From 84ad28f5a348b59e3d712b3252d4a908cc36729f Mon Sep 17 00:00:00 2001 From: bsiegert Date: Fri, 15 May 2020 16:54:48 +0000 Subject: Pullup ticket #6199 - requested by taca lang/php74: security fix Revisions pulled up: - lang/php/phpversion.mk 1.297 - lang/php74/distinfo 1.8 --- Module Name: pkgsrc Committed By: taca Date: Thu May 14 14:24:53 UTC 2020 Modified Files: pkgsrc/lang/php: phpversion.mk pkgsrc/lang/php74: distinfo Log Message: lang/php74: update to 7.4.6 Update php74 to 7.4.6 (PHP 7.4.6). 14 May 2020, PHP 7.4.6 - Core: . Fixed bug #78434 (Generator yields no items after valid() call). (Nikita) . Fixed bug #79477 (casting object into array creates references). (Nikita) . Fixed bug #79514 (Memory leaks while including unexistent file). (cmb, Nikita) . Fixed bug #79470 (PHP incompatible with 3rd party file system on demand). (cmb) . Fixed bug #78784 (Unable to interact with files inside a VFS for Git repository). (cmb) . Fixed bug #78875 (Long variables cause OOM and temp files are not cleaned). (cmb) (CVE-2019-11048) . Fixed bug #78876 (Long variables cause OOM and temp files are not cleaned). (cmb) (CVE-2019-11048) - DOM: . Fixed bug #78221 (DOMNode::normalize() doesn't remove empty text nodes). (cmb) - EXIF: . Fixed bug #79336 (ext/exif/tests/bug79046.phpt fails on Big endian arch). (Nikita) - FCGI: . Fixed bug #79491 (Search for .user.ini extends up to root dir). (cmb) - MBString: . Fixed bug #79441 (Segfault in mb_chr() if internal encoding is unsupported). (Girgias) - OpenSSL: . Fixed bug #79497 (stream_socket_client() throws an unknown error sometimes with <1s timeout). (Joe Cai) - PCRE: . Upgraded to PCRE2 10.34. (cmb) - Phar: . Fixed bug #79503 (Memory leak on duplicate metadata). (cmb) - SimpleXML: . Fixed bug #79528 (Different object of the same xml between 7.4.5 and 7.4.4). (cmb) - SPL: . Fixed bug #69264 (__debugInfo() ignored while extending SPL classes). (cmb) . Fixed bug #67369 (ArrayObject serialization drops the iterator class). (Alex Dowad) - Standard: . Fixed bug #79468 (SIGSEGV when closing stream handle with a stream filter appended). (dinosaur) . Fixed bug #79447 (Serializing uninitialized typed properties with __sleep should not throw). (nicolas-grekas) --- lang/php/phpversion.mk | 4 ++-- lang/php74/distinfo | 10 +++++----- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/lang/php/phpversion.mk b/lang/php/phpversion.mk index 5bee5e055f3..cbff8fbcf44 100644 --- a/lang/php/phpversion.mk +++ b/lang/php/phpversion.mk @@ -1,4 +1,4 @@ -# $NetBSD: phpversion.mk,v 1.292.2.4 2020/05/15 16:47:57 bsiegert Exp $ +# $NetBSD: phpversion.mk,v 1.292.2.5 2020/05/15 16:54:48 bsiegert Exp $ # # This file selects a PHP version, based on the user's preferences and # the installed packages. It does not add a dependency on the PHP @@ -90,7 +90,7 @@ PHPVERSION_MK= defined PHP56_VERSION= 5.6.40 PHP72_VERSION= 7.2.30 PHP73_VERSION= 7.3.18 -PHP74_VERSION= 7.4.5 +PHP74_VERSION= 7.4.6 # Define initial release of major version. PHP56_RELDATE= 20140828 diff --git a/lang/php74/distinfo b/lang/php74/distinfo index eb540aa7b73..b10ddf50ec2 100644 --- a/lang/php74/distinfo +++ b/lang/php74/distinfo @@ -1,9 +1,9 @@ -$NetBSD: distinfo,v 1.6.2.1 2020/04/30 07:35:30 bsiegert Exp $ +$NetBSD: distinfo,v 1.6.2.2 2020/05/15 16:54:48 bsiegert Exp $ -SHA1 (php-7.4.5.tar.xz) = 9d5540a3e2a686884e15a106da423f557740f50f -RMD160 (php-7.4.5.tar.xz) = 8d35d99da28f4685be664a2893b7583660ee7084 -SHA512 (php-7.4.5.tar.xz) = c40070a91d5cab44df9b33d7259dcfb9824efb305a659d075b68695b3c5cebb915f43ce3edc45c9ee8b17a5c558e154842a1a63ac594438ce7adce48c58430fe -Size (php-7.4.5.tar.xz) = 10271296 bytes +SHA1 (php-7.4.6.tar.xz) = 3bde846e02311b1d057f759a334f6a024047b88e +RMD160 (php-7.4.6.tar.xz) = dfb14a38a124dbeb74b5f37ffd653df3802fd704 +SHA512 (php-7.4.6.tar.xz) = 786634d53ed100cc7638e64ca340efdd42405c258638f3f97fcd1816d4f0c643dc8d8b2b0f60d36904343dc8c2af7f9b8e4a652ea66ec2fe324290c72bc09c13 +Size (php-7.4.6.tar.xz) = 10284824 bytes SHA1 (patch-configure) = 5e9c9c06f6d819d5ba2832d648f41363f40f3108 SHA1 (patch-disable-filter-url) = 0a2c19c18f089448a8d842e99738b292ab9e5640 SHA1 (patch-ext_phar_Makefile.frag) = 53ea5c58b0bc27d236118d5750a74b1cba43e5dd -- cgit v1.2.3