01:17 tz 

lang/php72: Set deprecation, because it reached EOL on 2020-11-30

Sponsored by:	Bounce Experts

 

13:56 linimon 

Disable dtrace on riscv64 for now to unbreak build.

Approved by:	portmgr (tier-2 blanket)
Obtained from:	lonesome.com build testing

 

23:25 tz 

lang/php72: Update from 7.2.33 to 7.2.34

    Core:
        Fixed bug #79699 (PHP parses encoded cookie names so malicious `__Host-`
cookies can be sent). (CVE-2020-7070)
    OpenSSL:
        Fixed bug #79601 (Wrong ciphertext/tag in AES-CCM encryption for a 12
bytes IV). (CVE-2020-7069)

Sponsored by:	Bounce Experts

 

23:08 tz 

lang/php72: Update from 7.2.22 to 7.2.23

The last log entry is the same, because i accidently performed an update from
7.2.21 to 7.2.22. I ignored the update to 7.2.22 because for FreeBSD its a
no-op.
But when 7.2.23 was released i only increased the version by one.
This time its the real update! :)

Changelog:

    Core:
        Fixed bug #79877 (getimagesize function silently truncates after a null
byte) (cmb)
    Phar:
        Fixed bug #79797 (Use of freed hash key in the phar_parse_zipfile
function). (CVE-2020-7068)

Reported by:	Jose Garcia Juanino <jjuanino@gmail.com>
Sponsored by:	Bounce Experts

 

21:29 tz 

lang/php72: Update from 7.2.22 to 7.2.23

Changelog:

    Core:
        Fixed bug #79877 (getimagesize function silently truncates after a null
byte) (cmb)
    Phar:
        Fixed bug #79797 (Use of freed hash key in the phar_parse_zipfile
function). (CVE-2020-7068)

Sponsored by:	Bounce Experts

 

19:39 tz 

lang/php72: Upgrade from 7.2.30 to 7.2.31

Core:

    Fixed bug #78875 (Long filenames cause OOM and temp files are not cleaned).
(CVE-2019-11048)
    Fixed bug #78876 (Long variables in multipart/form-data cause OOM and temp
files are not cleaned). (CVE-2019-11048)

Sponsored by:	Bounce Experts

 

21:07 tz 

lang/php72: Upgrade from 7.2.29 to 7.2.30

Changelog:

    Fixed bug #79468 (SIGSEGV when closing stream handle with a stream filter
appended).
    Fixed bug #79330 (shell_exec() silently truncates after a null byte).
    Fixed bug #79465 (OOB Read in urldecode()).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.2.30

 

22:02 tz 

lang/php72: Update from 7.2.28 to 7.2.29

Changelog:

    Core:
        Fixed bug #79329 (get_headers() silently truncates after a null byte)
(CVE-2020-7066) (cmb)
    EXIF:
        Fixed bug #79282 (Use-of-uninitialized-value in exif) (CVE-2020-7064)
(Nikita)

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.2.29

MFH:		2020Q1
Sponsored by:	PHP Update Service

 

22:00 tz 

lang/php72: Upgrade from 7.2.27 to 7.2.28

Changelog:

    DOM:
        Fixed bug #77569: (Write Access Violation in DomImplementation).
    Phar:
        Fixed bug #79082 (Files added to tar with Phar::buildFromIterator have
all-access permissions). (CVE-2020-7063)
    Session:
        Fixed bug #79221 (Null Pointer Dereference in PHP Session Upload
Progress). (CVE-2020-7062)

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.2.28

MFH:		2020Q1

 

09:49 pkubaj 

lang/php7?: enable DTRACE on powerpc, powerpc64

Tested to work now.

 

23:54 tz 

lang/php72: Update from 7.2.26 to 7.2.27

Changelog:

    Mbstring:
        Fixed bug #79037 (global buffer-overflow in
`mbfl_filt_conv_big5_wchar`). (CVE-2020-7060)
    Session:
        Fixed bug #79091 (heap use-after-free in session_create_id()).
    Standard:
        Fixed bug #79099 (OOB read in php_strip_tags_ex). (CVE-2020-7059)

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.2.27

 

14:30 tz 

lang/php72: Upgrade from 7.2.25 to 7.2.26

Changelog:

