Commit Graph

37 Commits

Author SHA1 Message Date
Torsten Zuehlsdorff
6d73c7b761 lang/php71: Upgrade from 7.1.31 to 7.1.32
Changelog:

    mbstring:
        Fixed CVE-2019-13224 (don't allow different encodings for onig_new_deluxe) (stas)
    pcre:
        Fixed bug #75457 (heap use-after-free in pcrelib) (cmb)

MFH:		2019Q3
2019-09-03 20:22:16 +00:00
Torsten Zuehlsdorff
24ae9af04d PHP 7.1: Put missing mail header patch back 2019-08-03 19:08:46 +00:00
Torsten Zuehlsdorff
4aaa9d5586 Update PHP 7.1 from 7.1.30 to 7.1.31
Changelog:

    SQLite:
        Upgraded to SQLite 3.28.0.
    EXIF:
        Fixed bug #78256 (heap-buffer-overflow on exif_process_user_comment). (CVE-2019-11042)
        Fixed bug #78222 (heap-buffer-overflow on exif_scan_thumbnail). (CVE-2019-11041)
    Phar:
        Fixed bug #77919 (Potential UAF in Phar RSHUTDOWN).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.1.31

MFH:		2019Q3
2019-08-03 18:26:07 +00:00
Torsten Zuehlsdorff
e26436dd53 lang/php71: Update from 7.1.29 to 7.1.30
Changelog:

    EXIF:
        Fixed bug #77988 (heap-buffer-overflow on php_jpg_get16) (CVE-2019-11040).
    GD:
        Fixed bug #77973 (Uninitialized read in gdImageCreateFromXbm) (CVE-2019-11038).
    Iconv:
        Fixed bug #78069 (Out-of-bounds read in iconv.c:_php_iconv_mime_decode() due to integer overflow) (CVE-2019-11039).
    SQLite:
        Fixed bug #77967 (Bypassing open_basedir restrictions via file uris).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.1.30

MFH:		2019Q2
2019-05-31 21:56:09 +00:00
Torsten Zuehlsdorff
a2db2a0a10 lang/php71: put mailheader patch back
Reported by:	mat
2019-05-08 09:46:18 +00:00
Torsten Zuehlsdorff
e856a4bc8e lang/php71: Update from 7.1.28 to 7.1.29
Changelog:

    EXIF:
        Fixed bug #77950 (Heap-buffer-overflow in _estrndup via exif_process_IFD_TAG).
    Mail:
        Fixed bug #77821 (Potential heap corruption in TSendMail()).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.1.29

MFH:		2019Q2
2019-05-08 06:42:36 +00:00
Torsten Zuehlsdorff
3ed0968d9d Update PHP 7.1 from 7.1.27 to 7.1.28
Changelog:

    EXIF:
        Fixed bug #77753 (Heap-buffer-overflow in php_ifd_get32s).
        Fixed bug #77831 (Heap-buffer-overflow in exif_iif_add_value).
    SQLite3:
        Added sqlite3.defensive INI directive.

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.1.28

MFH:		2019Q2
2019-04-05 13:49:11 +00:00
Torsten Zuehlsdorff
a09e0369dd Update PHP 7.1 from 7.1.26 to 7.1.27
Changelog:

    Core:
        Fixed bug #77630 (rename() across the device may allow unwanted access during processing).
    EXIF:
        Fixed bug #77509 (Uninitialized read in exif_process_IFD_in_TIFF).
        Fixed bug #77540 (Invalid Read on exif_process_SOFn).
        Fixed bug #77563 (Uninitialized read in exif_process_IFD_in_MAKERNOTE).
        Fixed bug #77659 (Uninitialized read in exif_process_IFD_in_MAKERNOTE).
    PHAR:
        Fixed bug #77396 (Null Pointer Dereference in phar_create_or_parse_filename).
        Fixed bug #77586 (phar_tar_writeheaders_int() buffer overflow).
    SPL:
        Fixed bug #77431 (openFile() silently truncates after a null byte).

Changelog taken from: http://www.php.net/ChangeLog-7.php#7.1.27

MFH:		2019Q1
2019-03-08 15:46:35 +00:00
Torsten Zuehlsdorff
a7a3e1009a Update PHP 7.1 from 7.1.25 to 7.1.26
Changelog:

