Wed Oct 21 19:28:42 2020 UTC ()
Pullup ticket #6335 - requested by taca
lang/php72: security update

Revisions pulled up:
- lang/php/phpversion.mk                                        1.311
- lang/php72/distinfo                                           1.58

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Oct  4 03:14:53 UTC 2020

   Modified Files:
   	pkgsrc/lang/php: phpversion.mk
   	pkgsrc/lang/php72: distinfo

   Log Message:
   lang/php72: update to 7.2.34

   Update php72 package to 7.2.34.

   01 Oct 2020, PHP 7.2.34

   - Core:
     . Fixed bug #79699 (PHP parses encoded cookie names so malicious `__Host-`
       cookies can be sent). (CVE-2020-7070) (Stas)

   - OpenSSL:
     . Fixed bug #79601 (Wrong ciphertext/tag in AES-CCM encryption for a 12
       bytes IV). (CVE-2020-7069) (Jakub Zelenka)

   To generate a diff of this commit:
   cvs rdiff -u -r1.310 -r1.311 pkgsrc/lang/php/phpversion.mk
   cvs rdiff -u -r1.57 -r1.58 pkgsrc/lang/php72/distinfo


(spz)
diff -r1.308.2.2 -r1.308.2.3 pkgsrc/lang/php/phpversion.mk
diff -r1.57 -r1.57.2.1 pkgsrc/lang/php72/distinfo
cvs diff -r1.308.2.2 -r1.308.2.3 pkgsrc/lang/php/phpversion.mk (expand / switch to unified diff)

--- pkgsrc/lang/php/phpversion.mk 2020/10/21 19:23:29 1.308.2.2
+++ pkgsrc/lang/php/phpversion.mk 2020/10/21 19:28:41 1.308.2.3
@@ -1,14 +1,14 @@ @@ -1,14 +1,14 @@
1# $NetBSD: phpversion.mk,v 1.308.2.2 2020/10/21 19:23:29 spz Exp $ 1# $NetBSD: phpversion.mk,v 1.308.2.3 2020/10/21 19:28:41 spz Exp $
2# 2#
3# This file selects a PHP version, based on the user's preferences and 3# This file selects a PHP version, based on the user's preferences and
4# the installed packages. It does not add a dependency on the PHP 4# the installed packages. It does not add a dependency on the PHP
5# package. 5# package.
6# 6#
7# === User-settable variables === 7# === User-settable variables ===
8# 8#
9# PHP_VERSION_DEFAULT 9# PHP_VERSION_DEFAULT
10# The PHP version to choose when more than one is acceptable to 10# The PHP version to choose when more than one is acceptable to
11# the package. 11# the package.
12# 12#
13# Possible: 56 72 73 74 13# Possible: 56 72 73 74
14# Default: 73 14# Default: 73
@@ -78,27 +78,27 @@ @@ -78,27 +78,27 @@
78# Relative path to ${PREFIX} for PHP's extensions. It is derived from 78# Relative path to ${PREFIX} for PHP's extensions. It is derived from
79# initial release of major version. 79# initial release of major version.
80# 80#
81# Example: lib/php/20181200 81# Example: lib/php/20181200
82# 82#
83# Keywords: php 83# Keywords: php
84# 84#
85 85
86.if !defined(PHPVERSION_MK) 86.if !defined(PHPVERSION_MK)
87PHPVERSION_MK= defined 87PHPVERSION_MK= defined
88 88
89# Define each PHP's version. 89# Define each PHP's version.
90PHP56_VERSION= 5.6.40 90PHP56_VERSION= 5.6.40
91PHP72_VERSION= 7.2.33 91PHP72_VERSION= 7.2.34
92PHP73_VERSION= 7.3.23 92PHP73_VERSION= 7.3.23
93PHP74_VERSION= 7.4.11 93PHP74_VERSION= 7.4.11
94 94
95# Define initial release of major version. 95# Define initial release of major version.
96PHP56_RELDATE= 20140828 96PHP56_RELDATE= 20140828
97PHP72_RELDATE= 20170718 97PHP72_RELDATE= 20170718
98PHP73_RELDATE= 20181200 98PHP73_RELDATE= 20181200
99PHP74_RELDATE= 20191128 99PHP74_RELDATE= 20191128
100 100
101_VARGROUPS+= php 101_VARGROUPS+= php
102_USER_VARS.php= PHP_VERSION_DEFAULT 102_USER_VARS.php= PHP_VERSION_DEFAULT
103_PKG_VARS.php= PHP_VERSIONS_ACCEPTED PHP_VERSION_REQD 103_PKG_VARS.php= PHP_VERSIONS_ACCEPTED PHP_VERSION_REQD
104_SYS_VARS.php= PKG_PHP_VERSION PKG_PHP PHPPKGSRCDIR PHP_PKG_PREFIX \ 104_SYS_VARS.php= PKG_PHP_VERSION PKG_PHP PHPPKGSRCDIR PHP_PKG_PREFIX \
cvs diff -r1.57 -r1.57.2.1 pkgsrc/lang/php72/Attic/distinfo (expand / switch to unified diff)