    Bcmath:
        Fixed bug #78878 (Buffer underflow in bc_shift_addsub). (CVE-2019-11046)
    Core:
        Fixed bug #78862 (link() silently truncates after a null byte on
Windows). (CVE-2019-11044)
        Fixed bug #78863 (DirectoryIterator class silently truncates after a
null byte). (CVE-2019-11045)
    EXIF:
        Fixed bug #78793 (Use-after-free in exif parsing under memory
sanitizer). (CVE-2019-11050)
        Fixed bug #78910 (Heap-buffer-overflow READ in exif). (CVE-2019-11047)
    GD:
        Fixed bug #78849 (GD build broken with -D SIGNED_COMPARE_SLOW).
    Intl:
        Fixed bug #78804 (Segmentation fault in Locale::filterMatches).
    OPcache:
        Fixed $x = (bool)$x; with opcache (should emit undeclared variable
notice).
    Standard:
        Fixed bug #78759 (array_search in $GLOBALS).
        Fixed bug #78833 (Integer overflow in pack causes out-of-bound access).
        Fixed bug #78814 (strip_tags allows / in tag name => whitelist bypass).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.2.26

MFH:		2019Q4

 

19:58 pkubaj 

lang/php7*: disable DTRACE on powerpc64

php ports don't build on elfv2 with DTRACE.

PR:		242113, 242114, 242116
Approved by:	tz (maintainer), tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D22577
Differential Revision:	https://reviews.freebsd.org/D22578
Differential Revision:	https://reviews.freebsd.org/D22579

 

17:25 tobik 

lang/php7[12]*: Add missing USES=gnome

Differential Revision:	https://reviews.freebsd.org/D22407

 

22:13 tz 

lang/php72: Update from 7.2.24 to 7.2.25

Changelog:

    Core:
        Fixed bug #78656 (Parse errors classified as highest log-level).
        Fixed bug #78752 (Segfault if GC triggered while generator stack frame
is being destroyed).
        Fixed bug #78689 (Closure::fromCallable() doesn't handle [Closure,
'__invoke']).
    COM:
        Fixed bug #78694 (Appending to a variant array causes segfault).
    Date:
        Fixed bug #70153 (\DateInterval incorrectly unserialized).
        Fixed bug #78751 (Serialising DatePeriod converts DateTimeImmutable).
    Iconv:
        Fixed bug #78642 (Wrong libiconv version displayed). (gedas at martynas,
cmb).
    OpCache:
        Fixed bug #78654 (Incorrectly computed opcache checksum on files with
non-ascii characters).
        Fixed bug #78747 (OpCache corrupts custom extension result).
    OpenSSL:
        Fixed bug #78775 (TLS issues from HTTP request affecting other encrypted
connections).
    Reflection:
        Fixed bug #78697 (ReflectionClass::ImplementsInterface - inaccurate
error message with traits).
    Sockets:
        Fixed bug #78665 (Multicasting may leak memory).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.2.25

MFH:		2019Q4

 

14:47 tobik 

Add missing USES={gnome,php,sdl} to the rest

 

10:34 tz 

lang/php72: Update from 7.2.23 to 7.2.24

Changelog:

    Core:
        Fixed bug #78535 (auto_detect_line_endings value not parsed as bool).
        Fixed bug #78620 (Out of memory error).
    Exif:
        Fixed bug #78442 ('Illegal component' on exif_read_data since PHP7)
(Kalle)
    FPM:
        Fixed bug #78599 (env_path_info underflow in fpm_main.c can lead to
RCE). (CVE-2019-11043)
    MBString:
        Fixed bug #78579 (mb_decode_numericentity: args number inconsistency).
        Fixed bug #78609 (mb_check_encoding() no longer supports stringable
objects).
    MySQLi:
        Fixed bug #76809 (SSL settings aren't respected when persistent
connections are used).
    PDO_MySQL:
        Fixed bug #78623 (Regression caused by "SP call yields additional empty
result set").
    Session:
        Fixed bug #78624 (session_gc return value for user defined session
handlers).
    Standard:
        Fixed bug #76342 (file_get_contents waits twice specified timeout).
        Fixed bug #78612 (strtr leaks memory when integer keys are used and the
subject string shorter).
        Fixed bug #76859 (stream_get_line skips data if used with
data-generating filter).
    Zip:
        Fixed bug #78641 (addGlob can modify given remove_path value).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.2.24

