Log message:
Pullup ticket #6426 - requested by taca
lang/php74: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.319
- lang/php74/distinfo                                           1.19

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Fri Feb  5 14:45:20 UTC 2021

   Modified Files:
   	pkgsrc/lang/php: phpversion.mk
   	pkgsrc/lang/php74: distinfo

   Log message:
   lang/php74: update to 7.4.15

   04 Feb 2021, PHP 7.4.15

   - Core:
     . Fixed bug #80523 (bogus parse error on >4GB source code). (Nikita)
     . Fixed bug #80384 (filter buffers entire read until file closed). (Adam
       Seitz, cmb)

   - Curl:
     . Fixed bug #80595 (Resetting POSTFIELDS to empty array breaks request). (cmb)

   - Date:
     . Fixed bug #80376 (last day of the month causes runway cpu usage. (Derick)

   - MySQLi:
     . Fixed bug #67983 (mysqlnd with MYSQLI_OPT_INT_AND_FLOAT_NATIVE fails to
       interpret bit columns). (Nikita)
     . Fixed bug #64638 (Fetching resultsets from stored procedure with cursor
       fails). (Nikita)
     . Fixed bug #72862 (segfault using prepared statements on stored procedures
       that use a cursor). (Nikita)
     . Fixed bug #77935 (Crash in mysqlnd_fetch_stmt_row_cursor when calling an SP
       with a cursor). (Nikita)

   - Phar:
     . Fixed bug #77565 (Incorrect locator detection in ZIP-based phars). (cmb)
     . Fixed bug #69279 (Compressed ZIP Phar extractTo() creates garbage files).
       (cmb)

   - SOAP:
     . Fixed bug #80672 (Null Dereference in SoapClient). (CVE-2021-21702) (cmb,
       Stas)

Log message:
Pullup ticket #6399 - requested by taca
lang/php74: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.318
- lang/php74/distinfo                                           1.18

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Jan  7 13:39:09 UTC 2021

   Modified Files:
   	pkgsrc/lang/php: phpversion.mk
   	pkgsrc/lang/php74: distinfo

   Log message:
   lang/php74: udpate to 7.4.14

   Update php74 pacakge to 7.4.14 (PHP 7.4.14).

   07 Jan 2021, PHP 7.4.14

   - Core:
     . Fixed bug #74558 (Can't rebind closure returned by Closure::fromCallable()).
       (cmb)
     . Fixed bug #80345 (PHPIZE configuration has outdated PHP_RELEASE_VERSION).
       (cmb)
     . Fixed bug #72964 (White space not unfolded for CC/Bcc headers). (cmb)
     . Fixed bug #80362 (Running dtrace scripts can cause php to crash).
       (al at coralnet dot name)
     . Fixed bug #80393 (Build of PHP extension fails due to configuration gap
       with libtool). (kir dot morozov at gmail dot com)
     . Fixed bug #80402 (configure filtering out -lpthread). (Nikita)
     . Fixed bug #77069 (stream filter loses final block of data). (cmb)

   - Fileinfo:
     . Fixed bug #77961 (finfo_open crafted magic parsing SIGABRT). (cmb)

   - FPM:
     . Fixed bug #69625 (FPM returns 200 status on request without
       SCRIPT_FILENAME env). (Jakub Zelenka)

   - Intl:
     . Fixed bug #80425 (MessageFormatAdapter::getArgTypeList redefined). (Nikita)

   - OpenSSL:
     . Fixed bug #80368 (OpenSSL extension fails to build against LibreSSL due to
       lack of OCB support). (Nikita)

   - Phar:
     . Fixed bug #73809 (Phar Zip parse crash - mmap fail). (cmb)
     . Fixed bug #75102 (`PharData` says invalid checksum for valid tar). (cmb)
     . Fixed bug #77322 (PharData::addEmptyDir('/') Possible integer overflow).
       (cmb)

   - PDO MySQL:
     . Fixed bug #80458 (PDOStatement::fetchAll() throws for upsert queries).
       (Kamil Tekiela)
     . Fixed bug #63185 (nextRowset() ignores MySQL errors with native prepared
       statements). (Nikita)
     . Fixed bug #78152 (PDO::exec() - Bad error handling with multiple commands).
       (Nikita)
     . Fixed bug #70066 (Unexpected "Cannot execute queries while other \ 
unbuffered
       queries"). (Nikita)
     . Fixed bug #71145 (Multiple statements in init command triggers unbuffered
       query error). (Nikita)
     . Fixed bug #76815 (PDOStatement cannot be GCed/closeCursor-ed when a
       PROCEDURE resultset SIGNAL). (Nikita)

   - Standard:
     . Fixed bug #77423 (FILTER_VALIDATE_URL accepts URLs with invalid userinfo).
       (CVE-2020-7071) (cmb)
     . Fixed bug #80366 (Return Value of zend_fstat() not Checked). (sagpant, cmb)
     . Fixed bug #80411 (References to null-serialized object break serialize()).
       (Nikita)

   - Tidy:
     . Fixed bug #77594 (ob_tidyhandler is never reset). (cmb)

   - Zlib:
     . Fixed #48725 (Support for flushing in zlib stream). (cmb)