Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (25m)  pkgsrc-2024Q1 (9d)  pkgsrc-2023Q4 (56d)  pkgsrc-2023Q2 (89d)  pkgsrc-2023Q3 (168d) 

2024-05-27 09:41:56 UTC Now

2023-08-15 18:32:22 UTC pkgsrc-2023Q2 commitmail json YAML

Pullup ticket #6785 - requested by taca
lang/php80: security fix (CVE-2023-3823, CVE-2024-3824)

Revisions pulled up:
- lang/php/phpversion.mk                                        1.406
- lang/php80/distinfo                                          1.31
- lang/php80/patches/patch-configure                            1.2

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Aug  6 04:28:24 UTC 2023

  Modified Files:
  pkgsrc/lang/php: phpversion.mk
  pkgsrc/lang/php80: distinfo
  pkgsrc/lang/php80/patches: patch-configure

  Log Message:
  lang/php80: update to 8.0.30

  03 Aug 2023, PHP 8.0.30

  - Libxml:
    . Fixed bug GHSA-3qrf-m4j2-pcrr (Security issue with external entity loading
      in XML without enabling it). (CVE-2023-3823) (nielsdos, ilutov)

  - Phar:
    . Fixed bug GHSA-jqcx-ccgc-xwhv (Buffer mismanagement in phar_dir_read()).
      (CVE-2023-3824) (nielsdos)

(bsiegert)