CVS commit: [pkgsrc-2020Q3] pkgsrc/lang

["S.P.Zeidler" <spz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   spz
Date:           Wed Oct 21 19:28:42 UTC 2020

Modified Files:
        pkgsrc/lang/php [pkgsrc-2020Q3]: phpversion.mk
        pkgsrc/lang/php72 [pkgsrc-2020Q3]: distinfo

Log Message:
Pullup ticket #6335 - requested by taca
lang/php72: security update

Revisions pulled up:
- lang/php/phpversion.mk                                        1.311
- lang/php72/distinfo                                           1.58

-------------------------------------------------------------------
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Sun Oct  4 03:14:53 UTC 2020

   Modified Files:
        pkgsrc/lang/php: phpversion.mk
        pkgsrc/lang/php72: distinfo

   Log Message:
   lang/php72: update to 7.2.34

   Update php72 package to 7.2.34.

   01 Oct 2020, PHP 7.2.34

   - Core:
     . Fixed bug #79699 (PHP parses encoded cookie names so malicious `__Host-`
       cookies can be sent). (CVE-2020-7070) (Stas)

   - OpenSSL:
     . Fixed bug #79601 (Wrong ciphertext/tag in AES-CCM encryption for a 12
       bytes IV). (CVE-2020-7069) (Jakub Zelenka)

   To generate a diff of this commit:
   cvs rdiff -u -r1.310 -r1.311 pkgsrc/lang/php/phpversion.mk
   cvs rdiff -u -r1.57 -r1.58 pkgsrc/lang/php72/distinfo


To generate a diff of this commit:
cvs rdiff -u -r1.308.2.2 -r1.308.2.3 pkgsrc/lang/php/phpversion.mk
cvs rdiff -u -r1.57 -r1.57.2.1 pkgsrc/lang/php72/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/php/phpversion.mk
diff -u pkgsrc/lang/php/phpversion.mk:1.308.2.2 pkgsrc/lang/php/phpversion.mk:1.308.2.3
--- pkgsrc/lang/php/phpversion.mk:1.308.2.2     Wed Oct 21 19:23:29 2020
+++ pkgsrc/lang/php/phpversion.mk       Wed Oct 21 19:28:41 2020
@@ -1,4 +1,4 @@
-# $NetBSD: phpversion.mk,v 1.308.2.2 2020/10/21 19:23:29 spz Exp $
+# $NetBSD: phpversion.mk,v 1.308.2.3 2020/10/21 19:28:41 spz Exp $
 #
 # This file selects a PHP version, based on the user's preferences and
 # the installed packages. It does not add a dependency on the PHP
@@ -88,7 +88,7 @@ PHPVERSION_MK=        defined
 
 # Define each PHP's version.
 PHP56_VERSION= 5.6.40
-PHP72_VERSION= 7.2.33
+PHP72_VERSION= 7.2.34
 PHP73_VERSION= 7.3.23
 PHP74_VERSION= 7.4.11
 

Index: pkgsrc/lang/php72/distinfo
diff -u pkgsrc/lang/php72/distinfo:1.57 pkgsrc/lang/php72/distinfo:1.57.2.1
--- pkgsrc/lang/php72/distinfo:1.57     Sat Aug  8 13:32:57 2020
+++ pkgsrc/lang/php72/distinfo  Wed Oct 21 19:28:42 2020
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.57 2020/08/08 13:32:57 taca Exp $
+$NetBSD: distinfo,v 1.57.2.1 2020/10/21 19:28:42 spz Exp $
 
-SHA1 (php-7.2.33.tar.xz) = 5297d7594af3950f395b775bbf7470c8e6f89683
-RMD160 (php-7.2.33.tar.xz) = 83b1f02ef406228ef3a3d1b0371246843d84c26e
-SHA512 (php-7.2.33.tar.xz) = 1c28e741fc6de88a33e1307bc88ba8dddf1ba767ce6eb9c1f0da35482c7d3ee1154831b997fa746340c4b7ec8de9196b21a9b1cf319c8e69eca2c92602ceee4a
-Size (php-7.2.33.tar.xz) = 12310624 bytes
+SHA1 (php-7.2.34.tar.xz) = 3dfe7bbed49e53f6ff76ca0b8c9162f78b1cc679
+RMD160 (php-7.2.34.tar.xz) = 52a993c201241e2dce521bad225f07330505b2cc
+SHA512 (php-7.2.34.tar.xz) = 7ecc3de3b5db41ec4ff6a5ce6c7e77dc330753c6f3fd87db4d07d6bb763a0b047e83afeef2251b4c6a5d2ff53fd9f3d7e99d091ef2e2c6ab8f18db7447d8a97d
+Size (php-7.2.34.tar.xz) = 12309432 bytes
 SHA1 (patch-configure) = 6e66a79e691a84aa7ae461f8dec1752443ad6b61
 SHA1 (patch-disable-filter-url) = e9e92d686ddd1d1a1ece10fe4feee4e368fe510c
 SHA1 (patch-ext_gd_config.m4) = eaecfb31b18700dd642c067ed82748d4f6be2335