{"push_id":694845998,"size":20,"distinct_size":0,"ref":"refs/heads/pkgsrc_2015Q1","head":"87da5d71b1dcda778ec46cd624800c208bbfe97a","before":"78ddecd7c7e191c5a6dc945bcca0d1740e8509bb","commits":[{"sha":"2aa0ef5106171c96f1b375302117c9697f5f6fdb","author":{"email":"09a135b153b17c6d3b0dbcddb9ea6da28b23d5f1","name":"hiramatsu"},"message":"Pullup ticket #4721 - requested by taca\nlang/ruby21-base: build fix\n\nRevisions pulled up:\n- pkgsrc/lang/ruby21-base/Makefile                              1.12\n- pkgsrc/lang/ruby21-base/distinfo                              1.17\n- pkgsrc/lang/ruby21-base/patches/patch-configure               1.4\n- pkgsrc/lang/ruby21-base/patches/patch-lib_mkmf.rb             1.1\n\n---\n   Module Name:    pkgsrc\n   Committed By:   sevan\n   Date:           Wed Apr 22 19:04:56 UTC 2015\n\n   Modified Files:\n           pkgsrc/lang/ruby21-base: distinfo\n           pkgsrc/lang/ruby21-base/patches: patch-configure\n\n   Log Message:\n   Remove mention of MirBSD in patch description as support is there by default now\n\n   Reviewed by wiz@\n\n---\n   Module Name:    pkgsrc\n   Committed By:   taca\n   Date:           Thu Apr 30 03:27:20 UTC 2015\n\n   Modified Files:\n           pkgsrc/lang/ruby21-base: Makefile distinfo\n   Added Files:\n           pkgsrc/lang/ruby21-base/patches: patch-lib_mkmf.rb\n\n   Log Message:\n   Avoid to generate empty command line on some platforms:\n\n   $(DLLIB): $(OBJS) Makefile\n   ...\n           $(Q) $(POSTLINK)\n\n   And POSTLINK is empty macro.  In such case, GNU make ignore empty command\n   line but BSD make tries to execute it and causes error.\n\n   Bump PKGREVISION.","distinct":false,"url":"https://api.github.com/repos/joyent/pkgsrc/commits/2aa0ef5106171c96f1b375302117c9697f5f6fdb"},{"sha":"d3df238ce365ce8772cc975391daf8f152ddf334","author":{"email":"09a135b153b17c6d3b0dbcddb9ea6da28b23d5f1","name":"hiramatsu"},"message":"pullup #4721","distinct":false,"url":"https://api.github.com/repos/joyent/pkgsrc/commits/d3df238ce365ce8772cc975391daf8f152ddf334"},{"sha":"2841bceda584c78dc6a994681dd40ae50ace39d3","author":{"email":"09a135b153b17c6d3b0dbcddb9ea6da28b23d5f1","name":"hiramatsu"},"message":"Pullup ticket #4722 - requested by taca\nlang/ruby22-base: build fix\n\nRevisions pulled up:\n- pkgsrc/lang/ruby22-base/Makefile                              1.2\n- pkgsrc/lang/ruby22-base/distinfo                              1.4\n- pkgsrc/lang/ruby22-base/patches/patch-configure               1.2\n- pkgsrc/lang/ruby22-base/patches/patch-lib_mkmf.rb             1.1\n\n---\n   Module Name:    pkgsrc\n   Committed By:   sevan\n   Date:           Wed Apr 22 19:04:35 UTC 2015\n\n   Modified Files:\n           pkgsrc/lang/ruby22-base: distinfo\n           pkgsrc/lang/ruby22-base/patches: patch-configure\n\n   Log Message:\n   Remove mention of MirBSD in patch description as support is there by default now\n\n   Reviewed by wiz@\n\n---\n   Module Name:    pkgsrc\n   Committed By:   taca\n   Date:           Thu Apr 30 03:27:52 UTC 2015\n\n   Modified Files:\n           pkgsrc/lang/ruby22-base: Makefile distinfo\n   Added Files:\n           pkgsrc/lang/ruby22-base/patches: patch-lib_mkmf.rb\n\n   Log Message:\n   Avoid to generate empty command line on some platforms:\n\n   $(DLLIB): $(OBJS) Makefile\n   ...\n           $(Q) $(POSTLINK)\n\n  And POSTLINK is empty macro.  In such case, GNU make ignore empty command\n   line but BSD make tries to execute it and causes error.