Pullup ticket #4220 - requested by taca
lang/php53: security patch

Revisions pulled up:
- lang/php53/Makefile                                           1.43 via patch
- lang/php53/distinfo                                           1.67-1.68
- lang/php53/patches/patch-ext_openssl_openssl.c                1.1-1.2

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Aug 14 15:42:56 UTC 2013

   Modified Files:
   	pkgsrc/lang/php53: Makefile distinfo
   Added Files:
   	pkgsrc/lang/php53/patches: patch-ext_openssl_openssl.c

   Log Message:
   Add fix fo openssl, CVE-2013-4073.

   Bump PKGREVISION.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Fri Aug 16 00:38:13 UTC 2013

   Modified Files:
   	pkgsrc/lang/php53: distinfo
   	pkgsrc/lang/php53/patches: patch-ext_openssl_openssl.c

   Log Message:
   Since openssl's security problem has assigned CVE-2013-4248, update comment
   in the patch file.
Pullup ticket #4221 - requested by taca
lang/php*: apply framework changes to make pullup requests possible

Revisions pulled up:
- lang/php/common.mk                                            1.1
- lang/php/ext.mk                                               1.30
- lang/php/phpversion.mk                                        1.37-1.39
- lang/php53/DESCR                                              1.2
- lang/php53/Makefile                                           1.40-1.42
- lang/php53/Makefile.common                                    1.28-1.29
- lang/php53/Makefile.php                                       1.37
- lang/php54/DESCR                                              1.2
- lang/php54/MESSAGE.suhosin                                    deleted
- lang/php54/Makefile                                           1.9-1.10,1.12
- lang/php54/Makefile.common                                    1.15-1.16
- lang/php54/Makefile.php                                       1.6
- lang/php54/PLIST                                              1.4

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Jul 21 17:29:47 UTC 2013

   Modified Files:
   	pkgsrc/lang/php: ext.mk phpversion.mk
   	pkgsrc/lang/php53: Makefile.common Makefile.php
   	pkgsrc/lang/php54: Makefile.common Makefile.php PLIST
   Added Files:
   	pkgsrc/lang/php: common.mk
   Removed Files:
   	pkgsrc/lang/php54: MESSAGE.suhosin

   Log Message:
   Clean up php's framework.

   * Define PHP's version at one place.
   * Remove obsolete description in comments.
   * Add "used by www/php-fpm/Makefile" in php5[34]/Makefile.php.
   * Remove commented out support for suhosin extension from php54.
   * Add PHP_CHECK_INSTALLED and PHP_EXTENSION_DIR to php/phpversion.mk.

   No functional should be made.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Mon Jul 29 03:59:44 UTC 2013

   Modified Files:
   	pkgsrc/lang/php53: Makefile Makefile.common

   Log Message:
   Move PHP_CHECK_INSTALLED to before including Makefile.php since it should
   be defined before including lang/php/phpversion.mk.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Mon Jul 29 04:20:55 UTC 2013

   Modified Files:
   	pkgsrc/lang/php54: Makefile Makefile.common

   Log Message:
   Move PHP_CHECK_INSTALLED to before including Makefile.php since it should
   be defined before including lang/php/phpversion.mk.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Mon Jul 29 16:19:24 UTC 2013

   Modified Files:
   	pkgsrc/lang/php53: DESCR Makefile

   Log Message:
   Explicitly note it is PHP 5.3.x pacakge in COMMENT of Makefile and DESCR
   file.

   Bump PKGREVISION.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Mon Jul 29 16:21:07 UTC 2013

   Modified Files:
   	pkgsrc/lang/php54: DESCR Makefile

   Log Message:
   Explicitly note it is PHP 5.4.x pacakge in COMMENT of Makefile and DESCR
   file.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Mon Jul 29 16:38:12 UTC 2013

   Modified Files:
   	pkgsrc/lang/php: phpversion.mk

   Log Message:
   * Add php55 support.
   * Make PKG_PHP's value as description in comment.

