19:58 pkubaj 

lang/php7*: disable DTRACE on powerpc64

php ports don't build on elfv2 with DTRACE.

PR:		242113, 242114, 242116
Approved by:	tz (maintainer), tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D22577
Differential Revision:	https://reviews.freebsd.org/D22578
Differential Revision:	https://reviews.freebsd.org/D22579

 

17:25 tobik 

lang/php7[12]*: Add missing USES=gnome

Differential Revision:	https://reviews.freebsd.org/D22407

 

14:47 tobik 

Add missing USES={gnome,php,sdl} to the rest

 

10:32 tz 

lang/php71: Update from 7.1.32 to 7.1.33

Changelog:

FPM:

    Fixed bug #78599 (env_path_info underflow in fpm_main.c can lead to RCE).
(CVE-2019-11043)

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.1.33

MFH:		2019Q4

 

20:22 tz 

lang/php71: Upgrade from 7.1.31 to 7.1.32

Changelog:

    mbstring:
        Fixed CVE-2019-13224 (don't allow different encodings for
onig_new_deluxe) (stas)
    pcre:
        Fixed bug #75457 (heap use-after-free in pcrelib) (cmb)

MFH:		2019Q3

 

18:26 tz 

Update PHP 7.1 from 7.1.30 to 7.1.31

Changelog:

    SQLite:
        Upgraded to SQLite 3.28.0.
    EXIF:
        Fixed bug #78256 (heap-buffer-overflow on exif_process_user_comment).
(CVE-2019-11042)
        Fixed bug #78222 (heap-buffer-overflow on exif_scan_thumbnail).
(CVE-2019-11041)
    Phar:
        Fixed bug #77919 (Potential UAF in Phar RSHUTDOWN).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.1.31

MFH:		2019Q3

 

21:56 tz 

lang/php71: Update from 7.1.29 to 7.1.30

Changelog:

    EXIF:
        Fixed bug #77988 (heap-buffer-overflow on php_jpg_get16)
(CVE-2019-11040).
    GD:
        Fixed bug #77973 (Uninitialized read in gdImageCreateFromXbm)
(CVE-2019-11038).
    Iconv:
        Fixed bug #78069 (Out-of-bounds read in iconv.c:_php_iconv_mime_decode()
due to integer overflow) (CVE-2019-11039).
    SQLite:
        Fixed bug #77967 (Bypassing open_basedir restrictions via file uris).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.1.30

MFH:		2019Q2

 

06:42 tz 

lang/php71: Update from 7.1.28 to 7.1.29

Changelog:

    EXIF:
        Fixed bug #77950 (Heap-buffer-overflow in _estrndup via
exif_process_IFD_TAG).
    Mail:
        Fixed bug #77821 (Potential heap corruption in TSendMail()).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.1.29

MFH:		2019Q2

 

09:49 tz 

PHP: Change MOD_PRIO for imap to avoid core dumps

PR:		235917
Reported by:	Sergey Anokhin <admin@5034.ru>
MFH:		2019Q2

 

14:04 sunpoet 

Update devel/readline to 8.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://tiswww.case.edu/php/chet/readline/CHANGES
PR:		236156
Exp-run by:	antoine

 

13:49 tz 

Update PHP 7.1 from 7.1.27 to 7.1.28

Changelog:

    EXIF:
        Fixed bug #77753 (Heap-buffer-overflow in php_ifd_get32s).
        Fixed bug #77831 (Heap-buffer-overflow in exif_iif_add_value).
    SQLite3:
        Added sqlite3.defensive INI directive.

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.1.28

MFH:		2019Q2

 

15:46 tz 

Update PHP 7.1 from 7.1.26 to 7.1.27

Changelog:

    Core:
        Fixed bug #77630 (rename() across the device may allow unwanted access
during processing).
    EXIF:
        Fixed bug #77509 (Uninitialized read in exif_process_IFD_in_TIFF).
        Fixed bug #77540 (Invalid Read on exif_process_SOFn).
        Fixed bug #77563 (Uninitialized read in exif_process_IFD_in_MAKERNOTE).
        Fixed bug #77659 (Uninitialized read in exif_process_IFD_in_MAKERNOTE).
    PHAR:
        Fixed bug #77396 (Null Pointer Dereference in
phar_create_or_parse_filename).
        Fixed bug #77586 (phar_tar_writeheaders_int() buffer overflow).
    SPL:
        Fixed bug #77431 (openFile() silently truncates after a null byte).

Changelog taken from: http://www.php.net/ChangeLog-7.php#7.1.27

MFH:		2019Q1

 

13:19 tz 

lang/php7*: Rename option MYSQL to MYSQLND

Renaming the option to be inline with the already existing MYSQLND option
in the mysqli and pdo_mysqli ports.

