00:20 Muhammad Moinur Rahman (bofh) 

lang/php73: Remove port

- EOL reached on 2021-12-06
  https://www.php.net/eol.php

PR:             260624
Approved by:	tz (private email) ale portmgr (blanket)
Sponsored by:	Bounce Experts

    cc378fb

19:22 Torsten Zuehlsdorff (tz) 

lang/php73: Upgrade from 7.3.31 to 7.3.32

Changelog:

FPM:

    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege
escalation). (CVE-2021-21703)

    0bf9dc1

16:37 Jan Beich (jbeich) 

devel/icu: update to 70.1

Changes:	https://github.com/unicode-org/icu/releases/tag/release-70-1
Reported by:	GitHub (watch releases)
PR:		258794
Exp-run by:	antoine

    f34ece3

09:51 Jimmy Olgeni (olgeni) 

*: fix tab vs. space issues, and comments according to the guide.

    4460cf7

21:31 Torsten Zuehlsdorff (tz) 

lang/php73: Update from 7.3.28 to 7.3.29

Changelog:

    Core:
        Fixed bug #81122: SSRF bypass in FILTER_VALIDATE_URL. (CVE-2021-21705)
    PDO_Firebird:
        Fixed bug #76448: Stack buffer overflow in firebird_info_cb.
(CVE-2021-21704)
        Fixed bug #76449: SIGSEGV in firebird_handle_doer. (CVE-2021-21704)
        Fixed bug #76450: SIGSEGV in firebird_stmt_execute. (CVE-2021-21704)
        Fixed bug #76452: Crash while parsing blob data in firebird_fetch_blob.
(CVE-2021-21704)

Sponsored by:	Bounce Experts

    602c4c3

23:33 Jan Beich (jbeich) 

devel/icu: update to 69.1

Changes:	https://github.com/unicode-org/icu/releases/tag/release-69-1
Reported by:	GitHub (watch releases)

    69d24a7

08:09 Mathieu Arnold (mat) 

One more small cleanup, forgotten yesterday.
Reported by:	lwhsu

    cf118cc

14:31 Mathieu Arnold (mat) 

Remove # $FreeBSD$ from Makefiles.

    305f148

17:09 tz 

lang/php73: Update from 7.3.24 to 7.3.25

    Core:
        Fixed bug #80280 (ADD_EXTENSION_DEP() fails for ext/standard and
ext/date).
        Fixed bug #80258 (Windows Deduplication Enabled, randon permission
errors).
    COM:
        Fixed bug #62474 (com_event_sink crashes on certain arguments).
    DOM:
        Fixed bug #80268 (loadHTML() truncates at NUL bytes).
    IMAP:
        Fixed bug #64076 (imap_sort() does not return FALSE on failure).
        Fixed bug #76618 (segfault on imap_reopen).
        Fixed bug #80239 (imap_rfc822_write_address() leaks memory).
        Fixed minor regression caused by fixing bug #80220.
        Fixed bug #80242 (imap_mail_compose() segfaults for multipart with
rfc822).
    Intl:
        Fixed bug #80310 (ext-intl with icu4c 68.1: use of undeclared identifier
'TRUE').
    ODBC:
        Fixed bug #44618 (Fetching may rely on uninitialized data).
    SNMP:
        Fixed bug #70461 (disable md5 code when it is not supported in
net-snmp).
    Standard:
        Fixed bug #80266 (parse_url silently drops port number 0).

PR:		251398
Submitted by: Dani <i.dani@outlook.com>

 

00:56 jbeich 

devel/icu: update to 68.1

Changes:	http://site.icu-project.org/download/68
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
Reported by:	GitHub (watch releases)

 

19:41 tz 

lang/php73: Update from 7.3.17 to 7.3.18

Changelog:

    Core:
        Fixed bug #78875 (Long filenames cause OOM and temp files are not
cleaned). (CVE-2019-11048)
        Fixed bug #78876 (Long variables in multipart/form-data cause OOM and
temp files are not cleaned). (CVE-2019-11048)
        Fixed bug #79434 (PHP 7.3 and PHP-7.4 crash with NULL-pointer
dereference on !CS constant).
        Fixed bug #79477 (casting object into array creates references).
        Fixed bug #79470 (PHP incompatible with 3rd party file system on
demand).
        Fixed bug #78784 (Unable to interact with files inside a VFS for Git
repository).
    DOM:
        Fixed bug #78221 (DOMNode::normalize() doesn't remove empty text nodes).
    FCGI:
        Fixed bug #79491 (Search for .user.ini extends up to root dir).
    MBString:
        Fixed bug #79441 (Segfault in mb_chr() if internal encoding is
unsupported).
    OpenSSL:
        Fixed bug #79497 (stream_socket_client() throws an unknown error
sometimes with <1s timeout).
    Phar:
        Fixed bug #79503 (Memory leak on duplicate metadata).
    SimpleXML:
        Fixed bug #79528 (Different object of the same xml between 7.4.5 and
7.4.4).
    Standard:
        Fixed bug #79468 (SIGSEGV when closing stream handle with a stream
filter appended).