MFH:		2019Q4

 

21:06 tz 

lang/php72: Update from 7.2.22 to 7.2.23

Changelog:

    Core:
        Fixed bug #78220 (Can't access OneDrive folder).
        Fixed bug #78412 (Generator incorrectly reports non-releasable $this as
GC child).
    FastCGI:
        Fixed bug #78469 (FastCGI on_accept hook is not called when using named
pipes on Windows).
    MySQLnd:
        Fixed connect_attr issues and added the _server_host connection
attribute.
    ODBC:
        Fixed bug #78473 (odbc_close() closes arbitrary resources).
    PDO_MySQL:
        Fixed bug #41997 (SP call yields additional empty result set).
    sodium:
        Fixed bug #78510 (Partially uninitialized buffer returned by
sodium_crypto_generichash_init()).
    SPL:
        Fixed bug #72884 (SplObject isCloneable() returns true but errs on
clone).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.2.23

 

20:23 tz 

lang/php72: Update from 7.2.21 to 7.2.22

Changelog:

    Core:
        Fixed bug #78363 (Buffer overflow in zendparse).
        Fixed bug #78379 (Cast to object confuses GC, causes crash).
    Curl:
        Fixed bug #77946 (Bad cURL resources returned by
curl_multi_info_read()).
    Exif:
        Fixed bug #78333 (Exif crash (bus error) due to wrong alignment and
invalid cast).
    Iconv:
        Fixed bug #78342 (Bus error in configure test for iconv //IGNORE).
    LiteSpeed:
        Updated to LiteSpeed SAPI V7.5 (Fixed clean shutdown).
    MySQLnd:
        Fixed bug #78179 (MariaDB server version incorrectly detected).
    Opcache:
        Fixed bug #77191 (Assertion failure in dce_live_ranges() when silencing
is used).
    Standard:
        Fixed bug #69100 (Bus error from stream_copy_to_stream (file -> SSL
stream) with invalid length).
        Fixed bug #78282 (atime and mtime mismatch).
        Fixed bug #78326 (improper memory deallocation on stream_get_contents()
with fixed length buffer).

MFH:		2019Q3

 

18:28 tz 

Update PHP 7.2 from 7.2.20 to 7.2.21

Changelog:

    Date:
        Fixed bug #69044 (discrepency between time and microtime).
    EXIF:
        Fixed bug #78256 (heap-buffer-overflow on exif_process_user_comment).
(CVE-2019-11042)
        Fixed bug #78222 (heap-buffer-overflow on exif_scan_thumbnail).
(CVE-2019-11041)
    Fileinfo:
        Fixed bug #78183 (finfo_file shows wrong mime-type for .tga file).
    FTP:
        Fixed bug #77124 (FTP with SSL memory leak).
    Libxml:
        Fixed bug #78279 (libxml_disable_entity_loader settings is shared
between requests (cgi-fcgi)).
    LiteSpeed:
        Updated to LiteSpeed SAPI V7.4.3 (increased response header count limit
from 100 to 1000, added crash handler to cleanly shutdown PHP request, added
CloudLinux mod_lsapi mode).
        Fixed bug #76058 (After "POST data can't be buffered", using php://input
makes huge tmp files).
    Openssl:
        Fixed bug #78231 (Segmentation fault upon stream_socket_accept of
exported socket-to-stream).
    OPcache:
        Fixed bug #78189 (file cache strips last character of uname hash).
        Fixed bug #78202 (Opcache stats for cache hits are capped at 32bit NUM).
        Fixed bug #78291 (opcache_get_configuration doesn't list all
directives).
    Phar:
        Fixed bug #77919 (Potential UAF in Phar RSHUTDOWN).
    Phpdbg:
        Fixed bug #78297 (Include unexistent file memory leak).
    PDO_Sqlite:
        Fixed bug #78192 (SegFault when reuse statement after schema has
changed).
    SQLite:
        Upgraded to SQLite 3.28.0.
    Standard:
        Fixed bug #78241 (touch() does not handle dates after 2038 in PHP
64-bit).
        Fixed bug #78269 (password_hash uses weak options for argon2).
    XMLRPC:
        Fixed bug #78173 (XML-RPC mutates immutable objects during encoding).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.2.21

MFH:		2019Q3

 

21:25 tz 

lang/php72: Upgrade from 7.2.19 to 7.2.20

Changelog:

    Core:
        Fixed bug #76980 (Interface gets skipped if autoloader throws an
exception).
    DOM:
        Fixed bug #78025 (segfault when accessing properties of
DOMDocumentType).
    MySQLi:
        Fixed bug #77956 (When mysqli.allow_local_infile = Off, use a meaningful
error message).
        Fixed bug #38546 (bindParam incorrect processing of bool types).
    Opcache:
        Fixed bug #78106 (Path resolution fails if opcache disabled during
request).
    OpenSSL:
        Fixed bug #78079 (openssl_encrypt_ccm.phpt fails with OpenSSL 1.1.1c).
    Sockets:
        Fixed bug #78038 (Socket_select fails when resource array contains
references).
    Standard:
        Fixed bug #77135 (Extract with EXTR_SKIP should skip $this).
        Fixed bug #77937 (preg_match failed).
    Zip:
        Fixed bug #76345 (zip.h not found).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.2.20

MFH:		2019Q3

 

21:57 tz 

lang/php72: Upgrade from 7.2.18 7.2.19

Changelog:

    EXIF:
        Fixed bug #77988 (heap-buffer-overflow on php_jpg_get16)
(CVE-2019-11040).
    FPM:
        Fixed bug #77934 (php-fpm kill -USR2 not working).
        Fixed bug #77921 (static.php.net doesn't work anymore).
    GD:
        Fixed bug #77943 (imageantialias($image, false); does not work).
        Fixed bug #77973 (Uninitialized read in gdImageCreateFromXbm)
(CVE-2019-11038).
    Iconv:
        Fixed bug #78069 (Out-of-bounds read in iconv.c:_php_iconv_mime_decode()
due to integer overflow) (CVE-2019-11039).
    JSON:
        Fixed bug #77843 (Use after free with json serializer).
    Opcache:
        Fixed possible crashes, because of inconsistent PCRE cache and opcache
SHM reset.
    PDO_MySQL:
        Fixed bug #77944 (Wrong meta pdo_type for bigint on LLP64).
    Reflection:
        Fixed bug #75186 (Inconsistent reflection of Closure:::__invoke()).
    Session:
        Fixed bug #77911 (Wrong warning for session.sid_bits_per_character).
    SPL:
        Fixed bug #77024 (SplFileObject::__toString() may return array).
    SQLite:
        Fixed bug #77967 (Bypassing open_basedir restrictions via file uris).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.2.19

MFC after:	2019Q2

 

06:45 tz 

lang/php72: Upgrade from 7.2.17 to 7.2.18

Changelog:

    CLI:
        Fixed bug #77794 (Incorrect Date header format in built-in server).
    EXIF:
        Fixed bug #77950 (Heap-buffer-overflow in _estrndup via
exif_process_IFD_TAG).
    Interbase:
        Fixed bug #72175 (Impossibility of creating multiple connections to
Interbase with php 7.x).
    Intl:
        Fixed bug #77895 (IntlDateFormatter::create fails in strict mode if
$locale = null).
    litespeed:
        LiteSpeed SAPI 7.3.1, better process management, new API function
litespeed_finish_request().
    Mail:
        Fixed bug #77821 (Potential heap corruption in TSendMail()).
    PCRE:
        Fixed bug #77827 (preg_match does not ignore \r in regex flags).
    PDO:
        Fixed bug #77849 (Disable cloning of PDO handle/connection objects).
    phpdbg:
        Fixed bug #76801 (too many open files).
        Fixed bug #77800 (phpdbg segfaults on listing some conditional
breakpoints).
        Fixed bug #77805 (phpdbg build fails when readline is shared).
    Reflection:
        Fixed bug #77772 (ReflectionClass::getMethods(null) doesn't work).
        Fixed bug #77882 (Different behavior: always calls destructor).
    Standard:
        Fixed bug #77680 (recursive mkdir on ftp stream wrapper is incorrect).
        Fixed bug #77844 (Crash due to null pointer in parse_ini_string with
INI_SCANNER_TYPED).
        Fixed bug #77853 (Inconsistent substr_compare behaviour with empty
haystack).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.2.18

MFH:		2019Q2

 

09:49 tz 

PHP: Change MOD_PRIO for imap to avoid core dumps

PR:		235917
Reported by:	Sergey Anokhin <admin@5034.ru>
MFH:		2019Q2

 