Reported by:	Jarrod Sayers <jarrod@downtools.com.au>

 

10:11 tz 

lang/php71: Make enabling MYSQL native driver optional

Currently PHP is always compiled with --enable-mysqlnd, to allow the use
of the native MySQL Native Driver. MySQL Native Driver is a replacement for the
MySQL Client Library.

While this is handy when working with MySQL there is no need for
it when MySQL is *not* used at all. This happens frequently when
working without databases or simply with other databases.

To avoid POLA the newly introduced option is a default option.

Disabling it will reduce the size of the package by ca. 175 KB,
which also helps in modern constraint VM run environments.

Submitted by:	Reko Turja <reko.turja@liukuma.net>

 

11:00 tz 

Update PHP 7.1 from 7.1.25 to 7.1.26

Changelog:

    Core:
        Fixed bug #77369 (memcpy with negative length via crafted DNS response).
    GD:
        Fixed bug #77269 (efree() on uninitialized Heap data in imagescale leads
to use-after-free).
        Fixed bug #77270 (imagecolormatch Out Of Bounds Write on Heap).
    IMAP:
        Fixed bug #77020 (null pointer dereference in imap_mail).
    Mbstring:
        Fixed bug #77370 (Buffer overflow on mb regex functions - fetch_token).
        Fixed bug #77371 (heap buffer overflow in mb regex functions -
compile_string_node).
        Fixed bug #77381 (heap buffer overflow in multibyte match_at).
        Fixed bug #77382 (heap buffer overflow due to incorrect length in
expand_case_fold_string).
        Fixed bug #77385 (buffer overflow in fetch_token).
        Fixed bug #77394 (Buffer overflow in multibyte case folding - unicode).
        Fixed bug #77418 (Heap overflow in utf32be_mbc_to_code).
    Phar:
        Fixed bug #77247 (heap buffer overflow in phar_detect_phar_fname_ext).
    Xmlrpc:
        Fixed bug #77242 (heap out of bounds read in xmlrpc_decode()).
        Fixed bug #77380 (Global out of bounds read in xmlrpc base64 code).

Changelog taken from: http://www.php.net/ChangeLog-7.php#7.1.26

MFH:		2019Q1

 

07:53 tz 

lang/php71: Upgrade from 7.1.24 to 7.1.25

Changelog: http://www.php.net/ChangeLog-7.php#7.1.25

MFH:		2018Q4

 

16:40 joneum 

Update to 7.1.24

Changelog: http://www.php.net/ChangeLog-7.php#7.1.24

Approved by:	tz (implicit)
MFH:		2018Q4
Sponsored by:	Netzkommune GmbH

 

17:03 joneum 

Update to 7.1.23

Changelog:
 - http://www.php.net/releases/7_1_23.php
 - http://www.php.net/ChangeLog-7.php#7.1.23

Approved by:	tz (implicit)
Sponsored by:	Netzkommune GmbH

 

08:52 tz 

Add PHP 7.3 RC2 to the ports-tree.

Notable changes:
- Switch from PCRE to PCRE2
- Many modules now require PCRE2 for building
- graphics/php73-gd: X11 option is no longer default

Changes to Mk/Uses/php.mk approved by ale

 

16:08 emaste 

lang/php*: link with -znotext on i386

This port links some non-PIC code, which fails with lld as it defaults
to disallowing relocations against read-only segments. For i386 we can
just add -znotext unconditionally: for GNU BFD ld it just affirms BFD's
existing default.

PR:		214864, 230207
Approved by:	bapt
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D17193

 

14:55 joneum 

Update to 7.1.22

Changelog: http://www.php.net/ChangeLog-7.php#7.1.22

Approved by:	tz (implicit)
MFH:		2018Q3
Sponsored by:	Netzkommune GmbH

 

19:02 joneum 

Update to 7.1.21

Changelog: http://www.php.net/ChangeLog-7.php#7.1.21

Approved by:	tz (implicit)
MFH:		2018Q3

 

15:04 tz 

Update PHP 7.1 from 7.1.19 to 7.1.20

Changelog: http://www.php.net/ChangeLog-7.php#7.1.20

Also patch out MySQL 8 auth changes, which makes the hash
extension mandatory instead of optional and introduce further
bugs:
https://github.com/php/php-src/commit/d6e81f0bfd0cb90586dd83d4fd47a4302605261a

MFH:		2018Q3

 

11:40 tz 

Update PHP 7.1 from 7.1.18 to 7.1.19

Changelog: http://www.php.net/ChangeLog-7.php#7.1.19

 

14:32 tz 

Update PHP 7.1 from 7.1.17 to 7.1.18

Changelog: http://www.php.net/ChangeLog-7.php#7.1.18

MFH:		2018Q2

 

14:49 tz 

Update PHP 7.1 from 7.1.16 to 7.1.17

Changelog: http://www.php.net/ChangeLog-7.php#7.1.17

MFH:		2018Q2
Security:	CVE-2018-5712

 

13:10 tz 

Update PHP 7.1 from 7.1.15 to 7.1.16

Changelog: http://www.php.net/ChangeLog-7.php#7.1.16

 

06:03 yuri 

devel/oniguruma: Update to 6.8.1

Only changed the shared object version (forgotten on the previous release).

