./lang/php74, PHP Hypertext Preprocessor version 7.4

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: pkgsrc-2021Q2, Version: 7.4.21, Package name: php-7.4.21, Maintainer: pkgsrc-users

PHP is a widely-used open source general-purpose scripting language
that is especially suited for web development and can be embedded
into HTML. It is modular, and object-oriented. Much of its syntax
is borrowed from C, Java and Perl with a couple of unique PHP-specific
features thrown in. The language is designed to allow web developers
to write dynamically generated pages quickly.

PHP 7.4 comes with numerous improvements and new features such as

* Typed Properties
* Arrow Functions
* Limited Return Type Covariance and Argument Type Contravariance
* Unpacking Inside Arrays
* Numeric Literal Separator
* Weak References
* Allow Exceptions from __toString()
* Opcache Preloading
* Several Deprecations
* Extensions Removed from the Core

For source downloads of PHP 7.4 please visit our downloads page Windows
binaries can be found on the PHP for Windows site. The list of changes is
recorded in the ChangeLog.



Package options: inet6, readline, ssl

Master sites: (Expand)

SHA1: be6c96bee79e227d50440f80c1342f8badf2aa60
RMD160: 175c38c9540e3cb9a22dd3170f1b4d824de6beb0
Filesize: 10104.129 KB

Version history: (Expand)

CVS history: (Expand)


   2021-07-04 21:16:05 by Benny Siegert | Files touched by this commit (1) | Package updated
Log message:
Pullup ticket #6478 - requested by taca
lang/php74: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.331
- lang/php74/distinfo                                           1.25

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Fri Jul  2 17:28:28 UTC 2021

   Modified Files:
   	pkgsrc/lang/php: phpversion.mk
   	pkgsrc/lang/php74: distinfo

   Log message:
   lang/php74: update to 7.4.21

   01 Jul 2021, PHP 7.4.21

   - Core:
     . Fixed bug #81068 (Double free in realpath_cache_clean()). (Dimitry Andric)
     . Fixed bug #76359 (open_basedir bypass through adding ".."). (cmb)
     . Fixed bug #81090 (Typed property performance degradation with .= operator).
       (Nikita)
     . Fixed bug #81070 (Integer underflow in memory limit comparison).
       (Peter van Dommelen)
     . Fixed bug #81122 (SSRF bypass in FILTER_VALIDATE_URL).
       (CVE-2021-21705) (cmb)

   - Bzip2:
     . Fixed bug #81092 (fflush before stream_filter_remove corrupts stream).
       (cmb)

   - OpenSSL:
     . Fixed bug #76694 (native Windows cert verification uses CN as sever name).
       (cmb)

   - PDO_Firebird:
     . Fixed bug #76448 (Stack buffer overflow in firebird_info_cb).
       (CVE-2021-21704) (cmb)
     . Fixed bug #76449 (SIGSEGV in firebird_handle_doer).
       (CVE-2021-21704) (cmb)
     . Fixed bug #76450 (SIGSEGV in firebird_stmt_execute).
       (CVE-2021-21704) (cmb)
     . Fixed bug #76452 (Crash while parsing blob data in firebird_fetch_blob).
       (CVE-2021-21704) (cmb)

   - Standard:
     . Fixed bug #81048 (phpinfo(INFO_VARIABLES) "Array to string \ 
conversion").
       (cmb)