14:04 sunpoet 

Update devel/readline to 8.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://tiswww.case.edu/php/chet/readline/CHANGES
PR:		236156
Exp-run by:	antoine

 

13:50 tz 

Update PHP 7.2 from 7.2.16 to 7.2.17

Changelog:

    Core:
        Fixed bug #77738 (Nullptr deref in zend_compile_expr).
        Fixed bug #77660 (Segmentation fault on break 2147483648).
        Fixed bug #77652 (Anonymous classes can lose their interface
information).
        Fixed bug #77676 (Unable to run tests when building shared extension on
AIX).
    Bcmath:
        Fixed bug #77742 (bcpow() implementation related to gcc compiler
optimization).
    COM:
        Fixed bug #77578 (Crash when php unload).
    Date:
        Fixed bug #50020 (DateInterval:createDateFromString() silently fails).
        Fixed bug #75113 (Added DatePeriod::getRecurrences() method).
    EXIF:
        Fixed bug #77753 (Heap-buffer-overflow in php_ifd_get32s).
        Fixed bug #77831 (Heap-buffer-overflow in exif_iif_add_value).
    FPM:
        Fixed bug #77677 (FPM fails to build on AIX due to missing WCOREDUMP).
    GD:
        Fixed bug #77700 (Writing truecolor images as GIF ignores interlace
flag).
    MySQLi:
        Fixed bug #77597 (mysqli_fetch_field hangs scripts).
    Opcache:
        Fixed bug #77691 (Opcache passes wrong value for inline array push
assignments).
        Fixed bug #77743 (Incorrect pi node insertion for jmpznz with identical
successors).
    phpdbg:
        Fixed bug #77767 (phpdbg break cmd aliases listed in help do not match
actual aliases).
    sodium:
        Fixed bug #77646 (sign_detached() strings not terminated).
    SQLite3:
        Added sqlite3.defensive INI directive.
    Standard:
        Fixed bug #77664 (Segmentation fault when using undefined constant in
custom wrapper).
        Fixed bug #77669 (Crash in extract() when overwriting extracted array).
        Fixed bug #76717 (var_export() does not create a parsable value for
PHP_INT_MIN).
        Fixed bug #77765 (FTP stream wrapper should set the directory as
executable).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.2.17

MFH:		2019Q2

 

15:47 tz 

lang/php72: Upgrade from 7.2.15 to 7.2.16

Changelog:

    Core:
        Fixed bug #77589 (Core dump using parse_ini_string with numeric
sections).
        Fixed bug #77630 (rename() across the device may allow unwanted access
during processing).
    COM:
        Fixed bug #77621 (Already defined constants are not properly reported).
    EXIF:
        Fixed bug #77509 (Uninitialized read in exif_process_IFD_in_TIFF).
        Fixed bug #77540 (Invalid Read on exif_process_SOFn).
        Fixed bug #77563 (Uninitialized read in exif_process_IFD_in_MAKERNOTE).
        Fixed bug #77659 (Uninitialized read in exif_process_IFD_in_MAKERNOTE).
    PDO_OCI:
        Support Oracle Database tracing attributes ACTION, MODULE, CLIENT_INFO,
and CLIENT_IDENTIFIER.
    PHAR:
        Fixed bug #77396 (Null Pointer Dereference in
phar_create_or_parse_filename).
    SPL:
        Fixed bug #51068 (DirectoryIterator glob:// don't support current path
relative queries).
        Fixed bug #77431 (openFile() silently truncates after a null byte).
    Standard:
        Fixed bug #77552 (Unintialized php_stream_statbuf in stat functions).
    MySQL:
        Disabled LOCAL INFILE by default, can be enabled using php.ini directive
mysqli.allow_local_infile for mysqli, or PDO::MYSQL_ATTR_LOCAL_INFILE attribute
for pdo_mysql.