\n\n   Bump PKGREVISION.","distinct":false,"url":"https://api.github.com/repos/joyent/pkgsrc/commits/2841bceda584c78dc6a994681dd40ae50ace39d3"},{"sha":"3b7bbbcb0c15d61332f6e0080c033539e836a6a6","author":{"email":"09a135b153b17c6d3b0dbcddb9ea6da28b23d5f1","name":"hiramatsu"},"message":"pullup #4722","distinct":false,"url":"https://api.github.com/repos/joyent/pkgsrc/commits/3b7bbbcb0c15d61332f6e0080c033539e836a6a6"},{"sha":"00229e522f1090f6b0a0a0ff7c4ef2964cb81b20","author":{"email":"a75d4d9e7d4d99e804e432141408b6e8dc3a4282","name":"tron"},"message":"Pullup ticket #4736 - requested by manu\ncomms/asterisk18: security update\n\nRevisions pulled up:\n- comms/asterisk18/Makefile                             1.94,1.97 via patch\n- comms/asterisk18/distinfo                             1.60-1.61\n- comms/asterisk18/patches/patch-main_loader.c          1.1\n\n---\n   Module Name:    pkgsrc\n   Committed By:   jnemeth\n   Date:           Sun Apr 12 03:35:39 UTC 2015\n\n   Modified Files:\n           pkgsrc/comms/asterisk18: Makefile distinfo\n\n   Log Message:\n   Update to Asterisk 1.8.32.3:  this is a security fix update.\n\n   The Asterisk Development Team has announced security releases for\n   Certified Asterisk 1.8.28, 11.6, and 13.1 and Asterisk 1.8, 11,\n   12, and 13. The available security releases are released as versions\n   1.8.28.cert-5, 1.8.32.3, 11.6-cert11, 11.17.1, 12.8.2, 13.1-cert2,\n   and 13.3.2.\n\n   The release of these versions resolves the following security vulnerability:\n\n   * AST-2015-003: TLS Certificate Common name NULL byte exploit\n\n     When Asterisk registers to a SIP TLS device and verifies the\n     server, Asterisk will accept signed certificates that match a\n     common name other than the one Asterisk is expecting if the signed\n     certificate has a common name containing a null byte after the\n     portion of the common name that Asterisk expected. This potentially\n     allows for a man in the middle attack.\n\n   For more information about the details of this vulnerability, please read\n   security advisory AST-2015-003, which was released at the same time as this\n   announcement.\n\n   For a full list of changes in the current releases, please see the Change Logs:\n\n   http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.32.3\n\n   The security advisory is available at:\n\n   * http://downloads.asterisk.org/pub/security/AST-2015-003.pdf\n\n   Thank you for your continued support of Asterisk!\n\n---\n   Module Name:    pkgsrc\n   Committed By:   manu\n   Date:           Tue Apr 28 08:48:11 UTC 2015\n\n   Modified Files:\n           pkgsrc/comms/asterisk18: Makefile distinfo\n   Added Files:\n           pkgsrc/comms/asterisk18/patches: patch-main_loader.c\n\n   Log Message:\n   Fix crash in asterisk18 startup\n\n   The added patch fixes startup crash and was submitted upstream.\n   While there also remove the ban on i386, as it was tested to run fine.","distinct":false,"url":"https://api.github.com/repos/joyent/pkgsrc/commits/00229e522f1090f6b0a0a0ff7c4ef2964cb81b20"},{"sha":"157699fc9c8848bd6b82f1d5ad0a02efab789d89","author":{"email":"a75d4d9e7d4d99e804e432141408b6e8dc3a4282","name":"tron"},"message":"Pullup ticket #4736.","distinct":false,"url":"https://api.github.com/repos/joyent/pkgsrc/commits/157699fc9c8848bd6b82f1d5ad0a02efab789d89"},{"sha":"23f41b60b6bb1cfd5e6b7aa1a2d9edc27df7336c","author":{"email":"a75d4d9e7d4d99e804e432141408b6e8dc3a4282","name":"tron"},"message":"Pullup ticket #4739 - requested by taca\nwww/contao32: security update\n\nRevisions pulled up:\n- www/contao/Makefile.common                                    1.96\n- www/contao32/distinfo                                         1.22\n\n---\n   Module Name:\tpkgsrc\n   Committed By:\ttaca\n   Date:\t\tSat Jun  6 03:29:33 UTC 2015\n\n   Modified Files:\n   \tpkgsrc/www/contao: Makefile.common\n   \tpkgsrc/www/contao32: distinfo\n\n   Log Message:\n   Update contao32 to 3.2.21.