CVS commit: [pkgsrc-2014Q3] pkgsrc/lang

["Matthias Scheler" <tron%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   tron
Date:           Sun Dec 21 16:19:40 UTC 2014

Modified Files:
        pkgsrc/lang/php [pkgsrc-2014Q3]: phpversion.mk
        pkgsrc/lang/php55 [pkgsrc-2014Q3]: distinfo
        pkgsrc/lang/php55/patches [pkgsrc-2014Q3]: patch-ext_phar_Makefile.frag

Log Message:
Pullup ticket #4578 - requested by taca
lang/php55: security update

Revisions pulled up:
- lang/php/phpversion.mk                                        1.80 via patch
- lang/php55/distinfo                                           1.32
- lang/php55/patches/patch-ext_phar_Makefile.frag               1.2

---
   Module Name:    pkgsrc
   Committed By:   taca
   Date:           Fri Dec 19 16:10:39 UTC 2014

   Modified Files:
           pkgsrc/lang/php: phpversion.mk
           pkgsrc/lang/php55: distinfo
           pkgsrc/lang/php55/patches: patch-ext_phar_Makefile.frag

   Log Message:
   Update php55 to 5.5.20, including security fix.

   17 Dec 2014, PHP 5.5.20

   - Core:
     . Fixed bug #68091 (Some Zend headers lack appropriate extern "C" blocks).
       (Adam)
     . Fixed bug #68185 ("Inconsistent insteadof definition."- incorrectly
       triggered). (Julien)
     . Fixed bug #68370 ("unset($this)" can make the program crash). (Laruence)
     . Fixed bug #68545 (NULL pointer dereference in unserialize.c). (Anatol)
     . Fixed bug #68594 (Use after free vulnerability in unserialize()).
       (CVE-2014-8142) (Stefan Esser)

   - Date:
     . Fixed day_of_week function as it could sometimes return negative values
       internally. (Derick)

   - FPM:
     . Fixed bug #68381 (fpm_unix_init_main ignores log_level).
       (David Zuelke, Remi)
     . Fixed bug #68420 (listen=9000 listens to ipv6 localhost instead of all
       addresses). (Remi)
     . Fixed bug #68421 (access.format='%R' doesn't log ipv6 address). (Remi)
     . Fixed bug #68423 (PHP-FPM will no longer load all pools). (Remi)
     . Fixed bug #68428 (listen.allowed_clients is IPv4 only). (Remi)
     . Fixed bug #68452 (php-fpm man page is oudated). (Remi)
     . Fixed request #68458 (Change pm.start_servers default warning to
       notice). (David Zuelke, Remi)
     . Fixed bug #68463 (listen.allowed_clients can silently result
       in no allowed access). (Remi)
     . Fixed request #68391 (php-fpm conf files loading order).
       (Florian Margaine, Remi)
     . Fixed bug #68478 (access.log don't use prefix). (Remi)

   - Mcrypt:
     . Fixed possible read after end of buffer and use after free. (Dmitry)

   - PDO_pgsql:
     . Fixed bug #66584 (Segmentation fault on statement deallocation) (Matteo)
     . Fixed bug #67462 (PDO_PGSQL::beginTransaction() wrongly throws exception
     when not in transaction) (Matteo)
     . Fixed bug #68351 (PDO::PARAM_BOOL and ATTR_EMULATE_PREPARES misbehaving)
     (Matteo)

   - zlib:
     . Fixed bug #53829 (Compiling PHP with large file support will replace
       function gzopen by gzopen64) (Sascha Kettler, Matteo)


To generate a diff of this commit:
cvs rdiff -u -r1.73.2.5 -r1.73.2.6 pkgsrc/lang/php/phpversion.mk
cvs rdiff -u -r1.29.2.2 -r1.29.2.3 pkgsrc/lang/php55/distinfo
cvs rdiff -u -r1.1 -r1.1.10.1 \
    pkgsrc/lang/php55/patches/patch-ext_phar_Makefile.frag

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.