    Core:
        Fixed bug #77369 (memcpy with negative length via crafted DNS response).
    GD:
        Fixed bug #77269 (efree() on uninitialized Heap data in imagescale leads to use-after-free).
        Fixed bug #77270 (imagecolormatch Out Of Bounds Write on Heap).
    IMAP:
        Fixed bug #77020 (null pointer dereference in imap_mail).
    Mbstring:
        Fixed bug #77370 (Buffer overflow on mb regex functions - fetch_token).
        Fixed bug #77371 (heap buffer overflow in mb regex functions - compile_string_node).
        Fixed bug #77381 (heap buffer overflow in multibyte match_at).
        Fixed bug #77382 (heap buffer overflow due to incorrect length in expand_case_fold_string).
        Fixed bug #77385 (buffer overflow in fetch_token).
        Fixed bug #77394 (Buffer overflow in multibyte case folding - unicode).
        Fixed bug #77418 (Heap overflow in utf32be_mbc_to_code).
    Phar:
        Fixed bug #77247 (heap buffer overflow in phar_detect_phar_fname_ext).
    Xmlrpc:
        Fixed bug #77242 (heap out of bounds read in xmlrpc_decode()).
        Fixed bug #77380 (Global out of bounds read in xmlrpc base64 code).

Changelog taken from: http://www.php.net/ChangeLog-7.php#7.1.26

MFH:		2019Q1
2019-01-14 11:00:50 +00:00
Mathieu Arnold
cf5d4f075b Put back the mail header patch.
Pointy hat:	tz
2018-12-09 10:12:06 +00:00
Torsten Zuehlsdorff
6a514bf3b2 lang/php71: Upgrade from 7.1.24 to 7.1.25
Changelog: http://www.php.net/ChangeLog-7.php#7.1.25

MFH:		2018Q4
2018-12-07 07:53:14 +00:00
Jochen Neumeister
693053fd0c Update to 7.1.24
Changelog: http://www.php.net/ChangeLog-7.php#7.1.24

Approved by:	tz (implicit)
MFH:		2018Q4
Sponsored by:	Netzkommune GmbH
2018-11-15 16:40:59 +00:00
Jochen Neumeister
17985fcd5c Update to 7.1.23
Changelog:
 - http://www.php.net/releases/7_1_23.php
 - http://www.php.net/ChangeLog-7.php#7.1.23

Approved by:	tz (implicit)
Sponsored by:	Netzkommune GmbH
2018-10-12 17:03:07 +00:00
Jochen Neumeister
16601cd5db Update to 7.1.22
Changelog: http://www.php.net/ChangeLog-7.php#7.1.22

Approved by:	tz (implicit)
MFH:		2018Q3
Sponsored by:	Netzkommune GmbH
2018-09-15 14:55:54 +00:00
Jochen Neumeister
c5f28e5e9a revert php-7.1.x-mail-header.patch into distinfo
Point hat: joneum

MFH:		2018Q3
2018-08-17 19:05:29 +00:00
Jochen Neumeister
72a297ed8d Update to 7.1.21
Changelog: http://www.php.net/ChangeLog-7.php#7.1.21

Approved by:	tz (implicit)
MFH:		2018Q3
2018-08-17 19:02:36 +00:00
Torsten Zuehlsdorff
65631eb2a8 Update PHP 7.1 from 7.1.19 to 7.1.20
Changelog: http://www.php.net/ChangeLog-7.php#7.1.20

Also patch out MySQL 8 auth changes, which makes the hash
extension mandatory instead of optional and introduce further
bugs:
d6e81f0bfd

MFH:		2018Q3
2018-07-23 15:04:55 +00:00
Torsten Zuehlsdorff
8bc58525b0 Update PHP 7.1 from 7.1.18 to 7.1.19
Changelog: http://www.php.net/ChangeLog-7.php#7.1.19
2018-06-25 11:40:54 +00:00
Torsten Zuehlsdorff
fcd2406d99 Update PHP 7.1 from 7.1.17 to 7.1.18
Changelog: http://www.php.net/ChangeLog-7.php#7.1.18

MFH:		2018Q2
2018-05-29 14:32:55 +00:00
Torsten Zuehlsdorff
c48fd6f458 Update PHP 7.1 from 7.1.16 to 7.1.17
Changelog: http://www.php.net/ChangeLog-7.php#7.1.17

MFH:		2018Q2
Security:	CVE-2018-5712
2018-04-26 14:49:18 +00:00
Torsten Zuehlsdorff
10483217e5 Update PHP 7.1 from 7.1.15 to 7.1.16
Changelog: http://www.php.net/ChangeLog-7.php#7.1.16
2018-03-29 13:10:36 +00:00
Torsten Zuehlsdorff
1701150e52 Update PHP 7.1 from 7.1.14 to 7.1.15
Changelog: http://www.php.net/ChangeLog-7.php#7.1.15

MFH: 2018Q1
2018-03-12 13:58:58 +00:00
Torsten Zuehlsdorff
f19d9106ee Update PHP 7.1 from 7.1.13 to 7.1.14
Changelog: http://www.php.net/ChangeLog-7.php#7.1.14

