Received: from mail.netbsd.org (mail.netbsd.org [199.233.217.200]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) (Client CN "mail.NetBSD.org", Issuer "mail.NetBSD.org CA" (not verified)) by mollari.NetBSD.org (Postfix) with ESMTPS id 3EE531A9239 for ; Tue, 2 Nov 2021 18:20:53 +0000 (UTC) Received: by mail.netbsd.org (Postfix, from userid 605) id D3A7584E5F; Tue, 2 Nov 2021 18:20:52 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 1A49684DC1 for ; Tue, 2 Nov 2021 18:20:52 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([IPv6:::1]) by localhost (mail.netbsd.org [IPv6:::1]) (amavisd-new, port 10025) with ESMTP id 1ExtWwLW_jzh for ; Tue, 2 Nov 2021 18:20:51 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.NetBSD.org [IPv6:2001:470:a085:999:28c:faff:fe03:5984]) by mail.netbsd.org (Postfix) with ESMTP id 6C6AF84D0C for ; Tue, 2 Nov 2021 18:20:51 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id 65E7EFAEC; Tue, 2 Nov 2021 18:20:51 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_16358772512530" MIME-Version: 1.0 Date: Tue, 2 Nov 2021 18:20:51 +0000 From: "Thomas Merkel" Subject: CVS commit: [pkgsrc-2021Q3] pkgsrc/lang To: pkgsrc-changes@NetBSD.org Reply-To: tm@netbsd.org X-Mailer: log_accum Message-Id: <20211102182051.65E7EFAEC@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_16358772512530 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: tm Date: Tue Nov 2 18:20:51 UTC 2021 Modified Files: pkgsrc/lang/php [pkgsrc-2021Q3]: phpversion.mk pkgsrc/lang/php74 [pkgsrc-2021Q3]: distinfo Log Message: Pullup ticket #6527 - requested by taca lang/php74: security fix Revisions pulled up: - lang/php/phpversion.mk 1.343 - lang/php74/distinfo 1.31 --- Module Name: pkgsrc Committed By: taca Date: Fri Oct 22 15:14:24 UTC 2021 Modified Files: pkgsrc/lang/php: phpversion.mk pkgsrc/lang/php74: distinfo Log Message: lang/php74: update to 7.4.25 This is a security fix release. 21 Oct 2021, PHP 7.4.25 - DOM: . Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID). (Viktor Volkov) - FFI: . Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined). (Dmitry) - Fileinfo: . Fixed bug #78987 (High memory usage during encoding detection). (Anatol) - Filter: . Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing). (cmb, Nikita) - FPM: . Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703). (Jakub Zelenka) - SPL: . Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free). (cmb, Nikita, Tyson Andre) - Streams: . Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper). (cmb) - XML: . Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace). (Aliaksandr Bystry, cmb) - Zip: . Fixed bug #81490 (ZipArchive::extractTo() may leak memory). (cmb, Remi) . Fixed bug #77978 (Dirname ending in colon unzips to wrong dir). (cmb) To generate a diff of this commit: cvs rdiff -u -r1.341.2.1 -r1.341.2.2 pkgsrc/lang/php/phpversion.mk cvs rdiff -u -r1.28 -r1.28.2.1 pkgsrc/lang/php74/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_16358772512530 Content-Disposition: inline Content-Length: 2058 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/lang/php/phpversion.mk diff -u pkgsrc/lang/php/phpversion.mk:1.341.2.1 pkgsrc/lang/php/phpversion.mk:1.341.2.2 --- pkgsrc/lang/php/phpversion.mk:1.341.2.1 Mon Nov 1 22:06:32 2021 +++ pkgsrc/lang/php/phpversion.mk Tue Nov 2 18:20:51 2021 @@ -1,4 +1,4 @@ -# $NetBSD: phpversion.mk,v 1.341.2.1 2021/11/01 22:06:32 tm Exp $ +# $NetBSD: phpversion.mk,v 1.341.2.2 2021/11/02 18:20:51 tm Exp $ # # This file selects a PHP version, based on the user's preferences and # the installed packages. It does not add a dependency on the PHP @@ -89,7 +89,7 @@ PHPVERSION_MK= defined # Define each PHP's version. PHP56_VERSION= 5.6.40 PHP73_VERSION= 7.3.32 -PHP74_VERSION= 7.4.24 +PHP74_VERSION= 7.4.25 PHP80_VERSION= 8.0.11 # Define initial release of major version. Index: pkgsrc/lang/php74/distinfo diff -u pkgsrc/lang/php74/distinfo:1.28 pkgsrc/lang/php74/distinfo:1.28.2.1 --- pkgsrc/lang/php74/distinfo:1.28 Fri Sep 24 02:27:04 2021 +++ pkgsrc/lang/php74/distinfo Tue Nov 2 18:20:51 2021 @@ -1,9 +1,9 @@ -$NetBSD: distinfo,v 1.28 2021/09/24 02:27:04 taca Exp $ +$NetBSD: distinfo,v 1.28.2.1 2021/11/02 18:20:51 tm Exp $ -SHA1 (php-7.4.24.tar.xz) = 34660781db70c891dcaab046931d38f60464d7e3 -RMD160 (php-7.4.24.tar.xz) = 67a0c7ca2067311ee363e685fc89aba1980b0778 -SHA512 (php-7.4.24.tar.xz) = 30dd0a83d6184791f4cff3edcffeb05470de8f98ddadba3c11544449bf500280ff2048a8ca8588b35d0622dcbbf16f55ea297f51d469ae137048cab2d40da9cd -Size (php-7.4.24.tar.xz) = 10372816 bytes +SHA1 (php-7.4.25.tar.xz) = c873eabab28db07412a198ccc3482af6fbc6ab92 +RMD160 (php-7.4.25.tar.xz) = 53d6d40db7e78d98ea037e08780d68e81675bbe4 +SHA512 (php-7.4.25.tar.xz) = 7fcb236f6d2a92514059b2e107c2b592e6139e3c65046566ae98fb9d2c09eb3e9ca1a41ea6535fc814bc7127d8fd9f8bb5a80bd86eec32120eb150a34b9b5c34 +Size (php-7.4.25.tar.xz) = 10376304 bytes SHA1 (patch-build_libtool.m4) = 3656eb516fb14defd4b0964fe21e117c630be856 SHA1 (patch-configure) = 5e9c9c06f6d819d5ba2832d648f41363f40f3108 SHA1 (patch-disable-filter-url) = 0a2c19c18f089448a8d842e99738b292ab9e5640 --_----------=_16358772512530--