Sponsored by:	Bounce Experts

 

20:14 jbeich 

devel/icu: update to 67.1

Changes:	http://site.icu-project.org/download/67
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
Reported by:	GitHub (watch releases)

 

21:09 tz 

lang/php73: Upgrade from 7.3.16 to 7.3.17

Changelog:

    Core:
        Fixed bug #79364 (When copy empty array, next key is unspecified).
        Fixed bug #78210 (Invalid pointer address).
    CURL:
        Fixed bug #79199 (curl_copy_handle() memory leak).
    Date:
        Fixed bug #79396 (DateTime hour incorrect during DST jump forward).
    Iconv:
        Fixed bug #79200 (Some iconv functions cut Windows-1258).
    OPcache:
        Fixed bug #79412 (Opcache chokes and uses 100% CPU on specific script).
    Session:
        Fixed bug #79413 (session_create_id() fails for active sessions).
    Shmop:
        Fixed bug #79427 (Integer Overflow in shmop_open()).
    SimpleXML:
        Fixed bug #61597 (SXE properties may lack attributes and content).
    Spl:
        Fixed bug #75673 (SplStack::unserialize() behavior).
        Fixed bug #79393 (Null coalescing operator failing with SplFixedArray).
    Standard:
        Fixed bug #79330 (shell_exec() silently truncates after a null byte).
        Fixed bug #79465 (OOB Read in urldecode()). (CVE-2020-7067)
        Fixed bug #79410 (system() swallows last chunk if it is exactly 4095
bytes without newline).
    Zip:
        Fixed bug #79296 (ZipArchive::open fails on empty file).
        Fixed bug #79424 (php_zip_glob uses gl_pathc after call to globfree).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.3.17

MFH:		2020Q2

 

09:54 jbeich 

Fix up PORTREVISION style after "portedit bump-revision"

 

09:47 jbeich 

devel/icu: update to 66.1

Changes:	http://site.icu-project.org/download/66
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/

 

10:35 tz 

lang/php73: Update from 7.3.10 to 7.3.11

Changelog:

    Core:
        Fixed bug #78535 (auto_detect_line_endings value not parsed as bool).
        Fixed bug #78620 (Out of memory error).
    Exif:
        Fixed bug #78442 ('Illegal component' on exif_read_data since PHP7)
(Kalle)
    FPM:
        Fixed bug #78599 (env_path_info underflow in fpm_main.c can lead to
RCE). (CVE-2019-11043)
        Fixed bug #78413 (request_terminate_timeout does not take effect after
fastcgi_finish_request).
    MBString:
        Fixed bug #78633 (Heap buffer overflow (read) in mb_eregi).
        Fixed bug #78579 (mb_decode_numericentity: args number inconsistency).
        Fixed bug #78609 (mb_check_encoding() no longer supports stringable
objects).
    MySQLi:
        Fixed bug #76809 (SSL settings aren't respected when persistent
connections are used).
    Mysqlnd:
        Fixed bug #78525 (Memory leak in pdo when reusing native prepared
statements).
    PCRE:
        Fixed bug #78272 (calling preg_match() before pcntl_fork() will freeze
child process).
    PDO_MySQL:
        Fixed bug #78623 (Regression caused by "SP call yields additional empty
result set").
    Session:
        Fixed bug #78624 (session_gc return value for user defined session
handlers).
    Standard:
        Fixed bug #76342 (file_get_contents waits twice specified timeout).
        Fixed bug #78612 (strtr leaks memory when integer keys are used and the
subject string shorter).
        Fixed bug #76859 (stream_get_line skips data if used with
data-generating filter).
    Zip:
        Fixed bug #78641 (addGlob can modify given remove_path value).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.3.11

MFH:		2019Q4

 

20:35 jbeich 

devel/icu: update to 65.1

Changes:	http://site.icu-project.org/download/65
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/

 

18:29 tz 

Update PHP 7.3 from 7.3.7 to 7.3.8

Changelog:

    Core:
        Added syslog.filter=raw option.
        Fixed bug #78212 (Segfault in built-in webserver).
    Date:
        Fixed bug #69044 (discrepency between time and microtime).
        Updated timelib to 2018.02.
    EXIF:
        Fixed bug #78256 (heap-buffer-overflow on exif_process_user_comment).
(CVE-2019-11042)
        Fixed bug #78222 (heap-buffer-overflow on exif_scan_thumbnail).
(CVE-2019-11041)
    FTP:
        Fixed bug #78039 (FTP with SSL memory leak).
    Libxml:
        Fixed bug #78279 (libxml_disable_entity_loader settings is shared
between requests (cgi-fcgi)).
    LiteSpeed:
        Updated to LiteSpeed SAPI V7.4.3 (increased response header count limit
from 100 to 1000, added crash handler to cleanly shutdown PHP request, added
CloudLinux mod_lsapi mode).
        Fixed bug #76058 (After "POST data can't be buffered", using php://input
makes huge tmp files).
    Openssl:
        Fixed bug #78231 (Segmentation fault upon stream_socket_accept of
exported socket-to-stream).
    Opcache:
        Fixed bug #78341 (Failure to detect smart branch in DFA pass).
        Fixed bug #78189 (file cache strips last character of uname hash).
        Fixed bug #78202 (Opcache stats for cache hits are capped at 32bit NUM).
        Fixed bug #78271 (Invalid result of if-else).
        Fixed bug #78291 (opcache_get_configuration doesn't list all
directives).
    PCRE:
        Fixed bug #78338 (Array cross-border reading in PCRE).
        Fixed bug #78197 (PCRE2 version check in configure fails for "##.##-xxx"
version strings).
    PDO_Sqlite:
        Fixed bug #78192 (SegFault when reuse statement after schema has
changed).
    Phar:
        Fixed bug #77919 (Potential UAF in Phar RSHUTDOWN).
    Phpdbg:
        Fixed bug #78297 (Include unexistent file memory leak).
    SQLite:
        Upgraded to SQLite 3.28.0.
    Standard:
        Fixed bug #78241 (touch() does not handle dates after 2038 in PHP
64-bit).
        Fixed bug #78269 (password_hash uses weak options for argon2).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.3.8

MFH:		2019Q3

 

20:46 gerald 

Bump PORTREVISION for ports depending on the canonical version of GCC
as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3
to GCC 9.1 under most circumstances now after revision 507371.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.

PR:		238330

 

13:51 tz 

Update PHP 7.3 from 7.3.3 to 7.3.4

Changelog:

    Core:
        Fixed bug #77738 (Nullptr deref in zend_compile_expr).
        Fixed bug #77660 (Segmentation fault on break 2147483648).
        Fixed bug #77652 (Anonymous classes can lose their interface
information).
        Fixed bug #77345 (Stack Overflow caused by circular reference in garbage
collection).
        Fixed bug #76956 (Wrong value for 'syslog.filter' documented in
php.ini).
    Apache2Handler:
        Fixed bug #77648 (BOM in sapi/apache2handler/php_functions.c).
    Bcmath:
        Fixed bug #77742 (bcpow() implementation related to gcc compiler
optimization).
    CLI Server:
        Fixed bug #77722 (Incorrect IP set to $_SERVER['REMOTE_ADDR'] on the
localhost).
    COM:
        Fixed bug #77578 (Crash when php unload).
    EXIF:
        Fixed bug #77753 (Heap-buffer-overflow in php_ifd_get32s).
        Fixed bug #77831 (Heap-buffer-overflow in exif_iif_add_value).
    FPM:
        Fixed bug #77677 (FPM fails to build on AIX due to missing WCOREDUMP).
    GD:
        Fixed bug #77700 (Writing truecolor images as GIF ignores interlace
flag).
    MySQLi:
        Fixed bug #77597 (mysqli_fetch_field hangs scripts).
    Opcache:
        Fixed bug #77743 (Incorrect pi node insertion for jmpznz with identical
successors).
    PCRE:
        Fixed bug #76127 (preg_split does not raise an error on invalid UTF-8).
    Phar:
        Fixed bug #77697 (Crash on Big_Endian platform).
    phpdbg:
        Fixed bug #77767 (phpdbg break cmd aliases listed in help do not match
actual aliases).
    sodium:
        Fixed bug #77646 (sign_detached() strings not terminated).
    SQLite3:
        Added sqlite3.defensive INI directive.
    Standard:
        Fixed bug #77664 (Segmentation fault when using undefined constant in
custom wrapper).
        Fixed bug #77669 (Crash in extract() when overwriting extracted array).
        Fixed bug #76717 (var_export() does not create a parsable value for
PHP_INT_MIN).
        Fixed bug #77765 (FTP stream wrapper should set the directory as
executable).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.3.4

