Pullup ticket #5896 - requested by taca

lang/php71: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.242
- lang/php71/Makefile                                           1.18
- lang/php71/distinfo                                           1.48

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sat Jan 12 14:56:47 UTC 2019

   Modified Files:
   	pkgsrc/lang/php: phpversion.mk
   	pkgsrc/lang/php71: Makefile distinfo

   Log Message:
   lang/php71: update to 7.1.26

   10 Jan 2019, PHP 7.1.26

   - Core:
     . Fixed bug #77369 (memcpy with negative length via crafted DNS response). (Stas)

   - GD:
     . Fixed bug #77269 (efree() on uninitialized Heap data in imagescale leads to
       use-after-free). (cmb)
     . Fixed bug #77270 (imagecolormatch Out Of Bounds Write on Heap). (cmb)

   - IMAP:
     . Fixed bug #77020 (null pointer dereference in imap_mail). (cmb)

   - Mbstring:
     . Fixed bug #77370 (Buffer overflow on mb regex functions - fetch_token). (Stas)
     . Fixed bug #77371 (heap buffer overflow in mb regex functions
       - compile_string_node). (Stas)
     . Fixed bug #77381 (heap buffer overflow in multibyte match_at). (Stas)
     . Fixed bug #77382 (heap buffer overflow due to incorrect length in
       expand_case_fold_string). (Stas)
     . Fixed bug #77385 (buffer overflow in fetch_token). (Stas)
     . Fixed bug #77394 (Buffer overflow in multibyte case folding - unicode). (Stas)
     . Fixed bug #77418 (Heap overflow in utf32be_mbc_to_code). (Stas)

   - Phar:
     . Fixed bug #77247 (heap buffer overflow in phar_detect_phar_fname_ext). (Stas)

   - Xmlrpc:
     . Fixed bug #77242 (heap out of bounds read in xmlrpc_decode()). (cmb)
     . Fixed bug #77380 (Global out of bounds read in xmlrpc base64 code). (Stas)

3 files changed, 8 insertions, 9 deletions

diff --git a/lang/php/phpversion.mk b/lang/php/phpversion.mk
index bfcee074b81..6550e4bf0e9 100644
--- a/lang/php/phpversion.mk
+++ b/lang/php/phpversion.mk
@@ -1,4 +1,4 @@
-# $NetBSD: phpversion.mk,v 1.241 2018/12/15 17:11:54 taca Exp $
+# $NetBSD: phpversion.mk,v 1.241.2.1 2019/01/19 21:30:21 bsiegert Exp $
 #
 # This file selects a PHP version, based on the user's preferences and
 # the installed packages. It does not add a dependency on the PHP
@@ -89,7 +89,7 @@ PHPVERSION_MK=	defined
 # Define each PHP's version.
 PHP56_VERSION=	5.6.39
 PHP70_VERSION=	7.0.33
-PHP71_VERSION=	7.1.25
+PHP71_VERSION=	7.1.26
 PHP72_VERSION=	7.2.13
 PHP73_VERSION=	7.3.0
 
diff --git a/lang/php71/Makefile b/lang/php71/Makefile
index 476b592d5a0..8f5f92a6d39 100644
--- a/lang/php71/Makefile
+++ b/lang/php71/Makefile
@@ -1,10 +1,9 @@
-# $NetBSD: Makefile,v 1.17 2018/12/09 12:20:44 taca Exp $
+# $NetBSD: Makefile,v 1.17.2.1 2019/01/19 21:30:21 bsiegert Exp $
 
 #
 # We can't omit PKGNAME here to handle PKG_OPTIONS.
 #
 PKGNAME=		php-${PHP_VERSION:S/RC/rc/}
-PKGREVISION=		1
 CATEGORIES=		lang
 
 HOMEPAGE=		http://www.php.net/
diff --git a/lang/php71/distinfo b/lang/php71/distinfo
index 6a72fb68aab..430c8300665 100644
--- a/lang/php71/distinfo
+++ b/lang/php71/distinfo
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.47 2018/12/15 16:57:04 taca Exp $
+$NetBSD: distinfo,v 1.47.2.1 2019/01/19 21:30:21 bsiegert Exp $
 
-SHA1 (php-7.1.25.tar.bz2) = 6d8ea15a07c4cf87316a0ffcf304191b1c6501ff
-RMD160 (php-7.1.25.tar.bz2) = cee77538a33089714b7b3684b65f44f19fb3f11a
-SHA512 (php-7.1.25.tar.bz2) = 4eb23480858dd7cfcd87ddee54d2be0e62cd9476735444d5f274612dbe97b92192c2116fab7276caec0d7b5695293a5297ba472335785259813f3d8f16ebfea0
-Size (php-7.1.25.tar.bz2) = 15026963 bytes
+SHA1 (php-7.1.26.tar.bz2) = e6015d635ea0fd952db221bc7dd2e7abb173d4d2
+RMD160 (php-7.1.26.tar.bz2) = b74c077194f60ee42d2ad3bebaa07c6181c75b3a
+SHA512 (php-7.1.26.tar.bz2) = 1d802acec417cc625d13b7f980f075f4ad8fedf4809ab33e767834c280693525685cc7d6fec2e3ad51296a1d1a214095e70b376fc39fb1cacb71c1f45724fe3e
+Size (php-7.1.26.tar.bz2) = 15032145 bytes
 SHA1 (patch-acinclude.m4) = c232e68dbcd58bbfdf6800e491eb46812df15f65
 SHA1 (patch-configure) = 862707ff3fd8b8d7312104bb44a48fe8379951bd
 SHA1 (patch-disable-filter-url) = e9e92d686ddd1d1a1ece10fe4feee4e368fe510c