--- - branch: pkgsrc-2023Q2 date: Tue Aug 15 18:42:54 UTC 2023 files: - new: 1.401.2.2 old: 1.401.2.1 path: pkgsrc/lang/php/phpversion.mk pathrev: pkgsrc/lang/php/phpversion.mk@1.401.2.2 type: modified - new: 1.24.2.1 old: '1.24' path: pkgsrc/lang/php81/distinfo pathrev: pkgsrc/lang/php81/distinfo@1.24.2.1 type: modified - new: '0' old: '1.1' path: pkgsrc/lang/php81/patches/patch-build_libtool.m4 pathrev: pkgsrc/lang/php81/patches/patch-build_libtool.m4@0 type: deleted - new: 1.1.14.1 old: '1.1' path: pkgsrc/lang/php81/patches/patch-configure pathrev: pkgsrc/lang/php81/patches/patch-configure@1.1.14.1 type: modified id: 20230815T184254Z.1cee5e969ad706fe34d7655c90e9b57b5533c773 log: "Pullup ticket #6786 - requested by taca\nlang/php81: security fix\n\nRevisions pulled up:\n- lang/php/phpversion.mk 1.403-1.404\n- lang/php81/distinfo 1.25-1.26\n- lang/php81/patches/patch-build_libtool.m4 \ deleted\n- lang/php81/patches/patch-configure 1.2\n\n---\n \ Module Name:\tpkgsrc\n Committed By:\ttaca\n Date:\t\tFri Jul 7 12:51:19 UTC 2023\n\n Modified Files:\n \tpkgsrc/lang/php: phpversion.mk\n \tpkgsrc/lang/php81: distinfo\n\n Log Message:\n lang/php81: update to 8.1.21\n\n PHP 8.1.21 (2023-07-06)\n\n - CLI:\n . Fixed bug GH-11246 (cli/get_set_process_title fails on MacOS).\n (James Lucas)\n\n - Core:\n . Fixed build for the riscv64 architecture/GCC 12. (Daniil Gentili)\n\n - Curl:\n . Fixed bug GH-11433 (Unable to set CURLOPT_ACCEPT_ENCODING to NULL).\n (nielsdos)\n\n \ - DOM:\n . Fixed bugs GH-11288 and GH-11289 and GH-11290 and GH-9142 (DOMExceptions\n \ and segfaults with replaceWith). (nielsdos)\n . Fixed bug GH-10234 (Setting DOMAttr::textContent results in an empty\n attribute value). (nielsdos)\n \ . Fix return value in stub file for DOMNodeList::item. (divinity76)\n . Fix spec compliance error with '*' namespace for\n DOMDocument::getElementsByTagNameNS. (nielsdos)\n . Fix DOMElement::append() and DOMElement::prepend() hierarchy checks.\n (nielsdos)\n . Fixed bug GH-11347 (Memory leak when calling a static method inside an\n xpath query). (nielsdos)\n . Fixed bug #67440 (append_node of a DOMDocumentFragment does not reconcile\n namespaces). (nielsdos)\n . Fixed bug #81642 (DOMChildNode::replaceWith() bug when replacing a node\n with itself). (nielsdos)\n . Fixed bug #77686 (Removed elements are still returned by getElementById).\n (nielsdos)\n . Fixed bug #70359 (print_r() on DOMAttr causes Segfault in\n php_libxml_node_free_list()). (nielsdos)\n . Fixed bug #78577 (Crash in DOMNameSpace debug info handlers). (nielsdos)\n . Fix lifetime issue with getAttributeNodeNS(). (nielsdos)\n \ . Fix \"invalid state error\" with cloned namespace declarations. (nielsdos)\n \ . Fixed bug #55294 and #47530 and #47847 (various namespace reconciliation\n \ issues). (nielsdos)\n . Fixed bug #80332 (Completely broken array access functionality with\n DOMNamedNodeMap). (nielsdos)\n\n - Opcache:\n . Fix allocation loop in zend_shared_alloc_startup(). (nielsdos)\n . Access violation on smm_shared_globals with ALLOC_FALLBACK. (KoudelkaB)\n . Fixed bug GH-11336 (php still tries to unlock the shared memory ZendSem\n with opcache.file_cache_only=1 but it was never locked). (nielsdos)\n\n - OpenSSL:\n \ . Fixed bug GH-9356 Incomplete validation of IPv6 Address fields in\n subjectAltNames (James Lucas, Jakub Zelenka).