MFH:		2019Q2

 

21:11 jbeich 

devel/icu: update to 64.1

Changes:	http://site.icu-project.org/download/64
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
PR:		236325
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D19479

 

11:05 tz 

lang/php73: Upgrade from 7.3.0 to 7.3.1

Changelog:

    Core:
        Fixed bug #76654 (Build failure on Mac OS X on 32-bit Intel).
        Fixed bug #71041 (zend_signal_startup() needs ZEND_API).
        Fixed bug #76046 (PHP generates "FE_FREE" opcode on the wrong line).
        Fixed bug #77291 (magic methods inherited from a trait may be ignored).
    CURL:
        Fixed bug #77264 (curl_getinfo returning microseconds, not seconds).
    COM:
        Fixed bug #77177 (Serializing or unserializing COM objects crashes).
    Exif:
        Fixed bug #77184 (Unsigned rational numbers are written out as signed
rationals).
    GD:
        Fixed bug #77195 (Incorrect error handling of imagecreatefromjpeg()).
        Fixed bug #77198 (auto cropping has insufficient precision).
        Fixed bug #77200 (imagecropauto(..., GD_CROP_SIDES) crops left but not
right).
        Fixed bug #77269 (efree() on uninitialized Heap data in imagescale leads
to use-after-free).
        Fixed bug #77270 (imagecolormatch Out Of Bounds Write on Heap).
    MBString:
        Fixed bug #77367 (Negative size parameter in mb_split).
        Fixed bug #77370 (Buffer overflow on mb regex functions - fetch_token).
        Fixed bug #77371 (heap buffer overflow in mb regex functions -
compile_string_node).
        Fixed bug #77381 (heap buffer overflow in multibyte match_at).
        Fixed bug #77382 (heap buffer overflow due to incorrect length in
expand_case_fold_string).
        Fixed bug #77385 (buffer overflow in fetch_token).
        Fixed bug #77394 (Buffer overflow in multibyte case folding - unicode).
        Fixed bug #77418 (Heap overflow in utf32be_mbc_to_code).
    OCI8:
        Fixed bug #76804 (oci_pconnect with OCI_CRED_EXT not working).
        Added oci_set_call_timeout() for call timeouts.
        Added oci_set_db_operation() for the DBOP end-to-end-tracing attribute.
    Opcache:
        Fixed bug #77215 (CFG assertion failure on multiple finalizing switch
frees in one block).
        Fixed bug #77275 (OPcache optimization problem for
ArrayAccess->offsetGet).
    PCRE:
        Fixed bug #77193 (Infinite loop in preg_replace_callback).
    PDO:
        Handle invalid index passed to PDOStatement::fetchColumn() as error.
    Phar:
        Fixed bug #77247 (heap buffer overflow in phar_detect_phar_fname_ext).
    Soap:
        Fixed bug #77088 (Segfault when using SoapClient with null options).
    Sockets:
        Fixed bug #77136 (Unsupported IPV6_RECVPKTINFO constants on macOS).
    Sodium:
        Fixed bug #77297 (SodiumException segfaults on PHP 7.3).
    SPL:
        Fixed bug #77359 (spl_autoload causes segfault).
        Fixed bug #77360 (class_uses causes segfault).
    SQLite3:
        Fixed bug #77051 (Issue with re-binding on SQLite3).
    Xmlrpc:
        Fixed bug #77242 (heap out of bounds read in xmlrpc_decode()).
        Fixed bug #77380 (Global out of bounds read in xmlrpc base64 code).

Changelog taken from: http://www.php.net/ChangeLog-7.php#7.3.1

Also removing the patch committed in r489721. The patch disables the use of
ifuncs and is part of the new relase 7.3.1.

MFH:		2019Q1

 

01:35 gerald 

Bump PORTREVISION for ports depending on the canonical version of GCC
defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t
GCC 8.2 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.

PR:		231590

 

10:15 joneum 

Update to RC4

Changelog: https://github.com/php/php-src/blob/php-7.3.0RC4/NEWS

Approved by:	tz (implicit)
Sponsored by:	Netzkommune GmbH

 

11:35 jbeich 

devel/icu: update to 63.1

Changes:	http://site.icu-project.org/download/63
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
PR:		232300
Exp-run by:	antoine

 

08:52 tz 

Add PHP 7.3 RC2 to the ports-tree.

Notable changes:
- Switch from PCRE to PCRE2
- Many modules now require PCRE2 for building
- graphics/php73-gd: X11 option is no longer default

Changes to Mk/Uses/php.mk approved by ale