Changelog taken from: http://www.php.net/ChangeLog-7.php#7.2.16

MFH:		2019Q1

 

10:55 tz 

lang/php72: Upgrade from 7.2.14 to 7.2.15

Changelog:

    Core:
        Fixed bug #77339 (__callStatic may get incorrect arguments).
        Fixed bug #77494 (Disabling class causes segfault on member access).
        Fixed bug #77530 (PHP crashes when parsing `(2)::class`).
    Curl:
        Fixed bug #76675 (Segfault with H2 server push).
    GD:
        Fixed bug #73281 (imagescale(..., IMG_BILINEAR_FIXED) can cause black
border).
        Fixed bug #73614 (gdImageFilledArc() doesn't properly draw pies).
        Fixed bug #77272 (imagescale() may return image resource on failure).
        Fixed bug #77391 (1bpp BMPs may fail to be loaded).
        Fixed bug #77479 (imagewbmp() segfaults with very large images).
    ldap:
        Fixed bug #77440 (ldap_bind using ldaps or ldap_start_tls()=exception in
libcrypto-1_1-x64.dll).
    Mbstring:
        Fixed bug #77454 (mb_scrub() silently truncates after a null byte).
    MySQLnd:
        Fixed bug #75684 (In mysqlnd_ext_plugin.h the plugin methods family has
no external visibility).
    Opcache:
        Fixed bug #77361 (configure fails on 64-bit AIX when opcache enabled).
    OpenSSL:
        Fixed bug #77390 (feof might hang on TLS streams in case of fragmented
TLS records).
    PDO:
        Fixed bug #77273 (array_walk_recursive corrupts value types leading to
PDO failure).
    Sockets:
        Fixed bug #76839 (socket_recvfrom may return an invalid 'from' address
on MacOS).
    Standard:
        Fixed bug #77395 (segfault about array_multisort).
        Fixed bug #77439 (parse_str segfaults when inserting item into existing
array).

Changelog taken from: http://www.php.net/ChangeLog-7.php#7.2.15

PR:		235575 235577
MFH:		2019Q1

 

13:19 tz 

lang/php7*: Rename option MYSQL to MYSQLND

Renaming the option to be inline with the already existing MYSQLND option
in the mysqli and pdo_mysqli ports.

Reported by:	Jarrod Sayers <jarrod@downtools.com.au>

 

10:30 tz 

lang/php72: Make enabling MYSQL native driver optional

Currently PHP is always compiled with --enable-mysqlnd, to allow the use
of the native MySQL Native Driver. MySQL Native Driver is a replacement for the
MySQL Client Library.

While this is handy when working with MySQL there is no need for
it when MySQL is *not* used at all. This happens frequently when
working without databases or simply with other databases.

To avoid POLA the newly introduced option is a default option.

Disabling it will reduce the size of the package by ca. 175 KB,
which also helps in modern constraint VM run environments.

Submitted by:	Reko Turja <reko.turja@liukuma.net>

 

11:03 tz 

lang/php72: Upgrade from 7.2.13 to 7.2.14

Changelog:

    Core:
        Fixed bug #77369 (memcpy with negative length via crafted DNS response).
        Fixed bug #71041 (zend_signal_startup() needs ZEND_API).
        Fixed bug #76046 (PHP generates "FE_FREE" opcode on the wrong line).
    COM:
        Fixed bug #77177 (Serializing or unserializing COM objects crashes).
    Date:
        Fixed bug #77097 (DateTime::diff gives wrong diff when the actual diff
is less than 1 second).
    Exif:
        Fixed bug #77184 (Unsigned rational numbers are written out as signed
rationals).
    GD:
        Fixed bug #77269 (efree() on uninitialized Heap data in imagescale leads
to use-after-free).
        Fixed bug #77270 (imagecolormatch Out Of Bounds Write on Heap).
        Fixed bug #77195 (Incorrect error handling of imagecreatefromjpeg()).
        Fixed bug #77198 (auto cropping has insufficient precision).
        Fixed bug #77200 (imagecropauto(..., GD_CROP_SIDES) crops left but not
right).
    IMAP:
        Fixed bug #77020 (null pointer dereference in imap_mail).
    Mbstring:
        Fixed bug #77370 (Buffer overflow on mb regex functions - fetch_token).
        Fixed bug #77371 (heap buffer overflow in mb regex functions -
compile_string_node).
        Fixed bug #77381 (heap buffer overflow in multibyte match_at).
        Fixed bug #77382 (heap buffer overflow due to incorrect length in
expand_case_fold_string).
        Fixed bug #77385 (buffer overflow in fetch_token).
        Fixed bug #77394 (Buffer overflow in multibyte case folding - unicode).
        Fixed bug #77418 (Heap overflow in utf32be_mbc_to_code).
    OCI8:
        Fixed bug #76804 (oci_pconnect with OCI_CRED_EXT not working).
        Added oci_set_call_timeout() for call timeouts.
        Added oci_set_db_operation() for the DBOP end-to-end-tracing attribute.
    Opcache:
        Fixed bug #77215 (CFG assertion failure on multiple finalizing switch
frees in one block).
    PDO:
        Handle invalid index passed to PDOStatement::fetchColumn() as error.
    Phar:
        Fixed bug #77247 (heap buffer overflow in phar_detect_phar_fname_ext).
    Sockets:
        Fixed bug #77136 (Unsupported IPV6_RECVPKTINFO constants on macOS).
    SQLite3:
        Fixed bug #77051 (Issue with re-binding on SQLite3).
    Xmlrpc:
        Fixed bug #77242 (heap out of bounds read in xmlrpc_decode()).
        Fixed bug #77380 (Global out of bounds read in xmlrpc base64 code).

