CVS commit: [pkgsrc-2021Q3] pkgsrc/lang

["Thomas Merkel" <tm%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   tm
Date:           Tue Nov  2 18:28:45 UTC 2021

Modified Files:
        pkgsrc/lang/php [pkgsrc-2021Q3]: phpversion.mk
        pkgsrc/lang/php80 [pkgsrc-2021Q3]: distinfo

Log Message:
Pullup ticket #6526 - requested by taca
lang/php80: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.342
- lang/php80/distinfo                                           1.11

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Fri Oct 22 15:09:52 UTC 2021

   Modified Files:
        pkgsrc/lang/php: phpversion.mk
        pkgsrc/lang/php80: distinfo

   Log Message:
   lang/php80: update to 8.0.12

   This is a security fix release.

   21 Oct 2021, PHP 8.0.12

   - CLI:
     . Fixed bug #81496 (Server logs incorrect request method). (lauri)

   - Core:
     . Fixed bug #81435 (Observer current_observed_frame may point to an old
       (overwritten) frame). (Bob)
     . Fixed bug #81380 (Observer may not be initialized properly). (krakjoe)

   - DOM:
     . Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
       (Viktor Volkov)

   - FFI:
     . Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not
       defined). (Dmitry)

   - FPM:
     . Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege
       escalation) (CVE-2021-21703). (Jakub Zelenka)

   - Fileinfo:
     . Fixed bug #78987 (High memory usage during encoding detection). (Anatol)

   - Filter:
     . Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
       (cmb, Nikita)

   - Opcache:
     . Fixed bug #81472 (Cannot support large linux major/minor device number when
       read /proc/self/maps). (Lin Yang)

   - Reflection:
     . ReflectionAttribute is no longer final. (sasezaki)

   - SPL:
     . Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
       (cmb, Nikita, Tyson Andre)
     . Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1). (cmb)

   - Standard:
     . Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo
       position specifier). (Aliaksandr Bystry)

   - Streams:
     . Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
       (cmb)

   - XML:
     . Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
       (Aliaksandr Bystry, cmb)

   - Zip:
     . Fixed bug #81490 (ZipArchive::extractTo() may leak memory). (cmb, Remi)
     . Fixed bug #77978 (Dirname ending in colon unzips to wrong dir). (cmb)


To generate a diff of this commit:
cvs rdiff -u -r1.341.2.2 -r1.341.2.3 pkgsrc/lang/php/phpversion.mk
cvs rdiff -u -r1.8 -r1.8.2.1 pkgsrc/lang/php80/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/php/phpversion.mk
diff -u pkgsrc/lang/php/phpversion.mk:1.341.2.2 pkgsrc/lang/php/phpversion.mk:1.341.2.3
--- pkgsrc/lang/php/phpversion.mk:1.341.2.2     Tue Nov  2 18:20:51 2021
+++ pkgsrc/lang/php/phpversion.mk       Tue Nov  2 18:28:45 2021
@@ -1,4 +1,4 @@
-# $NetBSD: phpversion.mk,v 1.341.2.2 2021/11/02 18:20:51 tm Exp $
+# $NetBSD: phpversion.mk,v 1.341.2.3 2021/11/02 18:28:45 tm Exp $
 #
 # This file selects a PHP version, based on the user's preferences and
 # the installed packages. It does not add a dependency on the PHP
@@ -90,7 +90,7 @@ PHPVERSION_MK=        defined
 PHP56_VERSION= 5.6.40
 PHP73_VERSION= 7.3.32
 PHP74_VERSION= 7.4.25
-PHP80_VERSION= 8.0.11
+PHP80_VERSION= 8.0.12
 
 # Define initial release of major version.
 PHP56_RELDATE= 20140828

Index: pkgsrc/lang/php80/distinfo
diff -u pkgsrc/lang/php80/distinfo:1.8 pkgsrc/lang/php80/distinfo:1.8.2.1
--- pkgsrc/lang/php80/distinfo:1.8      Thu Sep 23 15:48:37 2021
+++ pkgsrc/lang/php80/distinfo  Tue Nov  2 18:28:45 2021
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.8 2021/09/23 15:48:37 taca Exp $
+$NetBSD: distinfo,v 1.8.2.1 2021/11/02 18:28:45 tm Exp $
 
-SHA1 (php-8.0.11.tar.xz) = a69e003e68abe2a511fa7632f1cfa017f32be34d
-RMD160 (php-8.0.11.tar.xz) = 291d6e4d7e331bb43f570ef053b4fb484ff40c3c
-SHA512 (php-8.0.11.tar.xz) = 2d346959b2691ea0d5334dc9cad225b7a65ec53d6a6493f3b95c4819a0c088bec36aa1bf4ab3c8044a631bcfefb689d85463ff2259d42000e65dac30badcc59d
-Size (php-8.0.11.tar.xz) = 10804388 bytes
+SHA1 (php-8.0.12.tar.xz) = 1c762150f4fbf60885752572eab0abb15208349a
+RMD160 (php-8.0.12.tar.xz) = 098d8c323e93a37ae6c110c809dbe91e0d059acd
+SHA512 (php-8.0.12.tar.xz) = 927b15c4443f3741a5325ec7bf387987b405cd5e64e40fd81f1945bf073adda30eeede8e1f98185f505cb61f969cf1abe05b8dad57a3c4e87971e8037bb16b23
+Size (php-8.0.12.tar.xz) = 10713980 bytes
 SHA1 (patch-build_libtool.m4) = e58a2bcebe9e9d7dc7255354fd9fe57878e3f8a6
 SHA1 (patch-configure) = 6c3d2537eb4d1c2ed05e8e1e411701d316c67d8b
 SHA1 (patch-disable-filter-url) = 0a2c19c18f089448a8d842e99738b292ab9e5640