CVS commit: [pkgsrc-2017Q4] pkgsrc/lang

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Sun Jan  7 17:36:23 UTC 2018

Modified Files:
        pkgsrc/lang/php [pkgsrc-2017Q4]: phpversion.mk
        pkgsrc/lang/php70 [pkgsrc-2017Q4]: distinfo

Log Message:
Pullup ticket #5674 - requested by taca
lang/php70: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.199
- lang/php70/distinfo                                           1.41

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Fri Jan  5 03:09:59 UTC 2018

   Modified Files:
        pkgsrc/lang/php: phpversion.mk
        pkgsrc/lang/php70: distinfo

   Log Message:
   lang/php70: update to 7.0.27

   04 Jan 2018 PHP 7.0.27

   - CLI Server:
     . Fixed bug #60471 (Random "Invalid request (unexpected EOF)" using a router
       script). (SammyK)

   - Core:
     . Fixed bug #75384 (PHP seems incompatible with OneDrive files on demand).
       (Anatol)
     . Fixed bug #75573 (Segmentation fault in 7.1.12 and 7.0.26). (Laruence)

   - FPM:
     . Fixed bug #64938 (libxml_disable_entity_loader setting is shared between
       requests). (Remi)

   - GD:
     . Fixed bug #75571 (Potential infinite loop in gdImageCreateFromGifCtx). (cmb)

   - Opcache:
     . Fixed bug #75579 (Interned strings buffer overflow may cause crash).
       (Dmitry)

   - PCRE:
     . Fixed bug #74183 (preg_last_error not returning error code after error).
       (Andrew Nester)

   - Phar:
     . Fixed bug #74782 (Reflected XSS in .phar 404 page). (Stas)

   - Standard:
     . Fixed bug #75535 (Inappropriately parsing HTTP response leads to PHP
       segment fault). (Nikita)
     . Fixed bug #75409 (accept EFAULT in addition to ENOSYS as indicator
       that getrandom() is missing). (sarciszewski)

   - Zip:
     . Fixed bug #75540 (Segfault with libzip 1.3.1). (Remi)


To generate a diff of this commit:
cvs rdiff -u -r1.197.2.1 -r1.197.2.2 pkgsrc/lang/php/phpversion.mk
cvs rdiff -u -r1.40 -r1.40.2.1 pkgsrc/lang/php70/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/php/phpversion.mk
diff -u pkgsrc/lang/php/phpversion.mk:1.197.2.1 pkgsrc/lang/php/phpversion.mk:1.197.2.2
--- pkgsrc/lang/php/phpversion.mk:1.197.2.1     Sun Jan  7 17:30:26 2018
+++ pkgsrc/lang/php/phpversion.mk       Sun Jan  7 17:36:23 2018
@@ -1,4 +1,4 @@
-# $NetBSD: phpversion.mk,v 1.197.2.1 2018/01/07 17:30:26 bsiegert Exp $
+# $NetBSD: phpversion.mk,v 1.197.2.2 2018/01/07 17:36:23 bsiegert Exp $
 #
 # This file selects a PHP version, based on the user's preferences and
 # the installed packages. It does not add a dependency on the PHP
@@ -88,7 +88,7 @@ PHPVERSION_MK=        defined
 
 # Define each PHP's version.
 PHP56_VERSION= 5.6.33
-PHP70_VERSION= 7.0.26
+PHP70_VERSION= 7.0.27
 PHP71_VERSION= 7.1.12
 PHP72_VERSION= 7.2.0
 

Index: pkgsrc/lang/php70/distinfo
diff -u pkgsrc/lang/php70/distinfo:1.40 pkgsrc/lang/php70/distinfo:1.40.2.1
--- pkgsrc/lang/php70/distinfo:1.40     Sat Nov 25 13:07:40 2017
+++ pkgsrc/lang/php70/distinfo  Sun Jan  7 17:36:23 2018
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.40 2017/11/25 13:07:40 taca Exp $
+$NetBSD: distinfo,v 1.40.2.1 2018/01/07 17:36:23 bsiegert Exp $
 
-SHA1 (php-7.0.26.tar.bz2) = 359c59c302237f645b3af6fc3fc607e5b7246786
-RMD160 (php-7.0.26.tar.bz2) = 8ec9e28c2aee2087e1481aa2f9ffbbad3c72eb26
-SHA512 (php-7.0.26.tar.bz2) = fbfeb574104b512eb136ca823ef67715a887f5b877181a7edc7a5908e93fc318d19581d35c740492e5cc28005f950c6ac72b12a848b28dbe206fe698e1460924
-Size (php-7.0.26.tar.bz2) = 14654366 bytes
+SHA1 (php-7.0.27.tar.bz2) = 2fb93fca0e3a514286e90b91e165d3f3242bcd4c
+RMD160 (php-7.0.27.tar.bz2) = 48ea0689cdd8a9ec4f2f2d04ab8832d83fd6f07f
+SHA512 (php-7.0.27.tar.bz2) = 652dbeb06e6b9e90f2fd48a2a6bba1d3de05d6ebac2774bdfffe403ec6197f532708d854452d84a14414918983fe813c4b4a3d438a807112923554d34e6eb6cc
+Size (php-7.0.27.tar.bz2) = 14154690 bytes
 SHA1 (patch-acinclude.m4) = 81a8f33a536500978ea5a9aa2d2875c61c843e56
 SHA1 (patch-configure) = a129e19ef87338f6e53ccc967c40ddcde7c7357c
 SHA1 (patch-ext_gd_config.m4) = bde93678626592cdcee619189bfc6532d0913a76