CVS commit: [pkgsrc-2019Q4] pkgsrc/lang

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Wed Jan 29 12:48:15 UTC 2020

Modified Files:
        pkgsrc/lang/php [pkgsrc-2019Q4]: phpversion.mk
        pkgsrc/lang/php73 [pkgsrc-2019Q4]: Makefile distinfo

Log Message:
Pullup ticket #6127 - requested by taca
lang/php73: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.284
- lang/php73/Makefile                                           1.8-1.9
- lang/php73/distinfo                                           1.18

---
   Module Name: pkgsrc
   Committed By:        jperkin
   Date:                Sat Jan 18 21:51:16 UTC 2020

   Modified Files:
        pkgsrc/lang/php73: Makefile

   Log Message:
   *: Recursive revision bump for openssl 1.1.1.

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Sat Jan 25 17:21:14 UTC 2020

   Modified Files:
        pkgsrc/lang/php: phpversion.mk
        pkgsrc/lang/php73: Makefile distinfo

   Log Message:
   lang/php73: update to 7.3.14.

   Update php73 to 7.3.14 (PHP 7.3.14).

   23 Jan 2020, PHP 7.3.14

   - Core
     . Fixed bug #78999 (Cycle leak when using function result as temporar=
   y).
       (Dmitry)

   - CURL:
     . Fixed bug #79033 (Curl timeout error with specific url and post). (=
   cmb)

   - Date:
     . Fixed bug #79015 (undefined-behavior in php_date.c). (cmb)

   - DBA:
     . Fixed bug #78808 ([LMDB] MDB_MAP_FULL: Environment mapsize limit re=
   ached).
       (cmb)

   - Fileinfo:
     . Fixed bug #74170 (locale information change after mime_content_type=
   ).
       (Sergei Turchanov)

   - GD:
     . Fixed bug #78923 (Artifacts when convoluting image with transparenc=
   y).
       (wilson chen)
     . Fixed bug #79067 (gdTransformAffineCopy() may use unitialized value=
   s). (cmb)
     . Fixed bug #79068 (gdTransformAffineCopy() changes interpolation met=
   hod).
       (cmb)

   - Libxml:
     . Fixed bug #79029 (Use After Free's in XMLReader / XMLWriter). (Laru=
   ence)

   - Mbstring:
     . Fixed bug #79037 (global buffer-overflow in `mbfl_filt_conv_big5_wc=
   har`).
       (CVE-2020-7060) (Nikita)

   - OPcache:
     . Fixed bug #79040 (Warning Opcode handlers are unusable due to ASLR)=
   . (cmb)

   - Pcntl:
     . Fixed bug #78402 (Converting null to string in error message is bad=
    DX).
       (SAT=D2 Kentar=F2)

   - PDO_PgSQL:
     . Fixed bug #78983 (pdo_pgsql config.w32 cannot find libpq-fe.h). (SA=
   T=D2
       Kentar=F2)
     . Fixed bug #78980 (pgsqlGetNotify() overlooks dead connection). (SAT=
   =D2
       Kentar=F2)
     . Fixed bug #78982 (pdo_pgsql returns dead persistent connection). (S=
   AT=D2
       Kentar=F2)

   - Session:
     . Fixed bug #79091 (heap use-after-free in session_create_id()). (cmb=
   , Nikita)

   - Shmop:
     . Fixed bug #78538 (shmop memory leak). (cmb)

   - Standard:
     . Fixed bug #79099 (OOB read in php_strip_tags_ex). (CVE-2020-7059). =
   (cmb)
     . Fixed bug #54298 (Using empty additional_headers adding extraneous =
   CRLF).
       (cmb)