\n\n   Version 3.2.21 (2015-06-05)\n   ---------------------------\n\n   ### Fixed\n   Back-ported two security related changes from the upstream versions.","distinct":false,"url":"https://api.github.com/repos/joyent/pkgsrc/commits/23f41b60b6bb1cfd5e6b7aa1a2d9edc27df7336c"},{"sha":"e8ec6adfac2aad4a02c51c9885e77494b8f3555f","author":{"email":"a75d4d9e7d4d99e804e432141408b6e8dc3a4282","name":"tron"},"message":"Pullup ticket #4739 and #4740.","distinct":false,"url":"https://api.github.com/repos/joyent/pkgsrc/commits/e8ec6adfac2aad4a02c51c9885e77494b8f3555f"},{"sha":"1d377491d5081016f4c205cde0319844f1c57e0f","author":{"email":"a75d4d9e7d4d99e804e432141408b6e8dc3a4282","name":"tron"},"message":"Pullup ticket #4740 - requested by taca\nwww/contao34: security patch\n\nRevisions pulled up:\n- www/contao34/Makefile                                         1.5\n- www/contao34/distinfo                                         1.6\n- www/contao34/patches/patch-system_helper_functions.php        1.1\n- www/contao34/patches/patch-system_modules_core_classes_BackendUser.php 1.1\n- www/contao34/patches/patch-system_modules_core_controllers_BackendPopup.php 1.1\n- www/contao34/patches/patch-system_modules_core_dca_tl__files.php 1.1\n\n---\n   Module Name:\tpkgsrc\n   Committed By:\ttaca\n   Date:\t\tSat Jun  6 03:31:01 UTC 2015\n\n   Modified Files:\n   \tpkgsrc/www/contao34: Makefile distinfo\n   Added Files:\n   \tpkgsrc/www/contao34/patches: patch-system_helper_functions.php\n   \t    patch-system_modules_core_classes_BackendUser.php\n   \t    patch-system_modules_core_controllers_BackendPopup.php\n   \t    patch-system_modules_core_dca_tl__files.php\n\n   Log Message:\n   Add several security related fixes from Contao 3.2.21.\n\n   Bump PKGREVISION.","distinct":false,"url":"https://api.github.com/repos/joyent/pkgsrc/commits/1d377491d5081016f4c205cde0319844f1c57e0f"},{"sha":"18df8e94385261692beac4807f250e17b6ad22b1","author":{"email":"6f2f653c698c6b6ea8e813607abd7f3dca12bee1","name":"spz"},"message":"Pullup ticket #4747 - requested by tron\nsecurity/openssl: security update\n\nRevisions pulled up:\n- security/openssl/Makefile                                     1.208-1.209\n- security/openssl/PLIST.common                                 1.24\n- security/openssl/distinfo                                     1.113-1.114\n- security/openssl/patches/patch-Configure                      1.5\n\n-------------------------------------------------------------------\n   Module Name:\tpkgsrc\n   Committed By:\ttron\n   Date:\t\tFri Jun 12 17:02:24 UTC 2015\n\n   Modified Files:\n   \tpkgsrc/security/openssl: Makefile PLIST.common distinfo\n   \tpkgsrc/security/openssl/patches: patch-Configure\n\n   Log Message:\n   Update \"openssl\" package to version 1.0.2b. Changes since version 1.0.2a:\n   - Malformed ECParameters causes infinite loop\n     When processing an ECParameters structure OpenSSL enters an infinite loop\n     if the curve specified is over a specially malformed binary polynomial\n     field.