Tue Apr 28 16:27:50 2020 UTC ()
Pullup ticket #6171 - requested by taca
lang/php73: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.293
- lang/php73/distinfo                                           1.21

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sat Apr 18 04:59:41 UTC 2020

   Modified Files:
   	pkgsrc/lang/php: phpversion.mk
   	pkgsrc/lang/php73: distinfo

   Log Message:
   lang/php73: update to 7.3.17.

   Update php73 to 7.3.17.

   16 Apr 2020, PHP 7.3.17

   - Core:
     . Fixed bug #79364 (When copy empty array, next key is unspecified). (cmb)
     . Fixed bug #78210 (Invalid pointer address). (cmb, Nikita)

   - CURL:
     . Fixed bug #79199 (curl_copy_handle() memory leak). (cmb)

   - Date:
     . Fixed bug #79396 (DateTime hour incorrect during DST jump forward). (Nate
       Brunette)

   - Iconv:
     . Fixed bug #79200 (Some iconv functions cut Windows-1258). (cmb)

   - OPcache:
     . Fixed bug #79412 (Opcache chokes and uses 100% CPU on specific script).
       (Dmitry)

   - Session:
     . Fixed bug #79413 (session_create_id() fails for active sessions). (cmb)

   - Shmop:
     . Fixed bug #79427 (Integer Overflow in shmop_open()). (cmb)

   - SimpleXML:
     . Fixed bug #61597 (SXE properties may lack attributes and content). (cmb)

   - Spl:
     . Fixed bug #75673 (SplStack::unserialize() behavior). (cmb)
     . Fixed bug #79393 (Null coalescing operator failing with SplFixedArray).
       (cmb)

   - Standard:
     . Fixed bug #79330 (shell_exec() silently truncates after a null byte). (stas)
     . Fixed bug #79465 (OOB Read in urldecode()). (stas)
     . Fixed bug #79410 (system() swallows last chunk if it is exactly 4095 bytes
       without newline). (Christian Schneider)

   - Zip:
     . Fixed Bug #79296 (ZipArchive::open fails on empty file). (Remi)
     . Fixed bug #79424 (php_zip_glob uses gl_pathc after call to globfree).
       (Max Rees)


(bsiegert)
diff -r1.292 -r1.292.2.1 pkgsrc/lang/php/phpversion.mk
diff -r1.20 -r1.20.2.1 pkgsrc/lang/php73/distinfo
cvs diff -r1.292 -r1.292.2.1 pkgsrc/lang/php/phpversion.mk (expand / switch to unified diff)

--- pkgsrc/lang/php/phpversion.mk 2020/03/20 08:14:44 1.292
+++ pkgsrc/lang/php/phpversion.mk 2020/04/28 16:27:50 1.292.2.1
@@ -1,14 +1,14 @@ @@ -1,14 +1,14 @@
1# $NetBSD: phpversion.mk,v 1.292 2020/03/20 08:14:44 taca Exp $ 1# $NetBSD: phpversion.mk,v 1.292.2.1 2020/04/28 16:27:50 bsiegert Exp $
2# 2#
3# This file selects a PHP version, based on the user's preferences and 3# This file selects a PHP version, based on the user's preferences and
4# the installed packages. It does not add a dependency on the PHP 4# the installed packages. It does not add a dependency on the PHP
5# package. 5# package.
6# 6#
7# === User-settable variables === 7# === User-settable variables ===
8# 8#
9# PHP_VERSION_DEFAULT 9# PHP_VERSION_DEFAULT
10# The PHP version to choose when more than one is acceptable to 10# The PHP version to choose when more than one is acceptable to
11# the package. 11# the package.
12# 12#
13# Possible: 56 72 73 74 13# Possible: 56 72 73 74
14# Default: 73 14# Default: 73
@@ -79,27 +79,27 @@ @@ -79,27 +79,27 @@
79# initial release of major version. 79# initial release of major version.
80# 80#
81# Example: lib/php/20181200 81# Example: lib/php/20181200
82# 82#
83# Keywords: php 83# Keywords: php
84# 84#
85 85
86.if !defined(PHPVERSION_MK) 86.if !defined(PHPVERSION_MK)
87PHPVERSION_MK= defined 87PHPVERSION_MK= defined
88 88
89# Define each PHP's version. 89# Define each PHP's version.
90PHP56_VERSION= 5.6.40 90PHP56_VERSION= 5.6.40
91PHP72_VERSION= 7.2.29 91PHP72_VERSION= 7.2.29
92PHP73_VERSION= 7.3.16 92PHP73_VERSION= 7.3.17
93PHP74_VERSION= 7.4.4 93PHP74_VERSION= 7.4.4
94 94
95# Define initial release of major version. 95# Define initial release of major version.
96PHP56_RELDATE= 20140828 96PHP56_RELDATE= 20140828
97PHP72_RELDATE= 20170718 97PHP72_RELDATE= 20170718
98PHP73_RELDATE= 20181200 98PHP73_RELDATE= 20181200
99PHP74_RELDATE= 20191128 99PHP74_RELDATE= 20191128
100 100
101_VARGROUPS+= php 101_VARGROUPS+= php
102_USER_VARS.php= PHP_VERSION_DEFAULT 102_USER_VARS.php= PHP_VERSION_DEFAULT
103_PKG_VARS.php= PHP_VERSIONS_ACCEPTED PHP_VERSION_REQD 103_PKG_VARS.php= PHP_VERSIONS_ACCEPTED PHP_VERSION_REQD
104_SYS_VARS.php= PKG_PHP_VERSION PKG_PHP PHPPKGSRCDIR PHP_PKG_PREFIX \ 104_SYS_VARS.php= PKG_PHP_VERSION PKG_PHP PHPPKGSRCDIR PHP_PKG_PREFIX \
105 PKG_PHP_MAJOR_VERS 105 PKG_PHP_MAJOR_VERS
cvs diff -r1.20 -r1.20.2.1 pkgsrc/lang/php73/Attic/distinfo (expand / switch to unified diff)