\n\n - PGSQL:\n . Fixed intermittent segfault with pg_trace. (David Carlier)\n\n - Phar:\n . Fix cross-compilation check in phar generation for FreeBSD. (peter279k)\n\n - SPL:\n . Fixed bug GH-11338 (SplFileInfo empty getBasename with more than one\n slash). (nielsdos)\n\n \ - Standard:\n . Fix access on NULL pointer in array_merge_recursive(). (ilutov)\n . Fix exception handling in array_multisort(). (ilutov)\n\n---\n \ Module Name:\tpkgsrc\n Committed By:\ttaca\n Date:\t\tSat Aug 5 08:43:16 UTC 2023\n\n Modified Files:\n \tpkgsrc/lang/php: phpversion.mk\n \tpkgsrc/lang/php81: distinfo\n \tpkgsrc/lang/php81/patches: patch-configure\n Removed Files:\n \ \tpkgsrc/lang/php81/patches: patch-build_libtool.m4\n\n Log Message:\n lang/php81: update to 8.1.22\n\n 03 Aug 2023, PHP 8.1.22\n\n - Build:\n . Fixed bug GH-11522 (PHP version check fails with '-' separator).\n (SVGAnimate)\n\n \ - CLI:\n . Fix interrupted CLI output causing the process to exit. (nielsdos)\n\n \ - Core:\n . Fixed oss-fuzz #60011 (Mis-compilation of by-reference nullsafe operator).\n (ilutov)\n . Fixed use-of-uninitialized-value with ??= on assert. (ilutov)\n . Fixed build for FreeBSD before the 11.0 releases. (David Carlier)\n\n - Curl:\n . Fix crash when an invalid callback function is passed to\n CURLMOPT_PUSHFUNCTION. (nielsdos)\n\n - Date:\n . Fixed bug GH-11368 (Date modify returns invalid datetime). (Derick)\n\n - DOM:\n . Fixed bug GH-11625 (DOMElement::replaceWith() doesn't replace node with\n DOMDocumentFragment but just deletes node or causes wrapping <>\n depending on libxml2 version). (nielsdos)\n\n - Fileinfo:\n . Fixed bug GH-11298 (finfo returns wrong mime type for xz files). (Anatol)\n\n - FTP:\n . Fix context option check for \"overwrite\". (JonasQuinten)\n . Fixed bug GH-10562 (Memory leak and invalid state with consecutive\n ftp_nb_fget). (nielsdos)\n\n - GD:\n . Fix most of the external libgd test failures. (Michael Orlitzky)\n\n - Hash:\n . Fix use-of-uninitialized-value in hash_pbkdf2(), fix missing $options\n parameter in signature. (ilutov)\n\n - Intl:\n . Fix memory leak in MessageFormatter::format() on failure. (Girgias)\n\n - Libxml:\n . Fixed bug GHSA-3qrf-m4j2-pcrr (Security issue with external entity loading\n in XML without enabling it). (CVE-2023-3823) (nielsdos, ilutov)\n\n - MBString:\n . Fix GH-11300 (license issue: restricted unicode license headers).\n (nielsdos)\n\n - Opcache:\n . Fixed bug GH-10914 (OPCache with Enum and Callback functions results in\n segmentation fault). (nielsdos)\n . Prevent potential deadlock if accelerated globals cannot be allocated.\n (nielsdos)\n\n - PCNTL:\n . Fixed bug GH-11498 (SIGCHLD is not always returned from proc_open).\n (nielsdos)\n\n - PCRE:\n . Mangle PCRE regex cache key with JIT option. (mvorisek)\n\n - PDO:\n . Fix GH-11587 (After php8.1, when PDO::ATTR_EMULATE_PREPARES is true\n and PDO::ATTR_STRINGIFY_FETCHES is true, decimal zeros are no longer\n filled). (SakiTakamachi)\n\n - PDO SQLite:\n . Fix GH-11492 (Make test failure: ext/pdo_sqlite/tests/bug_42589.phpt).\n \ (KapitanOczywisty, CViniciusSDias)\n\n - Phar:\n . Add missing check on EVP_VerifyUpdate() in phar util. (nielsdos)\n . Fixed bug GHSA-jqcx-ccgc-xwhv (Buffer mismanagement in phar_dir_read()).\n (CVE-2023-3824) (nielsdos)\n\n \ - PHPDBG:\n . Fixed bug GH-9669 (phpdbg -h options doesn't list the -z option). (adsr)\n\n - Session:\n . Removed broken url support for transferring session ID. (ilutov)\n\n - Standard:\n . Fix serialization of RC1 objects appearing in object graph twice. (ilutov)\n\n - SQLite3:\n . Fix replaced error handling in SQLite3Stmt::__construct. (nielsdos)\n" module: pkgsrc subject: 'CVS commit: [pkgsrc-2023Q2] pkgsrc/lang' unixtime: '1692124974' user: bsiegert