From ec5c675d68aaf4e4d8d8b7953645b77be2620c3c Mon Sep 17 00:00:00 2001 From: tm Date: Tue, 2 Nov 2021 18:20:51 +0000 Subject: Pullup ticket #6527 - requested by taca lang/php74: security fix Revisions pulled up: - lang/php/phpversion.mk 1.343 - lang/php74/distinfo 1.31 --- Module Name: pkgsrc Committed By: taca Date: Fri Oct 22 15:14:24 UTC 2021 Modified Files: pkgsrc/lang/php: phpversion.mk pkgsrc/lang/php74: distinfo Log Message: lang/php74: update to 7.4.25 This is a security fix release. 21 Oct 2021, PHP 7.4.25 - DOM: . Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID). (Viktor Volkov) - FFI: . Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined). (Dmitry) - Fileinfo: . Fixed bug #78987 (High memory usage during encoding detection). (Anatol) - Filter: . Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing). (cmb, Nikita) - FPM: . Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703). (Jakub Zelenka) - SPL: . Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free). (cmb, Nikita, Tyson Andre) - Streams: . Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper). (cmb) - XML: . Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace). (Aliaksandr Bystry, cmb) - Zip: . Fixed bug #81490 (ZipArchive::extractTo() may leak memory). (cmb, Remi) . Fixed bug #77978 (Dirname ending in colon unzips to wrong dir). (cmb) --- lang/php/phpversion.mk | 4 ++-- lang/php74/distinfo | 10 +++++----- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/lang/php/phpversion.mk b/lang/php/phpversion.mk index adf22032c0c..baa3961e61b 100644 --- a/lang/php/phpversion.mk +++ b/lang/php/phpversion.mk @@ -1,4 +1,4 @@ -# $NetBSD: phpversion.mk,v 1.341.2.1 2021/11/01 22:06:32 tm Exp $ +# $NetBSD: phpversion.mk,v 1.341.2.2 2021/11/02 18:20:51 tm Exp $ # # This file selects a PHP version, based on the user's preferences and # the installed packages. It does not add a dependency on the PHP @@ -89,7 +89,7 @@ PHPVERSION_MK= defined # Define each PHP's version. PHP56_VERSION= 5.6.40 PHP73_VERSION= 7.3.32 -PHP74_VERSION= 7.4.24 +PHP74_VERSION= 7.4.25 PHP80_VERSION= 8.0.11 # Define initial release of major version. diff --git a/lang/php74/distinfo b/lang/php74/distinfo index 15abac34daf..e02f575e9f9 100644 --- a/lang/php74/distinfo +++ b/lang/php74/distinfo @@ -1,9 +1,9 @@ -$NetBSD: distinfo,v 1.28 2021/09/24 02:27:04 taca Exp $ +$NetBSD: distinfo,v 1.28.2.1 2021/11/02 18:20:51 tm Exp $ -SHA1 (php-7.4.24.tar.xz) = 34660781db70c891dcaab046931d38f60464d7e3 -RMD160 (php-7.4.24.tar.xz) = 67a0c7ca2067311ee363e685fc89aba1980b0778 -SHA512 (php-7.4.24.tar.xz) = 30dd0a83d6184791f4cff3edcffeb05470de8f98ddadba3c11544449bf500280ff2048a8ca8588b35d0622dcbbf16f55ea297f51d469ae137048cab2d40da9cd -Size (php-7.4.24.tar.xz) = 10372816 bytes +SHA1 (php-7.4.25.tar.xz) = c873eabab28db07412a198ccc3482af6fbc6ab92 +RMD160 (php-7.4.25.tar.xz) = 53d6d40db7e78d98ea037e08780d68e81675bbe4 +SHA512 (php-7.4.25.tar.xz) = 7fcb236f6d2a92514059b2e107c2b592e6139e3c65046566ae98fb9d2c09eb3e9ca1a41ea6535fc814bc7127d8fd9f8bb5a80bd86eec32120eb150a34b9b5c34 +Size (php-7.4.25.tar.xz) = 10376304 bytes SHA1 (patch-build_libtool.m4) = 3656eb516fb14defd4b0964fe21e117c630be856 SHA1 (patch-configure) = 5e9c9c06f6d819d5ba2832d648f41363f40f3108 SHA1 (patch-disable-filter-url) = 0a2c19c18f089448a8d842e99738b292ab9e5640 -- cgit v1.2.3