\n     This can be used to perform denial of service against any\n     system which processes public keys, certificate requests or\n     certificates.  This includes TLS clients and TLS servers with\n     client authentication enabled.\n     This issue was reported to OpenSSL by Joseph Barr-Pixton.\n     (CVE-2015-1788)\n     [Andy Polyakov]\n   - Exploitable out-of-bounds read in X509_cmp_time\n     X509_cmp_time does not properly check the length of the ASN1_TIME\n     string and can read a few bytes out of bounds. In addition,\n     X509_cmp_time accepts an arbitrary number of fractional seconds in the\n     time string.\n     An attacker can use this to craft malformed certificates and CRLs of\n     various sizes and potentially cause a segmentation fault, resulting in\n     a DoS on applications that verify certificates or CRLs. TLS clients\n     that verify CRLs are affected. TLS clients and servers with client\n     authentication enabled may be affected if they use custom verification\n     callbacks.\n     This issue was reported to OpenSSL by Robert Swiecki (Google), and\n     independently by Hanno B?ck.\n     (CVE-2015-1789)\n     [Emilia K?sper]\n   - PKCS7 crash with missing EnvelopedContent\n     The PKCS#7 parsing code does not handle missing inner EncryptedContent\n     correctly. An attacker can craft malformed ASN.1-encoded PKCS#7 blobs\n     with missing content and trigger a NULL pointer dereference on parsing.\n     Applications that decrypt PKCS#7 data or otherwise parse PKCS#7\n     structures from untrusted sources are affected. OpenSSL clients and\n     servers are not affected.\n     This issue was reported to OpenSSL by Michal Zalewski (Google).\n     (CVE-2015-1790)\n     [Emilia K?sper]\n   - CMS verify infinite loop with unknown hash function\n     When verifying a signedData message the CMS code can enter an infinite lo=\n   op\n     if presented with an unknown hash function OID. This can be used to perfo=\n   rm\n     denial of service against any system which verifies signedData messages u=\n   sing\n     the CMS code.\n     This issue was reported to OpenSSL by Johannes Bauer.\n     (CVE-2015-1792)\n     [Stephen Henson]\n   - Race condition handling NewSessionTicket\n     If a NewSessionTicket is received by a multi-threaded client when\n     attempting to reuse a previous ticket then a race condition can occur\n     potentially leading to a double free of the ticket data.\n     (CVE-2015-1791)\n     [Matt Caswell]\n   - Removed support for the two export grade static DH ciphersuites\n     EXP-DH-RSA-DES-CBC-SHA and EXP-DH-DSS-DES-CBC-SHA. These two ciphersuites\n     were newly added (along with a number of other static DH ciphersuites) to\n     1.0.2. However the two export ones have *never* worked since they were\n     introduced. It seems strange in any case to be adding new export\n     ciphersuites, and given \"logjam\" it also does not seem correct to fix the=\n   m.\n     [Matt Caswell]\n   - Only support 256-bit or stronger elliptic curves with the\n     'ecdh_auto' setting (server) or by default (client). Of supported\n     curves, prefer P-256 (both).\n     [Emilia Kasper]\n   - Reject DH handshakes with parameters shorter than 768 bits.