Remove patch since upstream integrated a fix for the issue

MFH: 2018Q1
2018-02-02 11:46:26 +00:00
Torsten Zuehlsdorff
c687c65114 Update PHP 7.1 from 7.1.12 to 7.1.13
Changelog: http://www.php.net/ChangeLog-7.php#7.1.13

PR:  224955
MFH: 2018Q1
2018-01-10 16:07:02 +00:00
Torsten Zuehlsdorff
bfa2c791d6 Update PHP 7.1 from 7.1.11 to 7.1.12
Changelog: http://www.php.net/ChangeLog-7.php#7.1.12

MFH:      2017Q4
2017-11-24 10:13:52 +00:00
Torsten Zuehlsdorff
ca8cbf9639 lang/php70 and lang/php71: Add mail header patch
While here to some improvements:
- Remove CONFLICTS of no longer existing PHP 5.5
- Add CONFLICTS to PHP 7.2
- Remove IPV6_DESC in order to use default one

PR:           219321
Submitted by: Karsten Schmidt <bsd@guggemand.dk>
2017-11-23 11:38:59 +00:00
Torsten Zuehlsdorff
b071939c0e Update PHP 7.1 from 7.1.10 to 7.1.11
Changelog: http://www.php.net/ChangeLog-7.php#7.1.11

MFH:      2017Q4
Security: CVE-2016-1283
2017-10-27 07:32:34 +00:00
Torsten Zuehlsdorff
bc6175a642 Update PHP 7.1 from 7.1.9 to 7.1.10
Changelog: http://www.php.net/ChangeLog-7.php#7.1.10

MFH: 2017Q3
2017-09-28 13:04:46 +00:00
Torsten Zuehlsdorff
ac40d34094 Update PHP 7.1 from 7.1.8 to 7.1.9
Changelog: http://www.php.net/ChangeLog-7.php#7.1.9

MFH: 2017Q3
2017-08-31 13:59:50 +00:00
Torsten Zuehlsdorff
75b95bc66c Update PHP 7.1 from 7.1.7 to 7.1.8
Changelog: http://www.php.net/ChangeLog-7.php#7.1.8

MFH: 2017Q3
2017-08-03 14:54:24 +00:00
Torsten Zuehlsdorff
53f1f04331 Update PHP 7.1 from 7.1.6 to 7.1.7
Changelog: http://www.php.net/ChangeLog-7.php#7.1.7

PR:          220532
Reported by: Fabiano Sidler <fabianosidler@swissonline.ch>, Dani <i.dani@outlook.com>
MFH:         2017Q3
Security:    CVE-2017-9224
Security:    CVE-2017-9226
Security:    CVE-2017-9227
Security:    CVE-2017-9228
Security:    CVE-2017-9229
2017-07-07 09:44:31 +00:00
Torsten Zuehlsdorff
fd2f020ec7 Update PHP 7.1 from 7.1.5 to 7.1.6
Changelog: http://www.php.net/ChangeLog-7.php#7.1.6

MFH: 2017Q2
2017-06-12 10:33:36 +00:00
Torsten Zuehlsdorff
46b0a3e1f0 Update PHP 7.1 from 7.1.4 to 7.1.5
Changelog: http://www.php.net/ChangeLog-7.php#7.1.5

Also remove the patch from devel/php71-gettext
which isn't needed anymore.

MFH: 2017Q2
2017-05-15 10:01:40 +00:00
Torsten Zuehlsdorff
9ccebe59ff Update PHP 7.1 from 7.1.3 to 7.1.4
Changelog: http://www.php.net/ChangeLog-7.php#7.1.4

PR:           218589
Submitted by: Jochen Neumeister <joneum@bsdproject.de>
MFH:          2017Q2
Differential Revision: https://reviews.freebsd.org/D10372
2017-04-18 08:57:35 +00:00
Torsten Zuehlsdorff
b9e5ce047c Update PHP 7.1 from 7.1.2 to 7.1.3
Changelog: http://www.php.net/ChangeLog-7.php#7.1.3

PR:           217800
Submitted by: Jochen Neumeister <joneum@bsdproject.de>
MFH:          2017Q1
2017-03-17 09:17:19 +00:00
Torsten Zuehlsdorff
c975d33c22 Update PHP 7.1 from 7.1.1 to 7.1.2
Changelog: http://www.php.net/ChangeLog-7.php#7.1.2

PR:           217109
Submitted by: Jochen Neumeister <joneum@bsdproject.de>
MFH:          2017Q1
2017-02-23 14:19:43 +00:00
Torsten Zuehlsdorff
db021968e3 Add PHP 7.1
Thanks to: mat, pi, ale, martin@waschbuesch.de and franco@opnsense.org
2017-01-24 11:54:20 +00:00