CVS commit: [pkgsrc-2021Q2] pkgsrc/lang

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Sun Jul  4 19:31:01 UTC 2021

Modified Files:
        pkgsrc/lang/php [pkgsrc-2021Q2]: phpversion.mk
        pkgsrc/lang/php80 [pkgsrc-2021Q2]: distinfo

Log Message:
Pullup ticket #6479 - requested by taca
lang/php80: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.332
- lang/php80/distinfo                                           1.5

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Fri Jul  2 17:30:35 UTC 2021

   Modified Files:
        pkgsrc/lang/php: phpversion.mk
        pkgsrc/lang/php80: distinfo

   Log Message:
   lang/php80: update to 8.0.8

   01 Jul 2021, PHP 8.0.8

   - Core:
     . Fixed bug #81076 (incorrect debug info on Closures with implicit bi=
   nds).
       (krakjoe)
     . Fixed bug #81068 (Double free in realpath_cache_clean()). (Dimitry =
   Andric)
     . Fixed bug #76359 (open_basedir bypass through adding ".."). (cmb)
     . Fixed bug #81090 (Typed property performance degradation with .=3D =
   operator).
       (Nikita)
     . Fixed bug #81070 (Integer underflow in memory limit comparison).
       (Peter van Dommelen)
     . Fixed bug #81122 (SSRF bypass in FILTER_VALIDATE_URL).
       (CVE-2021-21705) (cmb)

   - Bzip2:
     . Fixed bug #81092 (fflush before stream_filter_remove corrupts strea=
   m).
       (cmb)

   - Fileinfo:
     . Fixed bug #80197 (implicit declaration of function 'magic_stream' i=
   s
       invalid). (Nikita)

   - GMP:
     . Fixed bug #81119 (GMP operators throw errors with wrong parameter n=
   ames).
       (Nikita)

   - OCI8:
     . Fixed bug #81088 (error in regression test for oci_fetch_object() a=
   nd
       oci_fetch_array()). (M=E1t=E9)

   - Opcache:
     . Fixed bug #81051 (Broken property type handling after incrementing
       reference). (Dmitry)
     . Fixed bug #80968 (JIT segfault with return from required file). (Dm=
   itry)

   - OpenSSL:
     . Fixed bug #76694 (native Windows cert verification uses CN as sever=
    name).
       (cmb)

   - MySQLnd:
     . Fixed bug #80761 (PDO uses too much memory). (Nikita)

   - PDO_Firebird:
      . Fixed bug #76448 (Stack buffer overflow in firebird_info_cb).
       (CVE-2021-21704) (cmb)
      . Fixed bug #76449 (SIGSEGV in firebird_handle_doer).
       (CVE-2021-21704) (cmb)
      . Fixed bug #76450 (SIGSEGV in firebird_stmt_execute).
       (CVE-2021-21704) (cmb)
      . Fixed bug #76452 (Crash while parsing blob data in firebird_fetch_=
   blob).
       (CVE-2021-21704) (cmb)

   - readline:
     . Fixed bug #72998 (invalid read in readline completion). (krakjoe)

   - Standard:
     . Fixed bug #81048 (phpinfo(INFO_VARIABLES) "Array to string conversi=
   on").
       (cmb)
     . Fixed bug #77627 (method_exists on Closure::__invoke inconsistency)=
   .=

       (krakjoe)

   - Windows:
     . Fixed bug #81120 (PGO data for main PHP DLL are not used). (cmb)


To generate a diff of this commit:
cvs rdiff -u -r1.330.2.1 -r1.330.2.2 pkgsrc/lang/php/phpversion.mk
cvs rdiff -u -r1.4 -r1.4.2.1 pkgsrc/lang/php80/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/php/phpversion.mk
diff -u pkgsrc/lang/php/phpversion.mk:1.330.2.1 pkgsrc/lang/php/phpversion.mk:1.330.2.2
--- pkgsrc/lang/php/phpversion.mk:1.330.2.1     Sun Jul  4 19:16:05 2021
+++ pkgsrc/lang/php/phpversion.mk       Sun Jul  4 19:31:01 2021
@@ -1,4 +1,4 @@
-# $NetBSD: phpversion.mk,v 1.330.2.1 2021/07/04 19:16:05 bsiegert Exp $
+# $NetBSD: phpversion.mk,v 1.330.2.2 2021/07/04 19:31:01 bsiegert Exp $
 #
 # This file selects a PHP version, based on the user's preferences and
 # the installed packages. It does not add a dependency on the PHP
@@ -90,7 +90,7 @@ PHPVERSION_MK=        defined
 PHP56_VERSION= 5.6.40
 PHP73_VERSION= 7.3.28
 PHP74_VERSION= 7.4.21
-PHP80_VERSION= 8.0.7
+PHP80_VERSION= 8.0.8
 
 # Define initial release of major version.
 PHP56_RELDATE= 20140828

Index: pkgsrc/lang/php80/distinfo
diff -u pkgsrc/lang/php80/distinfo:1.4 pkgsrc/lang/php80/distinfo:1.4.2.1
--- pkgsrc/lang/php80/distinfo:1.4      Fri Jun  4 13:56:31 2021
+++ pkgsrc/lang/php80/distinfo  Sun Jul  4 19:31:01 2021
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.4 2021/06/04 13:56:31 taca Exp $
+$NetBSD: distinfo,v 1.4.2.1 2021/07/04 19:31:01 bsiegert Exp $
 
-SHA1 (php-8.0.7.tar.xz) = 1c1af07d790a85103863e9818def633c737010e2
-RMD160 (php-8.0.7.tar.xz) = 577fe1acbfacf21cec91d42474d2b581dff356b8
-SHA512 (php-8.0.7.tar.xz) = 54d0355977a69c3c466054e9e277147874eaab192bc384a199eb98582f9fcccebc685b370dabeb65d2de3bad4d2e4b2490c0164d2ce406af76b0e972ea67bbd0
-Size (php-8.0.7.tar.xz) = 10769208 bytes
+SHA1 (php-8.0.8.tar.xz) = a3799800e0f25474ce4125789afccba5c2877e0e
+RMD160 (php-8.0.8.tar.xz) = fd0571822e3bc50b43c51ac98585108e679e208b
+SHA512 (php-8.0.8.tar.xz) = 1f8b94083b64705e24365af57169f8ff08115f31a7471238d9ed7a24b692e46c789f3fc00ff2bef2205243b9cd9c4736831e995a004afc7fc4127f3b74932428
+Size (php-8.0.8.tar.xz) = 10674548 bytes
 SHA1 (patch-build_libtool.m4) = e58a2bcebe9e9d7dc7255354fd9fe57878e3f8a6
 SHA1 (patch-configure) = 6c3d2537eb4d1c2ed05e8e1e411701d316c67d8b
 SHA1 (patch-disable-filter-url) = 0a2c19c18f089448a8d842e99738b292ab9e5640