\n     [Kurt Roeckx and Emilia Kasper]\n\n\n   To generate a diff of this commit:\n   cvs rdiff -u -r1.207 -r1.208 pkgsrc/security/openssl/Makefile\n   cvs rdiff -u -r1.23 -r1.24 pkgsrc/security/openssl/PLIST.common\n   cvs rdiff -u -r1.112 -r1.113 pkgsrc/security/openssl/distinfo\n   cvs rdiff -u -r1.4 -r1.5 pkgsrc/security/openssl/patches/patch-Configure\n\n-------------------------------------------------------------------\n   Module Name:\tpkgsrc\n   Committed By:\ttron\n   Date:\t\tFri Jun 12 17:32:32 UTC 2015\n\n   Modified Files:\n   \tpkgsrc/security/openssl: Makefile distinfo\n\n   Log Message:\n   Update \"openssl\" package to version 1.0.2b. Changes since version 1.0.2c:\n   - Fix HMAC ABI incompatibility. The previous version introduced an ABI\n     incompatibility in the handling of HMAC. The previous ABI has now been\n     restored.\n\n\n   To generate a diff of this commit:\n   cvs rdiff -u -r1.208 -r1.209 pkgsrc/security/openssl/Makefile\n   cvs rdiff -u -r1.113 -r1.114 pkgsrc/security/openssl/distinfo","distinct":false,"url":"https://api.github.com/repos/joyent/pkgsrc/commits/18df8e94385261692beac4807f250e17b6ad22b1"},{"sha":"60597ba6a3c8bf51d10b44dea839907956476743","author":{"email":"6f2f653c698c6b6ea8e813607abd7f3dca12bee1","name":"spz"},"message":"Pullup ticket #4743 - requested by khorben\nsysutils/xenkernel45: security patch\n\nRevisions pulled up:\n- sysutils/xenkernel45/Makefile                                 1.8\n- sysutils/xenkernel45/distinfo                                 1.7\n- sysutils/xenkernel45/patches/patch-CVE-2015-3456              1.1\n\n-------------------------------------------------------------------\n   Module Name:\tpkgsrc\n   Committed By:\tkhorben\n   Date:\t\tFri Jun  5 17:15:04 UTC 2015\n\n   Modified Files:\n   \tpkgsrc/sysutils/xenkernel45: Makefile distinfo\n   Added Files:\n   \tpkgsrc/sysutils/xenkernel45/patches: patch-CVE-2015-3456\n\n   Log Message:\n   Apply fixes from upstream for XSA-133\n\n   Privilege escalation via emulated floppy disk drive\n\n   The code in qemu which emulates a floppy disk controller did not\n   correctly bounds check accesses to an array and therefore was\n   vulnerable to a buffer overflow attack.\n\n   A guest which has access to an emulated floppy device can exploit this\n   vulnerability to take over the qemu process elevating its privilege to\n   that of the qemu process.\n\n   All Xen systems running x86 HVM guests without stubdomains are\n   vulnerable to this depending on the specific guest configuration. The\n   default configuration is vulnerable.\n\n   Guests using either the traditional \"qemu-xen\" or upstream qemu device\n   models are vulnerable.\n   Guests using a qemu-dm stubdomain to run the device model are only\n   vulnerable to takeover of that service domain.\n\n   Systems running only x86 PV guests are not vulnerable.\n   ARM systems are not vulnerable.\n\n\n   To generate a diff of this commit:\n   cvs rdiff -u -r1.7 -r1.8 pkgsrc/sysutils/xenkernel45/Makefile\n   cvs rdiff -u -r1.6 -r1.7 pkgsrc/sysutils/xenkernel45/distinfo\n   cvs rdiff -u -r0 -r1.1 pkgsrc/sysutils/xenkernel45/patches/patch-CVE-2015-3456","distinct":false,"url":"https://api.github.com/repos/joyent/pkgsrc/commits/60597ba6a3c8bf51d10b44dea839907956476743"},{"sha":"3270f2dadd478a67565f1eabd5de3302871b94a4","author":{"email":"6f2f653c698c6b6ea8e813607abd7f3dca12bee1","name":"spz"},"message":"Pullup ticket #4744 - requested by khorben\nsysutils/xentools45: security patch\n\nRevisions pulled up:\n- sysutils/xentools45/Makefile                                  1.7\n- sysutils/xentools45/distinfo                                  1.7\n- sysutils/xentools45/patches/patch-CVE-2015-3456               1.1\n\n-------------------------------------------------------------------\n   Module Name:\tpkgsrc\n   Committed By:\tkhorben\n   Date:\t\tFri Jun  5 18:15:42 UTC 2015\n\n   Modified Files:\n   \tpkgsrc/sysutils/xentools45: Makefile distinfo\n   Added Files:\n   \tpkgsrc/sysutils/xentools45/patches: patch-CVE-2015-3456\n\n   Log Message:\n   Apply fixes from upstream for XSA-133\n\n   The patch really belongs here rather than in sysutils/xenkernel45 (where\n   it is already applied).