 

21:42 linimon 

Turn off DTRACE option by default for mips.  It fails the exact same way
that armvX do.

While here, remove duplicate OPTIONS_EXCLUDE_aarch64 line, and sort.

Approved by:	portmgr (tier-2 blanket)

 

20:31 yuri 

devel/oniguruma: Update to 6.8.0

Changelog:
https://github.com/kkos/oniguruma/releases/tag/v6.8.0

Bumping 9 depending ports because oniguruma's interface
actually changed in an incompatible way,
see https://github.com/kkos/oniguruma/issues/79 ,
while the shared library lib/libonig.so.4.0.0 didn't change
the revision number. This is a bug in the upstream release.

 

13:58 tz 

Update PHP 7.1 from 7.1.14 to 7.1.15

Changelog: http://www.php.net/ChangeLog-7.php#7.1.15

MFH: 2018Q1

 

18:36 brnrd 

Migrate USE_APACHE to USES= apache

 - Following migration of Mk/bsd.apache.mk to Mk/Uses/apache.mk

With hat:	apache

 

14:23 brnrd 

Mk/Uses/apache.mk: Migrate Mk/bsd.apache.mk to Uses

 - Chase required changes in framework (bsd.sanity.mk, bsd.port.mk)
 - Chase required changes in ports (version checks)
 - Chase required changes in PHP ports (include bsd.apache.mk)
 - exp-run by antoine, brnrd, joneum

PR:             223691 (exp-run)
Reviewed by:    joneum (hat apache), mat (portmgr), antoine (portmgr)
Approved by:    joneum (hat apache)
Approved by:	portmgr
With hat:       apache

 

06:37 linimon 

Disable dtrace usdt on armv6, armv7 and aarch64, for lang/php* ports.

Tested for no regression on amd64.

PR:		224271
Approved by:	tz (maintainer)

 

11:46 tz 

Update PHP 7.1 from 7.1.13 to 7.1.14

Changelog: http://www.php.net/ChangeLog-7.php#7.1.14

Remove patch since upstream integrated a fix for the issue

MFH: 2018Q1

 

12:57 tijl 

- Replace USE_AUTOTOOLS with USES=autoreconf:build and run an upstream
  script in pre-configure to regenerate configure scripts.  Because this
  regenerates php_config.h.in, merge a patch for that file into the patch
  for configure.in.
- Remove redundant --localstatedir=/var (added by bsd.port.mk).

 

16:07 tz 

Update PHP 7.1 from 7.1.12 to 7.1.13

Changelog: http://www.php.net/ChangeLog-7.php#7.1.13

PR:  224955
MFH: 2018Q1

 

10:19 lwhsu 

Add an upstream patch:

http://git.php.net/?p=php-src.git;a=commit;h=72ec23d8233ac9a2071f991752cff55febb167d5

This eliminate a warning while building with clang on 32-bit system and enable
other programs' configure scripts test PHP feature with `-Werror`

Approved by:	tz (maintainer)

 

08:00 lwhsu 

- Add EMBED to default on options
  This is required for the php module of www/unit

Approved by:	ale, tz (maintainers)

 

18:46 gerald 

Remove DTRACE_DESC in favor of the default description.

Approved by:	tz

 

21:38 gerald 

Remove DEBUG_DESC in favor of the default one.

Approved by:	tz

 

10:13 tz 

Update PHP 7.1 from 7.1.11 to 7.1.12

Changelog: http://www.php.net/ChangeLog-7.php#7.1.12

MFH:      2017Q4

 

11:38 tz 

lang/php70 and lang/php71: Add mail header patch

While here to some improvements:
- Remove CONFLICTS of no longer existing PHP 5.5
- Add CONFLICTS to PHP 7.2
- Remove IPV6_DESC in order to use default one

PR:           219321
Submitted by: Karsten Schmidt <bsd@guggemand.dk>

 

21:30 antoine 

Remove nops,  setting USES after bsd.port.pre.mk doesn't do anything

With hat:	portmgr

 

07:32 tz 

Update PHP 7.1 from 7.1.10 to 7.1.11

Changelog: http://www.php.net/ChangeLog-7.php#7.1.11

MFH:      2017Q4
Security: CVE-2016-1283

 

13:04 tz 

Update PHP 7.1 from 7.1.9 to 7.1.10

Changelog: http://www.php.net/ChangeLog-7.php#7.1.10

MFH: 2017Q3

 

