       CURLOPT_FILE/_INFILE/_WRITEHEADER). (Laruence)

   - Ereg:
     . Fixed bug #68740 (NULL Pointer Dereference). (Laruence)

   - Fileinfo:
     . Fixed bug #68819 (Fileinfo on specific file causes spurious OOM and/or
       segfault). (Anatol Belski)

   - GD:
     . Fixed bug #68601 (buffer read overflow in gd_gif_in.c). (Remi)

   - Phar:
     . Fixed bug #68901 (use after free). (bugreports at internot dot info)
     . Fixed bug #69324 (Buffer Over-read in unserialize when parsing Phar). (Stas)
     . Fixed bug #69441 (Buffer Overflow when parsing tar/zip/phar in
       phar_set_inode). (Stas)

   - Postgres:
     . Fixed bug #68741 (Null pointer deference) (CVE-2015-1352). (Xinchen Hui)

   - SOAP:
     . Fixed bug #69152 (Type Confusion Infoleak Vulnerability in unserialize()
       with SoapFault). (Dmitry)

   - Sqlite3:
     . Fixed bug #66550 (SQLite prepared statement use-after-free). (Sean Heelan)

diffstat:

 lang/php/phpversion.mk |  4 ++--
 lang/php54/distinfo    |  8 ++++----
 2 files changed, 6 insertions(+), 6 deletions(-)

diffs (34 lines):

diff -r d83b1d201e4e -r 494360a67490 lang/php/phpversion.mk
--- a/lang/php/phpversion.mk    Tue Apr 21 21:44:22 2015 +0000
+++ b/lang/php/phpversion.mk    Tue Apr 21 21:50:09 2015 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: phpversion.mk,v 1.93 2015/03/20 16:31:47 taca Exp $
+# $NetBSD: phpversion.mk,v 1.93.2.1 2015/04/21 21:50:09 tron Exp $
 #
 # This file selects a PHP version, based on the user's preferences and
 # the installed packages. It does not add a dependency on the PHP
@@ -81,7 +81,7 @@
 PHPVERSION_MK= defined
 
 # Define each PHP's version.
-PHP54_VERSION= 5.4.39
+PHP54_VERSION= 5.4.40
 PHP55_VERSION= 5.5.23
 PHP56_VERSION= 5.6.7
 
diff -r d83b1d201e4e -r 494360a67490 lang/php54/distinfo
--- a/lang/php54/distinfo       Tue Apr 21 21:44:22 2015 +0000
+++ b/lang/php54/distinfo       Tue Apr 21 21:50:09 2015 +0000
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.55 2015/03/20 16:29:24 taca Exp $
+$NetBSD: distinfo,v 1.55.2.1 2015/04/21 21:50:09 tron Exp $
 
-SHA1 (php-5.4.39.tar.bz2) = b7ae0472a9a6fdd6b1e502650c971717b77d4f84
-RMD160 (php-5.4.39.tar.bz2) = 4f0f33b18dc59851ebe48050f8d1759578718504
-Size (php-5.4.39.tar.bz2) = 12271717 bytes
+SHA1 (php-5.4.40.tar.bz2) = a4ba79caf32fe0d5dd1ab26fa4a0f4e64107d117
+RMD160 (php-5.4.40.tar.bz2) = 2848d814e1038e88156a8d58ad661ed9d42cbbdc
+Size (php-5.4.40.tar.bz2) = 12272787 bytes
 SHA1 (patch-acinclude.m4) = 71635e5381abf99a9fc9f2537b1c2f18e8096f00
 SHA1 (patch-aclocal.m4) = 699086785fcd3d3834cc6016479dbdae6518e522
 SHA1 (patch-build_libtool.m4) = d81527abea3bd97e220f00a5d5296d8b1bfe2659