\n\n\n   To generate a diff of this commit:\n   cvs rdiff -u -r1.6 -r1.7 pkgsrc/sysutils/xentools45/Makefile \\\n       pkgsrc/sysutils/xentools45/distinfo\n   cvs rdiff -u -r0 -r1.1 \\\n       pkgsrc/sysutils/xentools45/patches/patch-CVE-2015-3456","distinct":false,"url":"https://api.github.com/repos/joyent/pkgsrc/commits/3270f2dadd478a67565f1eabd5de3302871b94a4"},{"sha":"f4ac65fb336ba292c15d31ef3076273e6b77ac92","author":{"email":"6f2f653c698c6b6ea8e813607abd7f3dca12bee1","name":"spz"},"message":"Pullup ticket #4745 - requested by khorben\nsysutils/xenkernel42: security patch\n\nRevisions pulled up:\n- sysutils/xenkernel42/Makefile                                 1.16\n- sysutils/xenkernel42/distinfo                                 1.14\n- sysutils/xenkernel42/patches/patch-CVE-2015-3456              1.1\n\n-------------------------------------------------------------------\n   Module Name:\tpkgsrc\n   Committed By:\tkhorben\n   Date:\t\tFri Jun  5 18:18:41 UTC 2015\n\n   Modified Files:\n   \tpkgsrc/sysutils/xenkernel42: Makefile distinfo\n   Added Files:\n   \tpkgsrc/sysutils/xenkernel42/patches: patch-CVE-2015-3456\n\n   Log Message:\n   Apply fixes from upstream for XSA-133\n\n   XXX pull-ups\n\n\n   To generate a diff of this commit:\n   cvs rdiff -u -r1.15 -r1.16 pkgsrc/sysutils/xenkernel42/Makefile\n   cvs rdiff -u -r1.13 -r1.14 pkgsrc/sysutils/xenkernel42/distinfo\n   cvs rdiff -u -r0 -r1.1 \\\n       pkgsrc/sysutils/xenkernel42/patches/patch-CVE-2015-3456","distinct":false,"url":"https://api.github.com/repos/joyent/pkgsrc/commits/f4ac65fb336ba292c15d31ef3076273e6b77ac92"},{"sha":"d8e9417263bd256c1bee3de929a6e77ede8cd1de","author":{"email":"6f2f653c698c6b6ea8e813607abd7f3dca12bee1","name":"spz"},"message":"Pullup ticket #4746 - requested by khorben\nsysutils/xentools42: security patch\n\nRevisions pulled up:\n- sysutils/xentools42/Makefile                                  1.28\n- sysutils/xentools42/distinfo                                  1.17\n- sysutils/xentools42/patches/patch-CVE-2015-3456               1.1\n\n-------------------------------------------------------------------\n   Module Name:\tpkgsrc\n   Committed By:\tkhorben\n   Date:\t\tFri Jun  5 18:41:18 UTC 2015\n\n   Modified Files:\n   \tpkgsrc/sysutils/xentools42: Makefile distinfo\n   Added Files:\n   \tpkgsrc/sysutils/xentools42/patches: patch-CVE-2015-3456\n\n   Log Message:\n   Apply fixes from upstream for XSA-133\n\n   XXX pull-ups\n\n\n   To generate a diff of this commit:\n   cvs rdiff -u -r1.27 -r1.28 pkgsrc/sysutils/xentools42/Makefile\n   cvs rdiff -u -r1.16 -r1.17 pkgsrc/sysutils/xentools42/distinfo\n   cvs rdiff -u -r0 -r1.1 pkgsrc/sysutils/xentools42/patches/patch-CVE-2015-3456","distinct":false,"url":"https://api.github.com/repos/joyent/pkgsrc/commits/d8e9417263bd256c1bee3de929a6e77ede8cd1de"},{"sha":"a81c2c1d8879edbbec37a7287363d6e22fa7eb58","author":{"email":"6f2f653c698c6b6ea8e813607abd7f3dca12bee1","name":"spz"},"message":"tickets 