Changelog taken from: http://www.php.net/ChangeLog-7.php#7.2.14

MFH:		2019Q1

 

07:54 tz 

lang/php72: Upgrade from 7.2.12 to 7.2.13

Changelog: http://www.php.net/ChangeLog-7.php#7.2.13

MFH:		2018Q4

 

17:33 joneum 

Update to 7.2.12

Changelog:
 - http://www.php.net/ChangeLog-7.php#7.2.12

Approved by:	tz (implicit)
Sponsored by:	Netzkommune GmbH

 

15:15 joneum 

Update to 7.2.11

Changelogs:
 - http://www.php.net/releases/7_2_11.php
 - http://www.php.net/ChangeLog-7.php#7.2.11

Approved by:	tz (implicit)
Sponsored by:	Netzkommune GmbH

 

08:52 tz 

Add PHP 7.3 RC2 to the ports-tree.

Notable changes:
- Switch from PCRE to PCRE2
- Many modules now require PCRE2 for building
- graphics/php73-gd: X11 option is no longer default

Changes to Mk/Uses/php.mk approved by ale

 

16:08 emaste 

lang/php*: link with -znotext on i386

This port links some non-PIC code, which fails with lld as it defaults
to disallowing relocations against read-only segments. For i386 we can
just add -znotext unconditionally: for GNU BFD ld it just affirms BFD's
existing default.

PR:		214864, 230207
Approved by:	bapt
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D17193

 

18:40 joneum 

Update to 7.2.10

Changelog: http://www.php.net/ChangeLog-7.php#7.2.10

Approved by:	tz (implicit)
MFH:		2018Q3
Sponsored by:	Netzkommune GmbH

 

15:32 joneum 

Update to 7.2.9

Changelog: http://www.php.net/ChangeLog-7.php#7.2.9

MFH:		2018Q3

 

15:06 tz 

lang/php72: Update from 7.2.7 to 7.2.8

Changelog: http://www.php.net/ChangeLog-7.php#7.2.8

Also patch out MySQL 8 auth changes, which makes the hash
extension mandatory instead of optional and introduce further
bugs:
https://github.com/php/php-src/commit/d6e81f0bfd0cb90586dd83d4fd47a4302605261a

MFH:		2018Q3

 

11:41 tz 

lang/php72: Update from 7.2.6 to 7.2.7

Changelog: http://www.php.net/ChangeLog-7.php#7.2.7

 

14:33 tz 

lang/php72: Update from 7.2.5 to 7.2.6

Changelog: http://www.php.net/ChangeLog-7.php#7.2.6

MFH:		2018Q2

 

14:50 tz 

lang/php72: Update from 7.2.4 to 7.2.5

Changelog: http://www.php.net/ChangeLog-7.php#7.2.5

MFH:		2018Q2
Security:	CVE-2018-5712

 

13:11 tz 

lang/php72: Update from 7.2.3 to 7.2.4

Changelog: http://www.php.net/ChangeLog-7.php#7.2.4

 

06:03 yuri 

devel/oniguruma: Update to 6.8.1

Only changed the shared object version (forgotten on the previous release).

 

21:42 linimon 

Turn off DTRACE option by default for mips.  It fails the exact same way
that armvX do.

While here, remove duplicate OPTIONS_EXCLUDE_aarch64 line, and sort.

