Subject: CVS commit: [pkgsrc-2019Q2] pkgsrc/lang
From: Benny Siegert
Date: 2019-09-10 19:56:00
Message id: 20190910175600.5A88EFBF4@cvs.NetBSD.org

Log Message:
Pullup ticket #6044 - requested by taca
lang/php73: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.267
- lang/php73/distinfo                                           1.11

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Sep  1 13:03:17 UTC 2019

   Modified Files:
   	pkgsrc/lang/php: phpversion.mk
   	pkgsrc/lang/php73: distinfo

   Log Message:
   lag/php73: update to 7.3.9

   29 Aug 2019, PHP 7.3.9

   - Core:
     . Fixed bug #78363 (Buffer overflow in zendparse). (Nikita)
     . Fixed bug #78379 (Cast to object confuses GC, causes crash). (Dmitry)
     . Fixed bug #78412 (Generator incorrectly reports non-releasable $this as GC
       child). (Nikita)

   - Curl:
     . Fixed bug #77946 (Bad cURL resources returned by curl_multi_info_read()).
       (Abyr Valg)

   - Exif:
     . Fixed bug #78333 (Exif crash (bus error) due to wrong alignment and
       invalid cast). (Nikita)

   - FPM:
     . Fixed bug #77185 (Use-after-free in FPM master event handling).
       (Maksim Nikulin)

   - Iconv:
     . Fixed bug #78342 (Bus error in configure test for iconv //IGNORE). (Rainer
       Jung)

   - LiteSpeed:
     . Updated to LiteSpeed SAPI V7.5 (Fixed clean shutdown). (George Wang)

   - MBString:
     . Fixed bug #78380 (Oniguruma 6.9.3 fixes CVEs). (CVE-2019-13224) (Stas)

   - MySQLnd:
     . Fixed bug #78179 (MariaDB server version incorrectly detected). (cmb)
     . Fixed bug #78213 (Empty row pocket). (cmb)

   - Opcache:
     . Fixed bug #77191 (Assertion failure in dce_live_ranges() when silencing is
       used). (Nikita)

   - Standard:
     . Fixed bug #69100 (Bus error from stream_copy_to_stream (file -> SSL stream)
       with invalid length). (Nikita)
     . Fixed bug #78282 (atime and mtime mismatch). (cmb)
     . Fixed bug #78326 (improper memory deallocation on stream_get_contents()
       with fixed length buffer). (Albert Casademont)
     . Fixed bug #78346 (strip_tags no longer handling nested php tags). (cmb)

Files:
RevisionActionfile
1.8.2.2modifypkgsrc/lang/php73/distinfo