---
   Module Name:	pkgsrc
   Committed By:	joerg
   Date:		Tue Aug 13 10:22:26 UTC 2013

   Modified Files:
   	pkgsrc/lang/php53: Makefile
   	pkgsrc/lang/php54: Makefile
   	pkgsrc/lang/php55: Makefile

   Log Message:
   Allow only the PHP version itself, otherwise the multi-version logic
   will trigger with failing distinfo entries.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Aug 14 14:53:03 UTC 2013

   Modified Files:
   	pkgsrc/lang/php: phpversion.mk


   Log Message:
   Correct checking condition of PHP_CHECK_INSTALLED.
Pullup ticket #4222 - requested by taca
lang/php54: security update

Revisions pulled up:
- lang/php/phpversion.mk                                    1.40,1.42 via patch
- lang/php54/Makefile                                       1.13-1.14
- lang/php54/Makefile.common                                patch
- lang/php54/PLIST                                          1.5
- lang/php54/distinfo                                       1.22-1.26 via patch
- lang/php54/patches/patch-configure                        1.3
- lang/php54/patches/patch-ext_openssl_openssl.c            deleted
- lang/php54/patches/patch-ext_xml_xml.c                    deleted
- lang/php54/patches/patch-sapi_cgi_Makefile.frag           1.2

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Aug 14 15:43:22 UTC 2013

   Modified Files:
   	pkgsrc/lang/php54: Makefile distinfo
   Added Files:
   	pkgsrc/lang/php54/patches: patch-ext_openssl_openssl.c

   Log Message:
   Add fix fo openssl, CVE-2013-4073.

   Bump PKGREVISION.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Fri Aug 16 00:38:24 UTC 2013

   Modified Files:
   	pkgsrc/lang/php54: distinfo
   	pkgsrc/lang/php54/patches: patch-ext_openssl_openssl.c

   Log Message:
   Since openssl's security problem has assigned CVE-2013-4248, update comment
   in the patch file.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Fri Aug 16 15:28:23 UTC 2013

   Modified Files:
   	pkgsrc/lang/php: phpversion.mk
   	pkgsrc/lang/php54: Makefile PLIST distinfo
   	pkgsrc/lang/php54/patches: patch-configure patch-sapi_cgi_Makefile.frag
   Removed Files:
   	pkgsrc/lang/php54/patches: patch-ext_openssl_openssl.c
   	    patch-ext_xml_xml.c

   Log Message:
   Update php54 to 5.4.18.

   15 Aug 2013, PHP 5.4.18

   - Core:
     . Fixed value of FILTER_SANITIZE_FULL_SPECIAL_CHARS constant (previously was
       erroneously set to FILTER_SANITIZE_SPECIAL_CHARS value). (Andrey
       avp200681 gmail com).
     . Fixed bug #65254 (Exception not catchable when exception thrown in autoload
       with a namespace). (Laruence)
     . Fixed bug #65108 (is_callable() triggers Fatal Error).
       (David Soria Parra, Laruence)
     . Fixed bug #65088 (Generated configure script is malformed on OpenBSD).
       (Adam)
     . Fixed bug #62964 (Possible XSS on "Registered stream filters" info).
       (david at nnucomputerwhiz dot com)
     . Fixed bug #62672 (Error on serialize of ArrayObject). (Lior Kaplan)
     . Fixed bug #62475 (variant_* functions causes crash when null given as an
       argument). (Felipe)
     . Fixed bug #60732 (php_error_docref links to invalid pages). (Jakub Vrana)
     . Fixed bug #65226 (chroot() does not get enabled). (Anatol)

   - CGI:
     . Fixed Bug #65143 (Missing php-cgi man page). (Remi)

   - CLI server:
     . Fixed bug #65066 (Cli server not responsive when responding with 422 http
       status code). (Adam)

   - CURL:
     . Fixed bug #62665 (curl.cainfo doesn't appear in php.ini). (Lior Kaplan)

