[pkgsrc/pkgsrc-2021Q3]: pkgsrc/lang Pullup ticket #6527 - requested by taca

[tm <tm%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/38ef054af26b
branches:  pkgsrc-2021Q3
changeset: 768876:38ef054af26b
user:      tm <tm%pkgsrc.org@localhost>
date:      Tue Nov 02 18:20:51 2021 +0000

description:
Pullup ticket #6527 - requested by taca
lang/php74: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.343
- lang/php74/distinfo                                           1.31

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Fri Oct 22 15:14:24 UTC 2021

   Modified Files:
        pkgsrc/lang/php: phpversion.mk
        pkgsrc/lang/php74: distinfo

   Log Message:
   lang/php74: update to 7.4.25

   This is a security fix release.

   21 Oct 2021, PHP 7.4.25

   - DOM:
     . Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
       (Viktor Volkov)

   - FFI:
     . Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not
       defined). (Dmitry)

   - Fileinfo:
     . Fixed bug #78987 (High memory usage during encoding detection). (Anatol)

   - Filter:
     . Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
       (cmb, Nikita)

   - FPM:
     . Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege
       escalation) (CVE-2021-21703). (Jakub Zelenka)

   - SPL:
     . Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
       (cmb, Nikita, Tyson Andre)

   - Streams:
     . Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
       (cmb)

   - XML:
     . Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
       (Aliaksandr Bystry, cmb)

   - Zip:
     . Fixed bug #81490 (ZipArchive::extractTo() may leak memory). (cmb, Remi)
     . Fixed bug #77978 (Dirname ending in colon unzips to wrong dir). (cmb)

diffstat:

 lang/php/phpversion.mk |   4 ++--
 lang/php74/distinfo    |  10 +++++-----
 2 files changed, 7 insertions(+), 7 deletions(-)

diffs (36 lines):

diff -r 4d4cd0ce4618 -r 38ef054af26b lang/php/phpversion.mk
--- a/lang/php/phpversion.mk    Mon Nov 01 22:24:56 2021 +0000
+++ b/lang/php/phpversion.mk    Tue Nov 02 18:20:51 2021 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: phpversion.mk,v 1.341.2.1 2021/11/01 22:06:32 tm Exp $
+# $NetBSD: phpversion.mk,v 1.341.2.2 2021/11/02 18:20:51 tm Exp $
 #
 # This file selects a PHP version, based on the user's preferences and
 # the installed packages. It does not add a dependency on the PHP
@@ -89,7 +89,7 @@
 # Define each PHP's version.
 PHP56_VERSION= 5.6.40
 PHP73_VERSION= 7.3.32
-PHP74_VERSION= 7.4.24
+PHP74_VERSION= 7.4.25
 PHP80_VERSION= 8.0.11
 
 # Define initial release of major version.
diff -r 4d4cd0ce4618 -r 38ef054af26b lang/php74/distinfo
--- a/lang/php74/distinfo       Mon Nov 01 22:24:56 2021 +0000
+++ b/lang/php74/distinfo       Tue Nov 02 18:20:51 2021 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.28 2021/09/24 02:27:04 taca Exp $
+$NetBSD: distinfo,v 1.28.2.1 2021/11/02 18:20:51 tm Exp $
 
-SHA1 (php-7.4.24.tar.xz) = 34660781db70c891dcaab046931d38f60464d7e3
-RMD160 (php-7.4.24.tar.xz) = 67a0c7ca2067311ee363e685fc89aba1980b0778
-SHA512 (php-7.4.24.tar.xz) = 30dd0a83d6184791f4cff3edcffeb05470de8f98ddadba3c11544449bf500280ff2048a8ca8588b35d0622dcbbf16f55ea297f51d469ae137048cab2d40da9cd
-Size (php-7.4.24.tar.xz) = 10372816 bytes
+SHA1 (php-7.4.25.tar.xz) = c873eabab28db07412a198ccc3482af6fbc6ab92
+RMD160 (php-7.4.25.tar.xz) = 53d6d40db7e78d98ea037e08780d68e81675bbe4
+SHA512 (php-7.4.25.tar.xz) = 7fcb236f6d2a92514059b2e107c2b592e6139e3c65046566ae98fb9d2c09eb3e9ca1a41ea6535fc814bc7127d8fd9f8bb5a80bd86eec32120eb150a34b9b5c34
+Size (php-7.4.25.tar.xz) = 10376304 bytes
 SHA1 (patch-build_libtool.m4) = 3656eb516fb14defd4b0964fe21e117c630be856
 SHA1 (patch-configure) = 5e9c9c06f6d819d5ba2832d648f41363f40f3108
 SHA1 (patch-disable-filter-url) = 0a2c19c18f089448a8d842e99738b292ab9e5640