Pullup ticket #6592 - requested by taca

lang/php81: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.355,1.358
- lang/php81/distinfo                                           1.3-1.4

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Mon Jan 24 14:13:36 UTC 2022

   Modified Files:
   	pkgsrc/lang/php: phpversion.mk
   	pkgsrc/lang/php81: distinfo

   Log Message:
   lang/php81: update to 8.1.2

   20 Jan 2022, PHP 8.1.2

   - Core:
     . Fixed bug #81216 (Nullsafe operator leaks dynamic property name). (Dmitry)
     . Fixed bug #81684 (Using null coalesce assignment with $GLOBALS["x"] produces
       opcode error). (ilutov)
     . Fixed bug #81656 (GCC-11 silently ignores -R). (Michael Wallner)
     . Fixed bug #81683 (Misleading "access type ... must be public" error message
       on final or abstract interface methods). (ilutov)
     . Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
       (cmb)
     . Fixed bug GH-7757 (Multi-inherited final constant causes fatal error).
       (cmb)
     . Fixed zend_fibers.c build with ZEND_FIBER_UCONTEXT. (Petr Sumbera)
     . Added riscv64 support for fibers. (Jeremie Courreges-Anglas)

   - Filter:
     . Fixed FILTER_FLAG_NO_RES_RANGE flag. (Yifan Tong)

   - Hash:
     . Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
       (cmb)
     . Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and
       hash_file). (cmb)

   - MBString:
     . Fixed bug #81693 (mb_check_encoding(7bit) segfaults). (cmb)

   - MySQLi:
     . Fixed bug #81658 (MYSQL_OPT_LOAD_DATA_LOCAL_DIR not available in MariaDB).
       (devnexen)
     . Introduced MYSQLI_IS_MARIADB. (devnexen)
     . Fixed bug GH-7746 (mysqli_sql_exception->getSqlState()). (Kamil Tekiela)

   - MySQLnd:
     . Fixed bug where large bigints may be truncated. (Nathan Freeman, cmb)

   - OCI8:
     . Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second
       call). (cmb)

   - OPcache:
     . Fixed bug #81679 (Tracing JIT crashes on reattaching). (cmb)

   - Readline:
     . Fixed bug #81598 (Cannot input unicode characters in PHP 8 interactive
       shell). (Nikita)

   - Reflection:
     . Fixed bug #81681 (ReflectionEnum throwing exceptions). (cmb)

   - PDO_PGSQL:
     . Fixed error message allocation of PDO PgSQL. (SATO Kentaro)

   - Sockets:
     . Avoid void* arithmetic in sockets/multicast.c on NetBSD. (David Carlier)
     . Fixed ext/sockets build on Haiku. (David Carlier)

   - Spl:
     . Fixed bug #75917 (SplFileObject::seek broken with CSV flags). (Aliaksandr
       Bystry)
     . Fixed bug GH-7809 (Cloning a faked SplFileInfo object may segfault). (cmb)

   - Standard:
     . Fixed bug GH-7748 (gethostbyaddr outputs binary string). (cmb)
     . Fixed bug GH-7815 (php_uname doesn't recognise latest Windows versions).
       (David Warner)

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Feb 20 13:10:37 UTC 2022

   Modified Files:
   	pkgsrc/lang/php: phpversion.mk
   	pkgsrc/lang/php81: distinfo

   Log Message:
   lang/php81: update to 8.1.3

   17 Feb 2022, PHP 8.1.3

   - Core:
     . Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
       (beberlei)
     . Fixed bug GH-7896 (Environment vars may be mangled on Windows). (cmb)
     . Fixed bug GH-7883 (Segfault when INI file is not readable). (Remi)

   - Filter:
     . Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708) (cmb)

   - FFI:
     . Fixed bug GH-7867 (FFI::cast() from pointer to array is broken). (cmb,
       dmitry)

   - FPM:
     . Fixed memory leak on invalid port. (David Carlier)
     . Fixed bug GH-7842 (Invalid OpenMetrics response format returned by FPM
       status page. (Stefano Arlandini)

   - MBString:
     . Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only). (cmb)

   - MySQLnd:
     . Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped). (Kamil Tekiela)

   - pcntl:
     . Fixed pcntl_rfork build for DragonFlyBSD. (David Carlier)

   - Sockets:
     . Fixed bug GH-7978 (sockets extension compilation errors). (David Carlier)

   - Standard:
     . Fixed bug GH-7899 (Regression in unpack for negative int value). (Remi)
     . Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
       (cmb)

2 files changed, 6 insertions, 6 deletions

diff --git a/lang/php/phpversion.mk b/lang/php/phpversion.mk
index 251c4ba4455..19039ba73d4 100644
--- a/lang/php/phpversion.mk
+++ b/lang/php/phpversion.mk
@@ -1,4 +1,4 @@
-# $NetBSD: phpversion.mk,v 1.352.2.1 2022/03/03 19:19:49 bsiegert Exp $
+# $NetBSD: phpversion.mk,v 1.352.2.2 2022/03/03 19:23:19 bsiegert Exp $
 #
 # This file selects a PHP version, based on the user's preferences and
 # the installed packages. It does not add a dependency on the PHP
@@ -91,7 +91,7 @@ PHP56_VERSION=	5.6.40
 PHP73_VERSION=	7.3.33
 PHP74_VERSION=	7.4.27
 PHP80_VERSION=	8.0.16
-PHP81_VERSION=	8.1.1
+PHP81_VERSION=	8.1.2
 
 # Define initial release of major version.
 PHP56_RELDATE=	20140828
diff --git a/lang/php81/distinfo b/lang/php81/distinfo
index 5e537ef8302..1dc9dad7741 100644
--- a/lang/php81/distinfo
+++ b/lang/php81/distinfo
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.2 2021/12/19 05:04:48 taca Exp $
+$NetBSD: distinfo,v 1.2.2.1 2022/03/03 19:23:19 bsiegert Exp $
 
-BLAKE2s (php-8.1.1.tar.xz) = fded6f10e670abb6c6d286e4ad8e8152ae61363c02f26c356a56272fa530ef39
-SHA512 (php-8.1.1.tar.xz) = ab1cca08eb49fc2316f19d9e136a2d6462fe5b33967ecb671564dd9def2a765cc1b864a764c9cfbb8e7853936fb2d4939e7ed4f97220ca30eaf08c3badeb44da
-Size (php-8.1.1.tar.xz) = 11728680 bytes
+BLAKE2s (php-8.1.2.tar.xz) = 54bbd5bcd9c9e7cb32c3cec8fd4c7daa2cf6979b62489a7265a8abb8bb4f4a97
+SHA512 (php-8.1.2.tar.xz) = ec68587fc14d4e5aaa19d4a189c74b85e67b8ab4d5a15ef36115b564fc9e2f2b63bd608ea8c0e4a99615a24f38711b233f4e65b3672c3bfb69e1ab9d554a88cd
+Size (php-8.1.2.tar.xz) = 11681132 bytes
 SHA1 (patch-build_libtool.m4) = e58a2bcebe9e9d7dc7255354fd9fe57878e3f8a6
 SHA1 (patch-configure) = e91e22267a9b7ebcc16a586ba6f325c772adb13c
 SHA1 (patch-disable-filter-url) = 0a2c19c18f089448a8d842e99738b292ab9e5640