CVS commit: [pkgsrc-2021Q3] pkgsrc/lang

["Thomas Merkel" <tm%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   tm
Date:           Tue Nov  2 18:20:51 UTC 2021

Modified Files:
        pkgsrc/lang/php [pkgsrc-2021Q3]: phpversion.mk
        pkgsrc/lang/php74 [pkgsrc-2021Q3]: distinfo

Log Message:
Pullup ticket #6527 - requested by taca
lang/php74: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.343
- lang/php74/distinfo                                           1.31

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Fri Oct 22 15:14:24 UTC 2021

   Modified Files:
        pkgsrc/lang/php: phpversion.mk
        pkgsrc/lang/php74: distinfo

   Log Message:
   lang/php74: update to 7.4.25

   This is a security fix release.

   21 Oct 2021, PHP 7.4.25

   - DOM:
     . Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
       (Viktor Volkov)

   - FFI:
     . Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not
       defined). (Dmitry)

   - Fileinfo:
     . Fixed bug #78987 (High memory usage during encoding detection). (Anatol)

   - Filter:
     . Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
       (cmb, Nikita)

   - FPM:
     . Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege
       escalation) (CVE-2021-21703). (Jakub Zelenka)

   - SPL:
     . Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
       (cmb, Nikita, Tyson Andre)

   - Streams:
     . Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
       (cmb)

   - XML:
     . Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
       (Aliaksandr Bystry, cmb)

   - Zip:
     . Fixed bug #81490 (ZipArchive::extractTo() may leak memory). (cmb, Remi)
     . Fixed bug #77978 (Dirname ending in colon unzips to wrong dir). (cmb)


To generate a diff of this commit:
cvs rdiff -u -r1.341.2.1 -r1.341.2.2 pkgsrc/lang/php/phpversion.mk
cvs rdiff -u -r1.28 -r1.28.2.1 pkgsrc/lang/php74/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/php/phpversion.mk
diff -u pkgsrc/lang/php/phpversion.mk:1.341.2.1 pkgsrc/lang/php/phpversion.mk:1.341.2.2
--- pkgsrc/lang/php/phpversion.mk:1.341.2.1     Mon Nov  1 22:06:32 2021
+++ pkgsrc/lang/php/phpversion.mk       Tue Nov  2 18:20:51 2021
@@ -1,4 +1,4 @@
-# $NetBSD: phpversion.mk,v 1.341.2.1 2021/11/01 22:06:32 tm Exp $
+# $NetBSD: phpversion.mk,v 1.341.2.2 2021/11/02 18:20:51 tm Exp $
 #
 # This file selects a PHP version, based on the user's preferences and
 # the installed packages. It does not add a dependency on the PHP
@@ -89,7 +89,7 @@ PHPVERSION_MK=        defined
 # Define each PHP's version.
 PHP56_VERSION= 5.6.40
 PHP73_VERSION= 7.3.32
-PHP74_VERSION= 7.4.24
+PHP74_VERSION= 7.4.25
 PHP80_VERSION= 8.0.11
 
 # Define initial release of major version.

Index: pkgsrc/lang/php74/distinfo
diff -u pkgsrc/lang/php74/distinfo:1.28 pkgsrc/lang/php74/distinfo:1.28.2.1
--- pkgsrc/lang/php74/distinfo:1.28     Fri Sep 24 02:27:04 2021
+++ pkgsrc/lang/php74/distinfo  Tue Nov  2 18:20:51 2021
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.28 2021/09/24 02:27:04 taca Exp $
+$NetBSD: distinfo,v 1.28.2.1 2021/11/02 18:20:51 tm Exp $
 
-SHA1 (php-7.4.24.tar.xz) = 34660781db70c891dcaab046931d38f60464d7e3
-RMD160 (php-7.4.24.tar.xz) = 67a0c7ca2067311ee363e685fc89aba1980b0778
-SHA512 (php-7.4.24.tar.xz) = 30dd0a83d6184791f4cff3edcffeb05470de8f98ddadba3c11544449bf500280ff2048a8ca8588b35d0622dcbbf16f55ea297f51d469ae137048cab2d40da9cd
-Size (php-7.4.24.tar.xz) = 10372816 bytes
+SHA1 (php-7.4.25.tar.xz) = c873eabab28db07412a198ccc3482af6fbc6ab92
+RMD160 (php-7.4.25.tar.xz) = 53d6d40db7e78d98ea037e08780d68e81675bbe4
+SHA512 (php-7.4.25.tar.xz) = 7fcb236f6d2a92514059b2e107c2b592e6139e3c65046566ae98fb9d2c09eb3e9ca1a41ea6535fc814bc7127d8fd9f8bb5a80bd86eec32120eb150a34b9b5c34
+Size (php-7.4.25.tar.xz) = 10376304 bytes
 SHA1 (patch-build_libtool.m4) = 3656eb516fb14defd4b0964fe21e117c630be856
 SHA1 (patch-configure) = 5e9c9c06f6d819d5ba2832d648f41363f40f3108
 SHA1 (patch-disable-filter-url) = 0a2c19c18f089448a8d842e99738b292ab9e5640