Received: by mail.netbsd.org (Postfix, from userid 605) id 0B78A84EC4; Mon, 3 Oct 2022 14:17:27 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 3C4BD84EC2 for ; Mon, 3 Oct 2022 14:17:26 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([IPv6:::1]) by localhost (mail.netbsd.org [IPv6:::1]) (amavisd-new, port 10025) with ESMTP id 6iGRSiQ-mAsS for ; Mon, 3 Oct 2022 14:17:25 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.netbsd.org [199.233.217.197]) by mail.netbsd.org (Postfix) with ESMTP id 7062084D5F for ; Mon, 3 Oct 2022 14:17:25 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id 6A732FA90; Mon, 3 Oct 2022 14:17:25 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1664806645148200" MIME-Version: 1.0 Date: Mon, 3 Oct 2022 14:17:25 +0000 From: "Benny Siegert" Subject: CVS commit: [pkgsrc-2022Q3] pkgsrc/lang To: pkgsrc-changes@NetBSD.org Reply-To: bsiegert@netbsd.org X-Mailer: log_accum Message-Id: <20221003141725.6A732FA90@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_1664806645148200 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: bsiegert Date: Mon Oct 3 14:17:25 UTC 2022 Modified Files: pkgsrc/lang/php [pkgsrc-2022Q3]: phpversion.mk pkgsrc/lang/php74 [pkgsrc-2022Q3]: distinfo Log Message: Pullup ticket #6675 - requested by taca lang/php74: security fix Revisions pulled up: - lang/php/phpversion.mk 1.375 - lang/php74/distinfo 1.38 --- Module Name: pkgsrc Committed By: taca Date: Sat Oct 1 00:25:22 UTC 2022 Modified Files: pkgsrc/lang/php: phpversion.mk pkgsrc/lang/php74: distinfo Log Message: 29 Sep 2022, PHP 7.4.32 - Core: . Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628). (cmb) . Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629). (Derick) To generate a diff of this commit: cvs rdiff -u -r1.374 -r1.374.2.1 pkgsrc/lang/php/phpversion.mk cvs rdiff -u -r1.37 -r1.37.4.1 pkgsrc/lang/php74/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_1664806645148200 Content-Disposition: inline Content-Length: 1930 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/lang/php/phpversion.mk diff -u pkgsrc/lang/php/phpversion.mk:1.374 pkgsrc/lang/php/phpversion.mk:1.374.2.1 --- pkgsrc/lang/php/phpversion.mk:1.374 Thu Sep 1 16:34:21 2022 +++ pkgsrc/lang/php/phpversion.mk Mon Oct 3 14:17:25 2022 @@ -1,4 +1,4 @@ -# $NetBSD: phpversion.mk,v 1.374 2022/09/01 16:34:21 taca Exp $ +# $NetBSD: phpversion.mk,v 1.374.2.1 2022/10/03 14:17:25 bsiegert Exp $ # # This file selects a PHP version, based on the user's preferences and # the installed packages. It does not add a dependency on the PHP @@ -88,7 +88,7 @@ PHPVERSION_MK= defined # Define each PHP's version. PHP56_VERSION= 5.6.40 -PHP74_VERSION= 7.4.30 +PHP74_VERSION= 7.4.32 PHP80_VERSION= 8.0.23 PHP81_VERSION= 8.1.10 Index: pkgsrc/lang/php74/distinfo diff -u pkgsrc/lang/php74/distinfo:1.37 pkgsrc/lang/php74/distinfo:1.37.4.1 --- pkgsrc/lang/php74/distinfo:1.37 Thu Jun 9 15:00:38 2022 +++ pkgsrc/lang/php74/distinfo Mon Oct 3 14:17:25 2022 @@ -1,8 +1,8 @@ -$NetBSD: distinfo,v 1.37 2022/06/09 15:00:38 taca Exp $ +$NetBSD: distinfo,v 1.37.4.1 2022/10/03 14:17:25 bsiegert Exp $ -BLAKE2s (php-7.4.30.tar.xz) = 444547e11b84b53043ccca0e2abba93e585a9d7174884e7f31f24fa7dd44f2c5 -SHA512 (php-7.4.30.tar.xz) = 7bce44a23c07193c10c57459f08b08fdce4e3a269d6829a61371d1b1f117ecf4e167805a40e1a5e7687f534aee9d5f5745a3f4dcb344e9e781c105bc964ed738 -Size (php-7.4.30.tar.xz) = 10419136 bytes +BLAKE2s (php-7.4.32.tar.xz) = 78e09942454d9690cff9c67bbb2c81943fed839bc8cc8ec37c9ebf3c4da01c32 +SHA512 (php-7.4.32.tar.xz) = 052fbb6120b9943927685f736574871bc2b0c60d4ef18b54ec3f3d92398842286189fd426647c3c91eec38b11ce607090c4cd339040c92bda852574b96c36f67 +Size (php-7.4.32.tar.xz) = 10419092 bytes SHA1 (patch-build_libtool.m4) = 3656eb516fb14defd4b0964fe21e117c630be856 SHA1 (patch-configure) = 5e9c9c06f6d819d5ba2832d648f41363f40f3108 SHA1 (patch-disable-filter-url) = 0a2c19c18f089448a8d842e99738b292ab9e5640 --_----------=_1664806645148200--