CVS commit: [pkgsrc-2021Q2] pkgsrc/lang

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Sun Jul  4 19:34:53 UTC 2021

Modified Files:
        pkgsrc/lang/php [pkgsrc-2021Q2]: phpversion.mk
        pkgsrc/lang/php73 [pkgsrc-2021Q2]: distinfo

Log Message:
Pullup ticket #6480 - requested by taca
lang/php73: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.333
- lang/php73/distinfo                                           1.34

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Fri Jul  2 17:32:06 UTC 2021

   Modified Files:
        pkgsrc/lang/php: phpversion.mk
        pkgsrc/lang/php73: distinfo

   Log Message:
   lang/php73: update to 7.3.29

   01 Jul 2021, PHP 7.3.29

   - Core:
     . Fixed bug #81122: SSRF bypass in FILTER_VALIDATE_URL. (CVE-2021-21705) (cmb)

   - PDO_Firebird:
     . Fixed bug #76448: Stack buffer overflow in firebird_info_cb.
       (CVE-2021-21704) (cmb)
     . Fixed bug #76449: SIGSEGV in firebird_handle_doer. (CVE-2021-21704) (cmb)
     . Fixed bug #76450: SIGSEGV in firebird_stmt_execute. (CVE-2021-21704) (cmb)
     . Fixed bug #76452: Crash while parsing blob data in firebird_fetch_blob.
       (CVE-2021-21704) (cmb)


To generate a diff of this commit:
cvs rdiff -u -r1.330.2.2 -r1.330.2.3 pkgsrc/lang/php/phpversion.mk
cvs rdiff -u -r1.33 -r1.33.2.1 pkgsrc/lang/php73/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/php/phpversion.mk
diff -u pkgsrc/lang/php/phpversion.mk:1.330.2.2 pkgsrc/lang/php/phpversion.mk:1.330.2.3
--- pkgsrc/lang/php/phpversion.mk:1.330.2.2     Sun Jul  4 19:31:01 2021
+++ pkgsrc/lang/php/phpversion.mk       Sun Jul  4 19:34:52 2021
@@ -1,4 +1,4 @@
-# $NetBSD: phpversion.mk,v 1.330.2.2 2021/07/04 19:31:01 bsiegert Exp $
+# $NetBSD: phpversion.mk,v 1.330.2.3 2021/07/04 19:34:52 bsiegert Exp $
 #
 # This file selects a PHP version, based on the user's preferences and
 # the installed packages. It does not add a dependency on the PHP
@@ -88,7 +88,7 @@ PHPVERSION_MK=        defined
 
 # Define each PHP's version.
 PHP56_VERSION= 5.6.40
-PHP73_VERSION= 7.3.28
+PHP73_VERSION= 7.3.29
 PHP74_VERSION= 7.4.21
 PHP80_VERSION= 8.0.8
 

Index: pkgsrc/lang/php73/distinfo
diff -u pkgsrc/lang/php73/distinfo:1.33 pkgsrc/lang/php73/distinfo:1.33.2.1
--- pkgsrc/lang/php73/distinfo:1.33     Fri Apr 30 15:02:26 2021
+++ pkgsrc/lang/php73/distinfo  Sun Jul  4 19:34:53 2021
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.33 2021/04/30 15:02:26 taca Exp $
+$NetBSD: distinfo,v 1.33.2.1 2021/07/04 19:34:53 bsiegert Exp $
 
-SHA1 (php-7.3.28.tar.xz) = 6bbb16cb394385800c56c39c908d8a63297480c9
-RMD160 (php-7.3.28.tar.xz) = 01ff4fd1443f12f7afa0f02ad28f36306b7aaa41
-SHA512 (php-7.3.28.tar.xz) = 91f4f23fea6e2c5ea1fa5774075e1b1f7cfcc46064ab0d2f03e4f1b9b6c3dd7fd5a59854ed3fe3a8e2962283045f6a1c3273438b4bc0c68b11f41b9338f44274
-Size (php-7.3.28.tar.xz) = 12139380 bytes
+SHA1 (php-7.3.29.tar.xz) = e694c68bf991d06ac6bba0277efce80bc8946c69
+RMD160 (php-7.3.29.tar.xz) = 6e7958a92ae6460263d6f9062ed9136c4d266b39
+SHA512 (php-7.3.29.tar.xz) = 8a495546d575a31f864f85139d8d7931361e6ac421f2cf5ef3b4cb57f59c44568cb9ad0c8793f50169d8d9933abdcec14ab90add2d7fab056e19e7f66d60689f
+Size (php-7.3.29.tar.xz) = 12139492 bytes
 SHA1 (patch-configure) = 08b80528ba90c705398e8841c232382663479a3b
 SHA1 (patch-disable-filter-url) = 0a2c19c18f089448a8d842e99738b292ab9e5640
 SHA1 (patch-ext_gd_config.m4) = eaecfb31b18700dd642c067ed82748d4f6be2335