4743-4747","distinct":false,"url":"https://api.github.com/repos/joyent/pkgsrc/commits/a81c2c1d8879edbbec37a7287363d6e22fa7eb58"},{"sha":"d98342b97359e649e89aaa3591f16fb80f86823a","author":{"email":"a75d4d9e7d4d99e804e432141408b6e8dc3a4282","name":"tron"},"message":"Pullup ticket #4748 - requested by taca\nlang/php55: security update\n\nRevisions pulled up:\n- lang/php/phpversion.mk                                        1.100\n- lang/php55/distinfo                                           1.41\n- lang/php55/patches/patch-ext_phar_Makefile.frag               1.3\n\n---\n   Module Name:\tpkgsrc\n   Committed By:\ttaca\n   Date:\t\tFri Jun 12 00:44:32 UTC 2015\n\n   Modified Files:\n   \tpkgsrc/lang/php: phpversion.mk\n   \tpkgsrc/lang/php55: distinfo\n   \tpkgsrc/lang/php55/patches: patch-ext_phar_Makefile.frag\n\n   Log Message:\n   Update php55 to 5.5.26.\n\n   11 Jun 2015, PHP 5.5.26\n\n   - Core:\n     . Fixed bug #69566 (Conditional jump or move depends on uninitialised value\n       in extension trait). (jbboehr at gmail dot com)\n     . Fixed bug #66048 (temp. directory is cached during multiple requests).\n       (Julien)\n     . Fixed bug #69628 (complex GLOB_BRACE fails on Windows).\n       (Christoph M. Becker)\n     . Fixed bug #69646 (OS command injection vulnerability in escapeshellarg).\n       (Anatol Belski)\n     . Fixed bug #69719 (Incorrect handling of paths with NULs). (Stas)\n\n   - FTP:\n     . Improved fix for bug #69545 (Integer overflow in ftp_genlist()\n       resulting in heap overflow). (Max Spelsberg)\n\n   - GD:\n     . Fixed bug #69479 (GD fails to build with newer libvpx). (Remi)\n\n   - Iconv:\n     . Fixed bug #48147 (iconv with //IGNORE cuts the string). (Stas)\n\n   - Litespeed SAPI:\n     . Fixed bug #68812 (Unchecked return value). (George Wang)\n\n   - Mail:\n     . Fixed bug #68776 (mail() does not have mail header injection prevention for\n       additional headers). (Yasuo)\n\n   - MCrypt:\n     . Added file descriptor caching to mcrypt_create_iv() (Leigh)\n\n   - Opcache\n     . Fixed bug #69549 (Memory leak with opcache.optimization_level=0xFFFFFFFF).\n       (Laruence, Dmitry)\n\n   - PCRE:\n     . Upgraded pcrelib to 8.37. (CVE-2015-2325, CVE-2015-2326)\n\n   - Phar:\n     . Fixed bug #69680 (phar symlink in binary directory broken).\n       (Matteo Bernardini, Remi)\n\n   - Postgres:\n     . Fixed bug #69667 (segfault in php_pgsql_meta_data). (Remi)\n\n   - Sqlite3:\n     . Upgrade bundled sqlite to 3.8.10.2. (CVE-2015-3414, CVE-2015-3415,\n       CVE-2015-3416) (Kaplan)","distinct":false,"url":"https://api.github.com/repos/joyent/pkgsrc/commits/d98342b97359e649e89aaa3591f16fb80f86823a"},{"sha":"f4779d790cd9d1eef38a2cd8cd8a1c9c21171267","author":{"email":"6f2f653c698c6b6ea8e813607abd7f3dca12bee1","name":"spz"},"message":"Pullup ticket #4741 - requested by tron\nsecurity/gnutls: build fix\n\nRevisions pulled up:\n- security/gnutls/distinfo                                      1.115\n- security/gnutls/patches/patch-src_libopts_libopts.c           1.1\n\n-------------------------------------------------------------------\n   Module Name:\tpkgsrc\n   Committed By:\tjoerg\n   Date:\t\tMon Jun  8 13:44:57 UTC 2015\n\n   Modified Files:\n   \tpkgsrc/security/gnutls: distinfo\n   Added Files:\n   \tpkgsrc/security/gnutls/patches: patch-src_libopts_libopts.c\n\n   Log Message:\n   Workaround gettext context function definition mess to unbreak\n   NetBSD/current.