To generate a diff of this commit:
cvs rdiff -u -r1.283 -r1.283.4.1 pkgsrc/lang/php/phpversion.mk
cvs rdiff -u -r1.7 -r1.7.4.1 pkgsrc/lang/php73/Makefile
cvs rdiff -u -r1.17 -r1.17.4.1 pkgsrc/lang/php73/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/php/phpversion.mk
diff -u pkgsrc/lang/php/phpversion.mk:1.283 pkgsrc/lang/php/phpversion.mk:1.283.4.1
--- pkgsrc/lang/php/phpversion.mk:1.283 Sat Dec 21 07:02:15 2019
+++ pkgsrc/lang/php/phpversion.mk       Wed Jan 29 12:48:15 2020
@@ -1,4 +1,4 @@
-# $NetBSD: phpversion.mk,v 1.283 2019/12/21 07:02:15 taca Exp $
+# $NetBSD: phpversion.mk,v 1.283.4.1 2020/01/29 12:48:15 bsiegert Exp $
 #
 # This file selects a PHP version, based on the user's preferences and
 # the installed packages. It does not add a dependency on the PHP
@@ -89,7 +89,7 @@ PHPVERSION_MK=        defined
 # Define each PHP's version.
 PHP56_VERSION= 5.6.40
 PHP72_VERSION= 7.2.26
-PHP73_VERSION= 7.3.13
+PHP73_VERSION= 7.3.14
 PHP74_VERSION= 7.4.1
 
 # Define initial release of major version.

Index: pkgsrc/lang/php73/Makefile
diff -u pkgsrc/lang/php73/Makefile:1.7 pkgsrc/lang/php73/Makefile:1.7.4.1
--- pkgsrc/lang/php73/Makefile:1.7      Mon Dec 16 15:58:19 2019
+++ pkgsrc/lang/php73/Makefile  Wed Jan 29 12:48:15 2020
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.7 2019/12/16 15:58:19 taca Exp $
+# $NetBSD: Makefile,v 1.7.4.1 2020/01/29 12:48:15 bsiegert Exp $
 
 #
 # We can't omit PKGNAME here to handle PKG_OPTIONS.

Index: pkgsrc/lang/php73/distinfo
diff -u pkgsrc/lang/php73/distinfo:1.17 pkgsrc/lang/php73/distinfo:1.17.4.1
--- pkgsrc/lang/php73/distinfo:1.17     Sat Dec 21 06:59:20 2019
+++ pkgsrc/lang/php73/distinfo  Wed Jan 29 12:48:15 2020
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.17 2019/12/21 06:59:20 taca Exp $
+$NetBSD: distinfo,v 1.17.4.1 2020/01/29 12:48:15 bsiegert Exp $
 
-SHA1 (php-7.3.13.tar.xz) = 3c4b349c698b3f515d0f6acc4a72955c4eb075df
-RMD160 (php-7.3.13.tar.xz) = 72bed7868a6f1144ebfb04434accd92fbdeaec29
-SHA512 (php-7.3.13.tar.xz) = d0624b3b841fed49d9cea56b17e7c8c7abf8e6572832b6f86c98f48c23f86690c310b460eae27a6fcd41fbfbc2e8a4b56f6bfb0c738fa1db36ce3795454d7798
-Size (php-7.3.13.tar.xz) = 12102012 bytes
+SHA1 (php-7.3.14.tar.xz) = 5550a2b262121738f06753f1fe375d244c9d414e
+RMD160 (php-7.3.14.tar.xz) = 886d50db54000ff8e738b9ee5d3db9187872bd82
+SHA512 (php-7.3.14.tar.xz) = 053cd51d0fe73e18494d51c104573b73f6af41d21091513319e994cc12398fa792b7d996414d28d6dbf983c38afccc92d47d6fd8c071824ee192067bd955a80a
+Size (php-7.3.14.tar.xz) = 12106072 bytes
 SHA1 (patch-configure) = 08b80528ba90c705398e8841c232382663479a3b
 SHA1 (patch-disable-filter-url) = 0a2c19c18f089448a8d842e99738b292ab9e5640
 SHA1 (patch-ext_gd_config.m4) = eaecfb31b18700dd642c067ed82748d4f6be2335