Approved by:	portmgr (tier-2 blanket)

 

20:31 yuri 

devel/oniguruma: Update to 6.8.0

Changelog:
https://github.com/kkos/oniguruma/releases/tag/v6.8.0

Bumping 9 depending ports because oniguruma's interface
actually changed in an incompatible way,
see https://github.com/kkos/oniguruma/issues/79 ,
while the shared library lib/libonig.so.4.0.0 didn't change
the revision number. This is a bug in the upstream release.

 

18:36 brnrd 

Migrate USE_APACHE to USES= apache

 - Following migration of Mk/bsd.apache.mk to Mk/Uses/apache.mk

With hat:	apache

 

14:23 brnrd 

Mk/Uses/apache.mk: Migrate Mk/bsd.apache.mk to Uses

 - Chase required changes in framework (bsd.sanity.mk, bsd.port.mk)
 - Chase required changes in ports (version checks)
 - Chase required changes in PHP ports (include bsd.apache.mk)
 - exp-run by antoine, brnrd, joneum

PR:             223691 (exp-run)
Reviewed by:    joneum (hat apache), mat (portmgr), antoine (portmgr)
Approved by:    joneum (hat apache)
Approved by:	portmgr
With hat:       apache

 

06:37 linimon 

Disable dtrace usdt on armv6, armv7 and aarch64, for lang/php* ports.

Tested for no regression on amd64.

PR:		224271
Approved by:	tz (maintainer)

 

13:11 tz 

lang/php72: Update from 7.2.2 to 7.2.3

Changelog: http://www.php.net/ChangeLog-7.php#7.2.3

MFH: 2018Q1

 

11:40 tz 

lang/php72: Update from 7.2.1 to 7.2.2

Changelog: http://www.php.net/ChangeLog-7.php#7.2.2

MFH: 2018Q1

 

12:57 tijl 

- Replace USE_AUTOTOOLS with USES=autoreconf:build and run an upstream
  script in pre-configure to regenerate configure scripts.  Because this
  regenerates php_config.h.in, merge a patch for that file into the patch
  for configure.in.
- Remove redundant --localstatedir=/var (added by bsd.port.mk).

 

16:11 tz 

lang/php72: Update from 7.2.0 to 7.2.1

Changelog: http://www.php.net/ChangeLog-7.php#7.2.1

PR:  224953
MFH: 2018Q1

 

10:19 lwhsu 

Add an upstream patch:

http://git.php.net/?p=php-src.git;a=commit;h=72ec23d8233ac9a2071f991752cff55febb167d5

This eliminate a warning while building with clang on 32-bit system and enable
other programs' configure scripts test PHP feature with `-Werror`

Approved by:	tz (maintainer)

 

15:40 tz 

lang/php72: Update from 7.2.0 RC 6 to 7.2.0

Changelog: http://www.php.net/ChangeLog-7.php#7.2.0

 

17:00 tz 

lang/php72: Add support for libargon2

PHP now provides support for argon-hashes. Add this support
to the port.

Reported by: Petr Hejl <petr.hejl@freedev.cz>

 

08:00 lwhsu 

- Add EMBED to default on options
  This is required for the php module of www/unit

Approved by:	ale, tz (maintainers)

 

18:46 gerald 

Remove DTRACE_DESC in favor of the default description.

Approved by:	tz

 

21:38 gerald 

Remove DEBUG_DESC in favor of the default one.

Approved by:	tz

 

11:41 tz 

lang/php72: Add missing conflict to php71-*

Also remove IPV6_DESC in favor of default description

 

12:05 tz 

lang/php72: Add missing header file

Add missing file zend_smart_string.h to pkg-plist.
The allows building many more of the pecl-* ports.

PR:           223766
Submitted by: Raivo Hool <raivo.hool@gmail.com>
Reported by:  Raivo Hool <raivo.hool@gmail.com>, Daniel Ylitalo
<daniel@blodan.se>

 

21:30 antoine 

Remove nops,  setting USES after bsd.port.pre.mk doesn't do anything

With hat:	portmgr

 

10:48 tz 

Add PHP 7.2 RC6

Notable changes:
- mcrypt module was removed
- sodium module was added
- sybase_ct artifacts removed

Also many PECL ports will not work with this version
since some files got renamed.

Reviewed by:           mat, ale, Rainer Duffner <rainer@ultra-secure.de>
Differential Revision: https://reviews.freebsd.org/D12980