   - FPM:
     . Fixed bug #63983 (enabling FPM borks compile on FreeBSD).
       (chibisuke at web dot de, Felipe)

   - FTP:
     . Fixed bug #65228 (FTPs memory leak with SSL).
       (marco dot beierer at mbsecurity dot ch)

   - GMP:
     . Fixed bug #65227 (Memory leak in gmp_cmp second parameter). (Felipe)

   - Imap:
     . Fixed bug #64467 (Segmentation fault after imap_reopen failure).
       (askalski at gmail dot com)

   - Intl:
     . Fixed bug #62759 (Buggy grapheme_substr() on edge case). (Stas)
     . Fixed bug #61860 (Offsets may be wrong for grapheme_stri* functions).
       (Stas)

   - mysqlnd:
     . Fixed segfault in mysqlnd when doing long prepare. (Andrey)

   - ODBC:
     . Fixed bug #61387 (NULL valued anonymous column causes segfault in
       odbc_fetch_array). (Brandon Kirsch)

   - Openssl:
     . Fixed handling null bytes in subjectAltName (CVE-2013-4073).
       (Christian Heimes)

   - PDO:
     . Allowed PDO_OCI to compile with Oracle Database 12c client libraries.
       (Chris Jones)

   - PDO_dblib:
     . Fixed bug #65219 (PDO/dblib not working anymore ("use dbName" not sent)).
       (Stanley Sufficool)

   - PDO_pgsql:
     . Fixed meta data retrieve when OID is larger than 2^31. (Yasuo)

   - Phar:
     . Fixed Bug #65142 (Missing phar man page). (Remi)

   - Session
     . Fixed bug #62535 ($_SESSION[$key]["cancel_upload"] doesn't work as
       documented). (Arpad)
     . Fixed bug #35703 (when session_name("123") consist only digits,
       should warning). (Yasuo)
     . Fixed bug #49175 (mod_files.sh does not support hash bits). Patch by
       oorza2k5 at gmail dot com (Yasuo)

   - Sockets:
     . Implemented FR #63472 (Setting SO_BINDTODEVICE with socket_set_option).
       (Damjan Cvetko)

   - SPL:
     . Fixed bug #65136 (RecursiveDirectoryIterator segfault). (Laruence)
     . Fixed bug #61828 (Memleak when calling Directory(Recursive)Iterator
       /Spl(Temp)FileObject ctor twice). (Laruence)
     . Fixed bug #60560 (SplFixedArray un-/serialize, getSize(), count() return 0,
       keys are strings). (Adam)

   - XML:
     . Fixed bug #65236 (heap corruption in xml parser, CVE-2013-4113). (Rob)

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sat Aug 17 00:35:08 UTC 2013

   Modified Files:
   	pkgsrc/lang/php54: distinfo

   Log Message:
   Make sure to update distinfo.  Thanks to Greg Oster noted the problem to me.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Fri Aug 23 03:11:55 UTC 2013

   Modified Files:
   	pkgsrc/lang/php: phpversion.mk
   	pkgsrc/lang/php54: distinfo

   Log Message:
   Update php54 to 5.4.19.

   22 Aug 2013, PHP 5.4.19
   - Core:
     . Fixed bug #64503 (Compilation fails with error: conflicting types for
       'zendparse'). (Laruence)

   - Openssl:
     . Fixed UMR in fix for CVE-2013-4248.
Pullup ticket #4223 - requested by taca
www/contao211: bug fix patch
www/contao30: bug fix patch
www/contao31: bug fix patch

Revisions pulled up:
- www/contao211/Makefile                                        1.9
- www/contao211/PLIST                                           1.6
- www/contao30/Makefile                                         1.10
- www/contao30/PLIST                                            1.5
- www/contao31/Makefile                                         1.4
- www/contao31/PLIST                                            1.3

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Aug 15 17:50:04 UTC 2013

   Modified Files:
   	pkgsrc/www/contao211: Makefile PLIST

   Log Message:
   Since system/config/config.php isn't configuration file, install it as
   normal files.  It caused trouble with old config.php.

