[pkgsrc/pkgsrc-2021Q3]: pkgsrc/lang Pullup ticket #6526 - requested by taca

[tm <tm%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/3633ae76cb6a
branches:  pkgsrc-2021Q3
changeset: 768877:3633ae76cb6a
user:      tm <tm%pkgsrc.org@localhost>
date:      Tue Nov 02 18:28:45 2021 +0000

description:
Pullup ticket #6526 - requested by taca
lang/php80: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.342
- lang/php80/distinfo                                           1.11

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Fri Oct 22 15:09:52 UTC 2021

   Modified Files:
        pkgsrc/lang/php: phpversion.mk
        pkgsrc/lang/php80: distinfo

   Log Message:
   lang/php80: update to 8.0.12

   This is a security fix release.

   21 Oct 2021, PHP 8.0.12

   - CLI:
     . Fixed bug #81496 (Server logs incorrect request method). (lauri)

   - Core:
     . Fixed bug #81435 (Observer current_observed_frame may point to an old
       (overwritten) frame). (Bob)
     . Fixed bug #81380 (Observer may not be initialized properly). (krakjoe)

   - DOM:
     . Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
       (Viktor Volkov)

   - FFI:
     . Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not
       defined). (Dmitry)

   - FPM:
     . Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege
       escalation) (CVE-2021-21703). (Jakub Zelenka)

   - Fileinfo:
     . Fixed bug #78987 (High memory usage during encoding detection). (Anatol)

   - Filter:
     . Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
       (cmb, Nikita)

   - Opcache:
     . Fixed bug #81472 (Cannot support large linux major/minor device number when
       read /proc/self/maps). (Lin Yang)

   - Reflection:
     . ReflectionAttribute is no longer final. (sasezaki)

   - SPL:
     . Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
       (cmb, Nikita, Tyson Andre)
     . Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1). (cmb)

   - Standard:
     . Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo
       position specifier). (Aliaksandr Bystry)

   - Streams:
     . Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
       (cmb)

   - XML:
     . Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
       (Aliaksandr Bystry, cmb)

   - Zip:
     . Fixed bug #81490 (ZipArchive::extractTo() may leak memory). (cmb, Remi)
     . Fixed bug #77978 (Dirname ending in colon unzips to wrong dir). (cmb)

diffstat:

 lang/php/phpversion.mk |   4 ++--
 lang/php80/distinfo    |  10 +++++-----
 2 files changed, 7 insertions(+), 7 deletions(-)

diffs (36 lines):

diff -r 38ef054af26b -r 3633ae76cb6a lang/php/phpversion.mk
--- a/lang/php/phpversion.mk    Tue Nov 02 18:20:51 2021 +0000
+++ b/lang/php/phpversion.mk    Tue Nov 02 18:28:45 2021 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: phpversion.mk,v 1.341.2.2 2021/11/02 18:20:51 tm Exp $
+# $NetBSD: phpversion.mk,v 1.341.2.3 2021/11/02 18:28:45 tm Exp $
 #
 # This file selects a PHP version, based on the user's preferences and
 # the installed packages. It does not add a dependency on the PHP
@@ -90,7 +90,7 @@
 PHP56_VERSION= 5.6.40
 PHP73_VERSION= 7.3.32
 PHP74_VERSION= 7.4.25
-PHP80_VERSION= 8.0.11
+PHP80_VERSION= 8.0.12
 
 # Define initial release of major version.
 PHP56_RELDATE= 20140828
diff -r 38ef054af26b -r 3633ae76cb6a lang/php80/distinfo
--- a/lang/php80/distinfo       Tue Nov 02 18:20:51 2021 +0000
+++ b/lang/php80/distinfo       Tue Nov 02 18:28:45 2021 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.8 2021/09/23 15:48:37 taca Exp $
+$NetBSD: distinfo,v 1.8.2.1 2021/11/02 18:28:45 tm Exp $
 
-SHA1 (php-8.0.11.tar.xz) = a69e003e68abe2a511fa7632f1cfa017f32be34d
-RMD160 (php-8.0.11.tar.xz) = 291d6e4d7e331bb43f570ef053b4fb484ff40c3c
-SHA512 (php-8.0.11.tar.xz) = 2d346959b2691ea0d5334dc9cad225b7a65ec53d6a6493f3b95c4819a0c088bec36aa1bf4ab3c8044a631bcfefb689d85463ff2259d42000e65dac30badcc59d
-Size (php-8.0.11.tar.xz) = 10804388 bytes
+SHA1 (php-8.0.12.tar.xz) = 1c762150f4fbf60885752572eab0abb15208349a
+RMD160 (php-8.0.12.tar.xz) = 098d8c323e93a37ae6c110c809dbe91e0d059acd
+SHA512 (php-8.0.12.tar.xz) = 927b15c4443f3741a5325ec7bf387987b405cd5e64e40fd81f1945bf073adda30eeede8e1f98185f505cb61f969cf1abe05b8dad57a3c4e87971e8037bb16b23
+Size (php-8.0.12.tar.xz) = 10713980 bytes
 SHA1 (patch-build_libtool.m4) = e58a2bcebe9e9d7dc7255354fd9fe57878e3f8a6
 SHA1 (patch-configure) = 6c3d2537eb4d1c2ed05e8e1e411701d316c67d8b
 SHA1 (patch-disable-filter-url) = 0a2c19c18f089448a8d842e99738b292ab9e5640