--- pkgsrc/lang/php73/Attic/distinfo 2020/03/20 08:12:58 1.20
+++ pkgsrc/lang/php73/Attic/distinfo 2020/04/28 16:27:50 1.20.2.1
@@ -1,19 +1,19 @@ @@ -1,19 +1,19 @@
1$NetBSD: distinfo,v 1.20 2020/03/20 08:12:58 taca Exp $ 1$NetBSD: distinfo,v 1.20.2.1 2020/04/28 16:27:50 bsiegert Exp $
2 2
3SHA1 (php-7.3.16.tar.xz) = 2571100c75b24aaa913339eafee3e3c8f410cc07 3SHA1 (php-7.3.17.tar.xz) = 877b376d17bb5c99668bc8e1c8fb7af1bf2a4f79
4RMD160 (php-7.3.16.tar.xz) = d84bfc893aff1230c2d66ffc3bc00003715bacb6 4RMD160 (php-7.3.17.tar.xz) = 3719d79c3e505788b65b51f43c562c22c4130507
5SHA512 (php-7.3.16.tar.xz) = 4e3cfffc429bcbfbabc1267e73d9a0e46f363c3dd1674931852d1ae7f2b1713f1d5a04ef1900c7240bf6db088ffa7d3af024461a21733d55ecf1a213b69c81c3 5SHA512 (php-7.3.17.tar.xz) = ac99a645a7442c322b8334cb4d091474bb0486b5efe11f8ffc16e4a2c0ecf8dbb5d958206372617350ec70b579dd4756f4d166c2863f3892db480e9bfbd14837
6Size (php-7.3.16.tar.xz) = 12113688 bytes 6Size (php-7.3.17.tar.xz) = 12116072 bytes
7SHA1 (patch-configure) = 08b80528ba90c705398e8841c232382663479a3b 7SHA1 (patch-configure) = 08b80528ba90c705398e8841c232382663479a3b
8SHA1 (patch-disable-filter-url) = 0a2c19c18f089448a8d842e99738b292ab9e5640 8SHA1 (patch-disable-filter-url) = 0a2c19c18f089448a8d842e99738b292ab9e5640
9SHA1 (patch-ext_gd_config.m4) = eaecfb31b18700dd642c067ed82748d4f6be2335 9SHA1 (patch-ext_gd_config.m4) = eaecfb31b18700dd642c067ed82748d4f6be2335
10SHA1 (patch-ext_phar_Makefile.frag) = 53ea5c58b0bc27d236118d5750a74b1cba43e5dd 10SHA1 (patch-ext_phar_Makefile.frag) = 53ea5c58b0bc27d236118d5750a74b1cba43e5dd
11SHA1 (patch-ext_recode_recode.c) = 639bf762302c7a30c88d3f3fa862494e0f847bdb 11SHA1 (patch-ext_recode_recode.c) = 639bf762302c7a30c88d3f3fa862494e0f847bdb
12SHA1 (patch-ext_tidy_config.m4) = 380f4e8927582b2781faf58b17ad81b6dc967ba7 12SHA1 (patch-ext_tidy_config.m4) = 380f4e8927582b2781faf58b17ad81b6dc967ba7
13SHA1 (patch-ext_xsl_php__xsl.h) = a9877bff7bacc77926a4541a0ac171c00ad1a627 13SHA1 (patch-ext_xsl_php__xsl.h) = a9877bff7bacc77926a4541a0ac171c00ad1a627
14SHA1 (patch-php.ini-development) = e6815f2774ba071baa510fd5490fb5fa377d2462 14SHA1 (patch-php.ini-development) = e6815f2774ba071baa510fd5490fb5fa377d2462
15SHA1 (patch-php.ini-production) = 3ee4d2e2e4fb4dbcb5b64df86751f7feeef0e20d 15SHA1 (patch-php.ini-production) = 3ee4d2e2e4fb4dbcb5b64df86751f7feeef0e20d
16SHA1 (patch-sapi_cgi_Makefile.frag) = f4cd64d334884c49787d8854115c8cd69cc79bb8 16SHA1 (patch-sapi_cgi_Makefile.frag) = f4cd64d334884c49787d8854115c8cd69cc79bb8
17SHA1 (patch-sapi_cli_Makefile.frag) = 1cd29d09042863acbf5330e406410fdcf75d06b3 17SHA1 (patch-sapi_cli_Makefile.frag) = 1cd29d09042863acbf5330e406410fdcf75d06b3
18SHA1 (patch-sapi_fpm_fpm_events_port.c) = b82b7caffffde1343190fae430a68eb411b5cf8a 18SHA1 (patch-sapi_fpm_fpm_events_port.c) = b82b7caffffde1343190fae430a68eb411b5cf8a
19SHA1 (patch-sapi_fpm_php-fpm.conf.in) = acf9b4e70d4c5ea2b96e37e7bbf9005379ecc4d0 19SHA1 (patch-sapi_fpm_php-fpm.conf.in) = acf9b4e70d4c5ea2b96e37e7bbf9005379ecc4d0