   Also, remove extra install process of system/config/.htaccess.

   Bump PKGREVISION.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Aug 15 17:52:11 UTC 2013

   Modified Files:
   	pkgsrc/www/contao30: Makefile PLIST

   Log Message:
   Since system/config/default.php isn't configuration file, install it as
   normal files.  It might cause trouble with old default.php.

   Bump PKGREVISION.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Aug 15 17:53:23 UTC 2013

   Modified Files:
   	pkgsrc/www/contao31: Makefile PLIST

   Log Message:
   Since system/config/default.php isn't configuration file, install it as
   normal files.  It might cause trouble with old default.php.

   Bump PKGREVISION.
Pullup ticket #4224 - requested by taca
mail/roundcube: security update

Revisions pulled up:
- mail/roundcube/Makefile                                       1.58
- mail/roundcube/PLIST                                          1.30
- mail/roundcube/distinfo                                       1.32

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Aug 22 17:08:10 UTC 2013

   Modified Files:
   	pkgsrc/mail/roundcube: Makefile PLIST distinfo

   Log Message:
   Update roundcube to 0.9.3.

   RELEASE 0.9.3
   -------------
   - Fix setting refresh_interval to "Never" in Preferences (#1489286)
   - Optimized UI behavior for touch devices
   - Fix purge action in folder manager (#1489280)
   - Fix base URL resolving on attribute values with no quotes (#1489275)
   - Fix wrong handling of links with '|' character (#1489276)
   - Fix colorspace issue on image conversion using ImageMagick (#1489270)
   - Fix XSS vulnerability when saving HTML signatures (#1489251)
   - Fix XSS vulnerability when editing a message "as new" or draft (#1489251)
   - Fix rewrite rule in .htaccess (#1489240)
   - Fix detecting Turkish language in ISO-8859-9 encoding (#1489252)
   - Fix identity-selection using Return-Path headers (#1489241)
   - Fix parsing of links with ... in URL (#1489192)
   - Fix compose priority selector when opening in new window (#1489257)
   - Fix bug where signature wasn't changed on identity selection when editing
     a draft (#1489229)
   - Fix IMAP SETMETADATA parameters quoting (#1489231)
   - Fix "could not load message" error on valid empty message body (#1489228)
   - Fix handling of message/rfc822 attachments on message forward and edit
     (#1489214)
   - Fix parsing of square bracket characters in IMAP response strings (#1489223)
   - Don't clear References and in-Reply-To when a message is "edited as new"
     (#1489216)
   - Fix messages list sorting with THREAD=REFS
   - Remove deprecated (in PHP 5.5) PREG /e modifier usage (#1489174)
   - Fix empty messages list when register_globals is enabled (#1489157)
   - Fix so valid and set date.timezone is not required by installer checks
     (#1489180)
   - Canonize boolean ini_get() results (#1489189)
   - Fix so install do not fail when one of DB driver checks fails but other
     drivers exist (#1489178)
   - Fix so exported vCard specifies encoding in v3-compatible format (#1489183)
Pullup tickets #4219, #4220, #4221, #4222, #4223 and #4224.
Pullup ticket #4225 - requested by wiz
graphics/MesaLib: build fix

Revisions pulled up:
- graphics/MesaLib/dri.mk                                       1.7

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	wiz
   Date:		Tue Aug 27 11:14:53 UTC 2013

   Modified Files:
   	pkgsrc/graphics/MesaLib: dri.mk

   Log Message:
   MesaLib's configure insists on glproto>=1.4.11, so depend on that version.
   Might help on NetBSD-5.2_STABLE.


   To generate a diff of this commit:
   cvs rdiff -u -r1.6 -r1.7 pkgsrc/graphics/MesaLib/dri.mk
pullup 4225