10:26 tz 

lang/php70 and lang/php71: enable to build on sparc64

Disabling DTRACE for sparc64 allows to build the port on it

PR:           221761
Submitted by: Mark Linimon <linimon@FreeBSD.org>

 

13:59 tz 

Update PHP 7.1 from 7.1.8 to 7.1.9

Changelog: http://www.php.net/ChangeLog-7.php#7.1.9

MFH: 2017Q3

 

14:54 tz 

Update PHP 7.1 from 7.1.7 to 7.1.8

Changelog: http://www.php.net/ChangeLog-7.php#7.1.8

MFH: 2017Q3

 

09:44 tz 

Update PHP 7.1 from 7.1.6 to 7.1.7

Changelog: http://www.php.net/ChangeLog-7.php#7.1.7

PR:          220532
Reported by: Fabiano Sidler <fabianosidler@swissonline.ch>, Dani
<i.dani@outlook.com>
MFH:         2017Q3
Security:    CVE-2017-9224
Security:    CVE-2017-9226
Security:    CVE-2017-9227
Security:    CVE-2017-9228
Security:    CVE-2017-9229

 

14:54 tz 

lang/php70 and lang/php71: Parse multiple [PATH=] and [HOST=] sections properly

Adding a patch to fix bug #74738 in PHP 7.0 and 7.1:
https://bugs.php.net/bug.php?id=74738

Reported by: Philip Jocks <pj@netzkommune.de>
MFH:         2017Q2

 

10:33 tz 

Update PHP 7.1 from 7.1.5 to 7.1.6

Changelog: http://www.php.net/ChangeLog-7.php#7.1.6

MFH: 2017Q2

 

10:01 tz 

Update PHP 7.1 from 7.1.4 to 7.1.5

Changelog: http://www.php.net/ChangeLog-7.php#7.1.5

Also remove the patch from devel/php71-gettext
which isn't needed anymore.

MFH: 2017Q2

 

08:57 tz 

Update PHP 7.1 from 7.1.3 to 7.1.4

Changelog: http://www.php.net/ChangeLog-7.php#7.1.4

PR:           218589
Submitted by: Jochen Neumeister <joneum@bsdproject.de>
MFH:          2017Q2
Differential Revision: https://reviews.freebsd.org/D10372

 

09:17 tz 

Update PHP 7.1 from 7.1.2 to 7.1.3

Changelog: http://www.php.net/ChangeLog-7.php#7.1.3

PR:           217800
Submitted by: Jochen Neumeister <joneum@bsdproject.de>
MFH:          2017Q1

 

14:19 tz 

Update PHP 7.1 from 7.1.1 to 7.1.2

Changelog: http://www.php.net/ChangeLog-7.php#7.1.2

PR:           217109
Submitted by: Jochen Neumeister <joneum@bsdproject.de>
MFH:          2017Q1

 

10:20 tz 

lang/php70 & lang/php71: revert moving of LIB_DEPENDS

The former commit should pet portlint, but accidently made
deve/pcre a LIB_DEPEND for all php modules.

Pointy hat: tz

 

16:35 tz 

lang/php71: pet portlint by moving LIB_DEPENDS up

Convert the patch from lang/php70 to lang/php71

PR:           216653
Submitted by: linimon

 

19:26 jbeich 

lang/php71: temporarily hide DTRACE option on aarch64

CFLAGS="-O2 -pipe -fno-strict-aliasing -DZEND_SIGNALS " dtrace -xnolibs -G -o
Zend/zend_dtrace.d.o -s
/wrkdirs/usr/ports/lang/php71/work/php-7.1.1/Zend/zend_dtrace.d main/main.o
Zend/zend_API.o Zend/zend_execute.o Zend/zend_exceptions.o Zend/zend_dtrace.o
Zend/zend.o
ld: Zend/zend_dtrace.d.o.ckjasD: Relocations in generic ELF (EM: 0)
Zend/zend_dtrace.d.o.ckjasD: error adding symbols: File in wrong format
dtrace: failed to link script
/wrkdirs/usr/ports/lang/php71/work/php-7.1.1/Zend/zend_dtrace.d: failed to link
Zend/zend_dtrace.d.o: ld exited with status 1
dt_modtext:/usr/src/cddl/lib/libdtrace/../../../cddl/contrib/opensolaris/lib/libdtrace/common/dt_link.c(841):
DOODAD
[..]
*** [Zend/zend_dtrace.d.o] Error code 1

PR:		214556

 

18:52 marino 

lang/php71: Bring DTRACE exclude for DF from lang/php70

Maybe this would have been caught with SVN copy?  Oh well.

Approved by:	just-fix-it

 

16:32 sunpoet 

Add mod_php71 7.1.1 (copied from mod_php70)

 

11:54 tz 

Add PHP 7.1

Thanks to: mat, pi, ale, martin@waschbuesch.de and franco@opnsense.org