Pullup ticket #6298 - requested by taca
lang/php73: security fix

Revisions pulled up:
- lang/php73/distinfo                                          1.24-1.25

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sat Jul 11 03:59:46 UTC 2020

  Modified Files:
  pkgsrc/lang/php: phpversion.mk
  pkgsrc/lang/php73: distinfo

  Log Message:
  lang/php73: update to 7.3.20

  Update php73 to 7.3.20.

  09 Jul 2020, PHP 7.3.20

  - Core:
    . Fixed bug #79650 (php-win.exe 100% cpu lockup). (cmb)
    . Fixed bug #79668 (get_defined_functions(true) may miss functions). =
  (cmb,
      Nikita)
    . Fixed possibly unsupported timercmp() usage. (cmb)

  - Exif:
    . Fixed bug #79687 (Sony picture - PHP Warning - Make, Model, MakerNo=
  tes).
      (cmb)

  - Filter:
    . Fixed bug #73527 (Invalid memory access in php_filter_strip). (cmb)=

  - GD:
    . Fixed bug #79676 (imagescale adds black border with IMG_BICUBIC). (=
  cmb)

  - OpenSSL:
    . Fixed bug #62890 (default_socket_timeout=3D-1 causes connection to =
  timeout).
      (cmb)

  - PDO SQLite:
    . Fixed bug #79664 (PDOStatement::getColumnMeta fails on empty result=
    set).
      (cmb)

  - SPL:
    . Fixed bug #79710 (Reproducible segfault in error_handler during GC
      involved an SplFileObject). (Nikita)

  - Standard:
    . Fixed bug #74267 (segfault with streams and invalid data). (cmb)
    . Fixed bug #79579 (ZTS build of PHP 7.3.17 doesn't handle ERANGE for=

      posix_getgrgid and others). (B=F6sz=F6rm=E9nyi Zolt=E1n)
  09 Jul 2020, PHP 7.3.20

  - Core:
    . Fixed bug #79650 (php-win.exe 100% cpu lockup). (cmb)
    . Fixed bug #79668 (get_defined_functions(true) may miss functions). =
  (cmb,
      Nikita)
    . Fixed possibly unsupported timercmp() usage. (cmb)

  - Exif:
    . Fixed bug #79687 (Sony picture - PHP Warning - Make, Model, MakerNo=
  tes).
      (cmb)

  - Filter:
    . Fixed bug #73527 (Invalid memory access in php_filter_strip). (cmb)=

  - GD:
    . Fixed bug #79676 (imagescale adds black border with IMG_BICUBIC). (=
  cmb)

  - OpenSSL:
    . Fixed bug #62890 (default_socket_timeout=3D-1 causes connection to =
  timeout).
      (cmb)

  - PDO SQLite:
    . Fixed bug #79664 (PDOStatement::getColumnMeta fails on empty result=
    set).
      (cmb)

  - SPL:
    . Fixed bug #79710 (Reproducible segfault in error_handler during GC
      involved an SplFileObject). (Nikita)

  - Standard:
    . Fixed bug #74267 (segfault with streams and invalid data). (cmb)
    . Fixed bug #79579 (ZTS build of PHP 7.3.17 doesn't handle ERANGE for=

      posix_getgrgid and others). (B=F6sz=F6rm=E9nyi Zolt=E1n)

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sat Aug  8 13:30:07 UTC 2020

  Modified Files:
  pkgsrc/lang/php: phpversion.mk
  pkgsrc/lang/php73: distinfo

  Log Message:
  lang/php73: update to 7.3.21

  Update php73 to 7.3.21 (PHP 7.3.21).

  06 Aug 2020, PHP 7.3.21

  - Apache:
    . Fixed bug #79030 (Upgrade apache2handler's php_apache_sapi_get_requ=
  est_time
      to return usec). (Herbert256)

  - Core:
    . Fixed bug #79877 (getimagesize function silently truncates after a =
  null
      byte) (cmb)
    . Fixed bug #79778 (Assertion failure if dumping closure with unresol=
  ved
      static variable). (Nikita)
    . Fixed bug #79792 (HT iterators not removed if empty array is destro=
  yed).
      (Nikita)

  - COM:
    . Fixed bug #63208 (BSTR to PHP string conversion not binary safe). (=
  cmb)
    . Fixed bug #63527 (DCOM does not work with Username, Password parame=
  ter).
      (cmb)

  - Curl:
    . Fixed bug #79741 (curl_setopt CURLOPT_POSTFIELDS asserts on object =
  with
      declared properties). (Nikita)

  - Fileinfo:
    . Fixed bug #79756 (finfo_file crash (FILEINFO_MIME)). (cmb)

  - FTP:
    . Fixed bug #55857 (ftp_size on large files). (cmb)

  - Mbstring:
    . Fixed bug #79787 (mb_strimwidth does not trim string). (XXiang)

  - Phar:
    . Fixed bug #79797 (Use of freed hash key in the phar_parse_zipfile
      function). (CVE-2020-7068) (cmb)

  - Standard:
    . Fixed bug #70362 (Can't copy() large 'data://' with open_basedir). =
  (cmb)
    . Fixed bug #79817 (str_replace() does not handle INDIRECT elements).=
    (Nikita)
    . Fixed bug #78008 (dns_check_record() always return true on Alpine).=

      (Andy Postnikov)

(bsiegert)