CVS commit: [pkgsrc-2021Q2] pkgsrc/lang

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Sun Jul  4 19:16:05 UTC 2021

Modified Files:
        pkgsrc/lang/php [pkgsrc-2021Q2]: phpversion.mk
        pkgsrc/lang/php74 [pkgsrc-2021Q2]: distinfo

Log Message:
Pullup ticket #6478 - requested by taca
lang/php74: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.331
- lang/php74/distinfo                                           1.25

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Fri Jul  2 17:28:28 UTC 2021

   Modified Files:
        pkgsrc/lang/php: phpversion.mk
        pkgsrc/lang/php74: distinfo

   Log Message:
   lang/php74: update to 7.4.21

   01 Jul 2021, PHP 7.4.21

   - Core:
     . Fixed bug #81068 (Double free in realpath_cache_clean()). (Dimitry Andric)
     . Fixed bug #76359 (open_basedir bypass through adding ".."). (cmb)
     . Fixed bug #81090 (Typed property performance degradation with .= operator).
       (Nikita)
     . Fixed bug #81070 (Integer underflow in memory limit comparison).
       (Peter van Dommelen)
     . Fixed bug #81122 (SSRF bypass in FILTER_VALIDATE_URL).
       (CVE-2021-21705) (cmb)

   - Bzip2:
     . Fixed bug #81092 (fflush before stream_filter_remove corrupts stream).
       (cmb)

   - OpenSSL:
     . Fixed bug #76694 (native Windows cert verification uses CN as sever name).
       (cmb)

   - PDO_Firebird:
     . Fixed bug #76448 (Stack buffer overflow in firebird_info_cb).
       (CVE-2021-21704) (cmb)
     . Fixed bug #76449 (SIGSEGV in firebird_handle_doer).
       (CVE-2021-21704) (cmb)
     . Fixed bug #76450 (SIGSEGV in firebird_stmt_execute).
       (CVE-2021-21704) (cmb)
     . Fixed bug #76452 (Crash while parsing blob data in firebird_fetch_blob).
       (CVE-2021-21704) (cmb)

   - Standard:
     . Fixed bug #81048 (phpinfo(INFO_VARIABLES) "Array to string conversion").
       (cmb)


To generate a diff of this commit:
cvs rdiff -u -r1.330 -r1.330.2.1 pkgsrc/lang/php/phpversion.mk
cvs rdiff -u -r1.24 -r1.24.2.1 pkgsrc/lang/php74/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/php/phpversion.mk
diff -u pkgsrc/lang/php/phpversion.mk:1.330 pkgsrc/lang/php/phpversion.mk:1.330.2.1
--- pkgsrc/lang/php/phpversion.mk:1.330 Fri Jun  4 13:56:31 2021
+++ pkgsrc/lang/php/phpversion.mk       Sun Jul  4 19:16:05 2021
@@ -1,4 +1,4 @@
-# $NetBSD: phpversion.mk,v 1.330 2021/06/04 13:56:31 taca Exp $
+# $NetBSD: phpversion.mk,v 1.330.2.1 2021/07/04 19:16:05 bsiegert Exp $
 #
 # This file selects a PHP version, based on the user's preferences and
 # the installed packages. It does not add a dependency on the PHP
@@ -89,7 +89,7 @@ PHPVERSION_MK=        defined
 # Define each PHP's version.
 PHP56_VERSION= 5.6.40
 PHP73_VERSION= 7.3.28
-PHP74_VERSION= 7.4.20
+PHP74_VERSION= 7.4.21
 PHP80_VERSION= 8.0.7
 
 # Define initial release of major version.

Index: pkgsrc/lang/php74/distinfo
diff -u pkgsrc/lang/php74/distinfo:1.24 pkgsrc/lang/php74/distinfo:1.24.2.1
--- pkgsrc/lang/php74/distinfo:1.24     Thu Jun  3 15:28:49 2021
+++ pkgsrc/lang/php74/distinfo  Sun Jul  4 19:16:05 2021
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.24 2021/06/03 15:28:49 taca Exp $
+$NetBSD: distinfo,v 1.24.2.1 2021/07/04 19:16:05 bsiegert Exp $
 
-SHA1 (php-7.4.20.tar.xz) = 31de425ccea91f93758389b867348c50c683f408
-RMD160 (php-7.4.20.tar.xz) = c58038b61d4b2b071c5c86cc660856740ad22707
-SHA512 (php-7.4.20.tar.xz) = 40261c5a85341fa7c495db86ef3526d1ae2751c6abb05251819c2b7080050715eb44a19c3f8655d101f4308209487ce16dcf94067b71b084c912470796b217f7
-Size (php-7.4.20.tar.xz) = 10345912 bytes
+SHA1 (php-7.4.21.tar.xz) = be6c96bee79e227d50440f80c1342f8badf2aa60
+RMD160 (php-7.4.21.tar.xz) = 175c38c9540e3cb9a22dd3170f1b4d824de6beb0
+SHA512 (php-7.4.21.tar.xz) = 778ddbfe614fdc6a00bc82c61f4c636bdbe815ce3398415a29bd24a2fd4ca2113b3b804303585d8830242e04b0c202bbc7c725a46c9bad79b070a0e896e5e681
+Size (php-7.4.21.tar.xz) = 10346628 bytes
 SHA1 (patch-build_libtool.m4) = 3656eb516fb14defd4b0964fe21e117c630be856
 SHA1 (patch-configure) = 5e9c9c06f6d819d5ba2832d648f41363f40f3108
 SHA1 (patch-disable-filter-url) = 0a2c19c18f089448a8d842e99738b292ab9e5640