From c8d5f505fc11fd4a62fe60c08cbbe14ec5a0665e Mon Sep 17 00:00:00 2001 From: Torsten Zuehlsdorff Date: Sun, 22 Dec 2019 18:42:40 +0000 Subject: MFH: r520628 lang/php72: Upgrade from 7.2.25 to 7.2.26 Changelog: Bcmath: Fixed bug #78878 (Buffer underflow in bc_shift_addsub). (CVE-2019-11046) Core: Fixed bug #78862 (link() silently truncates after a null byte on Windows). (CVE-2019-11044) Fixed bug #78863 (DirectoryIterator class silently truncates after a null byte). (CVE-2019-11045) EXIF: Fixed bug #78793 (Use-after-free in exif parsing under memory sanitizer). (CVE-2019-11050) Fixed bug #78910 (Heap-buffer-overflow READ in exif). (CVE-2019-11047) GD: Fixed bug #78849 (GD build broken with -D SIGNED_COMPARE_SLOW). Intl: Fixed bug #78804 (Segmentation fault in Locale::filterMatches). OPcache: Fixed $x = (bool)$x; with opcache (should emit undeclared variable notice). Standard: Fixed bug #78759 (array_search in $GLOBALS). Fixed bug #78833 (Integer overflow in pack causes out-of-bound access). Fixed bug #78814 (strip_tags allows / in tag name => whitelist bypass). Changelog taken from: https://www.php.net/ChangeLog-7.php#7.2.26 Approved by: ports-secteam (joneum) --- lang/php72/Makefile | 2 +- lang/php72/distinfo | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/lang/php72/Makefile b/lang/php72/Makefile index 232675794935..e6948f7676bc 100644 --- a/lang/php72/Makefile +++ b/lang/php72/Makefile @@ -1,7 +1,7 @@ # $FreeBSD$ PORTNAME= php72 -DISTVERSION= 7.2.25 +DISTVERSION= 7.2.26 PORTREVISION?= 0 CATEGORIES?= lang devel www MASTER_SITES= PHP/distributions diff --git a/lang/php72/distinfo b/lang/php72/distinfo index 349b52ebe3b9..41b21d7d50e7 100644 --- a/lang/php72/distinfo +++ b/lang/php72/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1574409107 -SHA256 (php-7.2.25.tar.xz) = 746efeedc38e6ff7b1ec1432440f5fa801537adf6cd21e4afb3f040e5b0760a9 -SIZE (php-7.2.25.tar.xz) = 12278980 +TIMESTAMP = 1576964409 +SHA256 (php-7.2.26.tar.xz) = 1dd3bc875e105f5c9d21fb4dc240670bd2c22037820ff03890f5ab883c88b78d +SIZE (php-7.2.26.tar.xz) = 12309176 -- cgit v1.2.3