251 Commits

Author SHA1 Message Date
sthen
dc5525c548 update to php-7.0.4, ok robert@ 2016-03-17 16:54:12 +00:00
sthen
640e4458f9 update to php-5.6.19, ok robert@ 2016-03-17 16:54:06 +00:00
sthen
1a0d82458d update to php-5.5.33, ok robert@ 2016-03-17 16:53:58 +00:00
naddy
5fc24d3cb3 removing SHARED_ONLY is safe here 2016-03-16 20:02:11 +00:00
naddy
6326f9996f remove NO_SHARED_ARCHS 2016-03-12 20:23:35 +00:00
robert
2afa3050c0 update to 7.0.3 2016-03-01 21:58:25 +00:00
sthen
656ea8b751 security update to php-5.5.32, fixes include crashes, integer overflows,
and updating the bundled pcre (also security fixes).

add patches to use arc4random_buf instead of /dev/urandom (which is
typically not available on a normal OpenBSD php installation, with very
bad fallbacks in some cases).

ok robert@
2016-02-06 23:31:20 +00:00
sthen
1c71c809e0 security update to php-5.6.18, fixes include crashes, integer overflows,
and updating the bundled pcre (also security fixes).

add patches to use arc4random_buf instead of /dev/urandom (which is
typically not available on a normal OpenBSD php installation, with very
bad fallbacks in some cases).

testing of arc4random bits from martijn@, ok robert@
2016-02-06 23:30:25 +00:00
sthen
15a24f3e92 sync patches, no pkg change 2016-02-01 23:37:23 +00:00
sthen
69a82c669b move php MESSAGE/UNMESSAGE to a README instead, fleshed out with a
little more information about how to use it with different web servers.
feedback/OK jasper@ aja@, bumps etc to follow.
2016-02-01 21:53:06 +00:00
robert
1f64da10f5 security update to 7.0.2 2016-01-11 16:55:35 +00:00
robert
cc7be5a974 security update to 5.6.17 2016-01-11 16:52:18 +00:00
robert
866392c3e9 security update to 5.5.31 2016-01-11 16:46:38 +00:00
sthen
056c0c3e5c merge php-fpm into the main php packages, making things easier for
httpd/nginx/lighttpd users.  ok robert@
2016-01-07 18:06:45 +00:00
robert
67b63db0d1 update to 7.0.1 2016-01-02 12:53:50 +00:00
ajacoutot
f021349bd1 Unbreak. 2015-12-15 23:02:49 +00:00
robert
d290599a86 add support for php-7.0 and remove the remaining 5.3 references
ok ajacoutot@
2015-12-14 17:59:28 +00:00
robert
92624326a1 import of php-7.0.0; currently un-hooked 2015-12-14 17:58:45 +00:00
robert
7eb3906ab0 update to 5.6.16 2015-11-30 20:27:25 +00:00
robert
a84666955b update to 5.6.15 2015-11-15 13:44:19 +00:00
sthen
6454931a57 set USE_GMAKE for ports using the default pecl target.
fixes running tests on 12/15 pecl ports.
2015-11-14 14:55:47 +00:00
sthen
1134b3f483 WANTLIB sync, missed from the big batch of curl nghttp2 2015-11-06 18:31:45 +00:00
sthen
e705674ac9 Partially revert an upstream commit (from PHP 5.6.7) that among other things
made STREAM_CRYPTO_METHOD_TLS_CLIENT only support TLSv1.0 (no v1.1/v1.2).
This is a commonly used method (by various functions in PHP source itself,
common software like piwik, roundcube, davical, owncloud and others, and
libraries like zendframework, PEAR Net-IMAP/Sieve/SMTP) so it should
support modern TLS versions.  ok robert@
2015-10-22 13:04:56 +00:00
robert
a90e360a29 Re-introduce the suhosin extension and the no_suhosin flavor as well
which can be used to disable the suhosin extension in the php packages.

We are not going to build this flavor by default because people should
use suhosin by default, but in some corner-cases if someone wants to disable
it, the flavor can be used.

Also move some variables and the sybase_ct subpackage from the Makefiles
to the shared one, there is no need to have the same data in 3 different
Makefiles.
2015-10-14 19:36:01 +00:00
robert
7e32388cf1 update to 5.5.30 2015-10-14 16:54:40 +00:00
sthen
141bdc632a update to php-5.6.14, ok robert@ http://php.net/ChangeLog-5.php#5.6.14 2015-10-02 12:39:38 +00:00
sthen
078318e1bf de-conflict php-fpm packages, ok robert@
Heads up! The rc script has changed name:

  sed -i s/php_fpm/php56_fpm/g /etc/rc.conf.local
2015-09-18 09:18:22 +00:00
robert
bdda5c038d security update to 5.6.13 2015-09-15 12:34:12 +00:00
robert
5671697fa9 security update to 5.5.29 2015-09-15 12:33:49 +00:00
robert
f48cb51386 security update to 5.4.45 2015-09-15 12:33:36 +00:00
robert
7d24a31675 update to 5.6.12 2015-08-12 05:50:18 +00:00
robert
8e3c4688ff security update to 5.5.28 2015-08-12 05:50:04 +00:00
robert
9b854f5b99 security update to 5.4.44 2015-08-12 05:49:42 +00:00
robert
8d764893e2 remove all references to the suhosin patch 2015-07-30 09:46:18 +00:00
sthen
205e3dad56 fix typo 2015-07-19 20:09:58 +00:00
sthen
52dc481d6e guard SSLv3_*_method with OPENSSL_NO_SSL3, same as php 5.6 does
(if you use SSL/TLS in php, you really should be using 5.6+)
(...if you use php at all,   "                           " )
2015-07-18 20:54:19 +00:00
ajacoutot
3bae775dc7 Tweak pexp a bit. 2015-07-15 16:03:07 +00:00
robert
a54d81334c update to 5.5.27 2015-07-12 14:07:10 +00:00
robert
209ed8695b update to 5.6.11 2015-07-12 14:06:23 +00:00
robert
a43332a4cd update to 5.4.43 2015-07-10 06:29:25 +00:00
robert
8b09308970 security update to 5.4.42; fixes the following CVEs:
CVE-2015-3414, CVE-2015-3415, CVE-2015-3416
2015-06-14 13:38:46 +00:00
robert
d547329e99 security update to 5.6.10; includes fixes for the following CVEs:
CVE-2015-2325, CVE-2015-2326, CVE-2015-3414, CVE-2015-3415, CVE-2015-3416
2015-06-11 20:34:39 +00:00
robert
a0ffb9be8b security update to 5.5.26; includes fixes for the following CVEs:
CVE-2015-2325, CVE-2015-2326, CVE-2015-3414, CVE-2015-3415, CVE-2015-3416
2015-06-11 20:25:34 +00:00
robert
ba015519fd bye-bye php-5.3; prodded by aja@ 2015-06-10 12:53:49 +00:00
robert
8cf6099e62 make php-5.6 the default 2015-06-05 05:58:07 +00:00
robert
8f053cec53 security update to 5.6.9 2015-05-17 12:01:18 +00:00
robert
b48e859e4d security update to 5.5.25 2015-05-17 12:00:57 +00:00
robert
f1bda7e79e security update to 5.4.41 2015-05-17 12:00:22 +00:00
ajacoutot
a41cb89233 Patch does not apply and is not needed. 2015-04-27 05:46:50 +00:00
robert
52656ea939 security update 5.6.8; fixes the following CVEs:
CVE-2015-1351, CVE-2015-1352
2015-04-25 16:20:29 +00:00