--- pkgsrc/lang/php72/Attic/distinfo 2020/08/08 13:32:57 1.57
+++ pkgsrc/lang/php72/Attic/distinfo 2020/10/21 19:28:42 1.57.2.1
@@ -1,18 +1,18 @@ @@ -1,18 +1,18 @@
1$NetBSD: distinfo,v 1.57 2020/08/08 13:32:57 taca Exp $ 1$NetBSD: distinfo,v 1.57.2.1 2020/10/21 19:28:42 spz Exp $
2 2
3SHA1 (php-7.2.33.tar.xz) = 5297d7594af3950f395b775bbf7470c8e6f89683 3SHA1 (php-7.2.34.tar.xz) = 3dfe7bbed49e53f6ff76ca0b8c9162f78b1cc679
4RMD160 (php-7.2.33.tar.xz) = 83b1f02ef406228ef3a3d1b0371246843d84c26e 4RMD160 (php-7.2.34.tar.xz) = 52a993c201241e2dce521bad225f07330505b2cc
5SHA512 (php-7.2.33.tar.xz) = 1c28e741fc6de88a33e1307bc88ba8dddf1ba767ce6eb9c1f0da35482c7d3ee1154831b997fa746340c4b7ec8de9196b21a9b1cf319c8e69eca2c92602ceee4a 5SHA512 (php-7.2.34.tar.xz) = 7ecc3de3b5db41ec4ff6a5ce6c7e77dc330753c6f3fd87db4d07d6bb763a0b047e83afeef2251b4c6a5d2ff53fd9f3d7e99d091ef2e2c6ab8f18db7447d8a97d
6Size (php-7.2.33.tar.xz) = 12310624 bytes 6Size (php-7.2.34.tar.xz) = 12309432 bytes
7SHA1 (patch-configure) = 6e66a79e691a84aa7ae461f8dec1752443ad6b61 7SHA1 (patch-configure) = 6e66a79e691a84aa7ae461f8dec1752443ad6b61
8SHA1 (patch-disable-filter-url) = e9e92d686ddd1d1a1ece10fe4feee4e368fe510c 8SHA1 (patch-disable-filter-url) = e9e92d686ddd1d1a1ece10fe4feee4e368fe510c
9SHA1 (patch-ext_gd_config.m4) = eaecfb31b18700dd642c067ed82748d4f6be2335 9SHA1 (patch-ext_gd_config.m4) = eaecfb31b18700dd642c067ed82748d4f6be2335
10SHA1 (patch-ext_phar_Makefile.frag) = 53ea5c58b0bc27d236118d5750a74b1cba43e5dd 10SHA1 (patch-ext_phar_Makefile.frag) = 53ea5c58b0bc27d236118d5750a74b1cba43e5dd
11SHA1 (patch-ext_recode_recode.c) = 639bf762302c7a30c88d3f3fa862494e0f847bdb 11SHA1 (patch-ext_recode_recode.c) = 639bf762302c7a30c88d3f3fa862494e0f847bdb
12SHA1 (patch-ext_xsl_php__xsl.h) = a9877bff7bacc77926a4541a0ac171c00ad1a627 12SHA1 (patch-ext_xsl_php__xsl.h) = a9877bff7bacc77926a4541a0ac171c00ad1a627
13SHA1 (patch-php.ini-development) = 3b21def5e80441c9f8a97a0723a325245bd62c44 13SHA1 (patch-php.ini-development) = 3b21def5e80441c9f8a97a0723a325245bd62c44
14SHA1 (patch-php.ini-production) = 58261628364ade763e7e67f2b6226412a386afb7 14SHA1 (patch-php.ini-production) = 58261628364ade763e7e67f2b6226412a386afb7
15SHA1 (patch-sapi_cgi_Makefile.frag) = f4cd64d334884c49787d8854115c8cd69cc79bb8 15SHA1 (patch-sapi_cgi_Makefile.frag) = f4cd64d334884c49787d8854115c8cd69cc79bb8
16SHA1 (patch-sapi_cli_Makefile.frag) = 1cd29d09042863acbf5330e406410fdcf75d06b3 16SHA1 (patch-sapi_cli_Makefile.frag) = 1cd29d09042863acbf5330e406410fdcf75d06b3
17SHA1 (patch-sapi_fpm_fpm_events_port.c) = b82b7caffffde1343190fae430a68eb411b5cf8a 17SHA1 (patch-sapi_fpm_fpm_events_port.c) = b82b7caffffde1343190fae430a68eb411b5cf8a
18SHA1 (patch-sapi_fpm_php-fpm.conf.in) = acf9b4e70d4c5ea2b96e37e7bbf9005379ecc4d0 18SHA1 (patch-sapi_fpm_php-fpm.conf.in) = acf9b4e70d4c5ea2b96e37e7bbf9005379ecc4d0