\n\n\n   To generate a diff of this commit:\n   cvs rdiff -u -r1.114 -r1.115 pkgsrc/security/gnutls/distinfo\n   cvs rdiff -u -r0 -r1.1 \\\n       pkgsrc/security/gnutls/patches/patch-src_libopts_libopts.c","distinct":false,"url":"https://api.github.com/repos/joyent/pkgsrc/commits/f4779d790cd9d1eef38a2cd8cd8a1c9c21171267"},{"sha":"b4de22360e7e4d0ce5cd4575628083765d91fca8","author":{"email":"6f2f653c698c6b6ea8e813607abd7f3dca12bee1","name":"spz"},"message":"4741","distinct":false,"url":"https://api.github.com/repos/joyent/pkgsrc/commits/b4de22360e7e4d0ce5cd4575628083765d91fca8"},{"sha":"a439cf78314b434487fdf65c121a289de32c76fb","author":{"email":"a75d4d9e7d4d99e804e432141408b6e8dc3a4282","name":"tron"},"message":"Pullup ticket #4748 and #4749.","distinct":false,"url":"https://api.github.com/repos/joyent/pkgsrc/commits/a439cf78314b434487fdf65c121a289de32c76fb"},{"sha":"87da5d71b1dcda778ec46cd624800c208bbfe97a","author":{"email":"a75d4d9e7d4d99e804e432141408b6e8dc3a4282","name":"tron"},"message":"Pullup ticket #4749 - requested by taca\nlang/php56: security update\n\nRevisions pulled up:\n- lang/php/phpversion.mk                                        1.101\n- lang/php56/distinfo                                           1.11\n- lang/php56/patches/patch-ext_phar_Makefile.frag               1.3\n\n---\n   Module Name:\tpkgsrc\n   Committed By:\ttaca\n   Date:\t\tFri Jun 12 00:47:03 UTC 2015\n\n   Modified Files:\n   \tpkgsrc/lang/php: phpversion.mk\n   \tpkgsrc/lang/php56: distinfo\n   \tpkgsrc/lang/php56/patches: patch-ext_phar_Makefile.frag\n\n   Log Message:\n   Update php56 to 5.6.10.\n\n   11 Jun 2015, PHP 5.6.10\n\n   - Core:\n     . Fixed bug #66048 (temp. directory is cached during multiple requests).\n       (Julien)\n     . Fixed bug #69566 (Conditional jump or move depends on uninitialised value\n       in extension trait). (jbboehr at gmail dot com)\n     . Fixed bug #69599 (Strange generator+exception+variadic crash). (Nikita)\n     . Fixed bug #69628 (complex GLOB_BRACE fails on Windows).\n       (Christoph M. Becker)\n     . Fixed POST data processing slowdown due to small input buffer size\n       on Windows. (Jorge Oliveira, Anatol)\n     . Fixed bug #69646 (OS command injection vulnerability in escapeshellarg).\n       (Anatol Belski)\n     . Fixed bug #69719 (Incorrect handling of paths with NULs). (Stas)\n\n   - FTP\n     . Improved fix for bug #69545 (Integer overflow in ftp_genlist()\n       resulting in heap overflow). (Max Spelsberg)\n\n   - GD:\n     . Fixed bug #69479 (GD fails to build with newer libvpx). (Remi)\n\n   - Iconv:\n     . Fixed bug #48147 (iconv with //IGNORE cuts the string). (Stas)\n\n   - Litespeed SAPI:\n     . Fixed bug #68812 (Unchecked return value). (George Wang)\n\n   - Mail:\n     . Fixed bug #68776 (mail() does not have mail header injection prevention for\n       additional headers). (Yasuo)\n\n   - MCrypt:\n     . Added file descriptor caching to mcrypt_create_iv() (Leigh)\n\n   - Opcache\n     . Fixed bug #69549 (Memory leak with opcache.optimization_level=0xFFFFFFFF).\n       (Laruence, Dmitry)\n\n   - Phar:\n     . Fixed bug #69680 (phar symlink in binary directory broken).\n       (Matteo Bernardini, Remi)\n\n   - Postgres:\n     . Fixed bug #69667 (segfault in php_pgsql_meta_data). (Remi)\n\n   - Sqlite3:\n     . Upgrade bundled sqlite to 3.8.10.2. (CVE-2015-3414, CVE-2015-3415,\n       CVE-2015-3416) (Kaplan)","distinct":false,"url":"https://api.github.com/repos/joyent/pkgsrc/commits/87da5d71b1dcda778ec46cd624800c208bbfe97a"}]}