Subject: CVS commit: [pkgsrc-2020Q4] pkgsrc/lang
From: Benny Siegert
Date: 2021-01-16 20:48:15
Message id: 20210116194815.C8949FA9D@cvs.NetBSD.org

Log Message:
Pullup ticket #6399 - requested by taca
lang/php74: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.318
- lang/php74/distinfo                                           1.18

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Jan  7 13:39:09 UTC 2021

   Modified Files:
   	pkgsrc/lang/php: phpversion.mk
   	pkgsrc/lang/php74: distinfo

   Log Message:
   lang/php74: udpate to 7.4.14

   Update php74 pacakge to 7.4.14 (PHP 7.4.14).

   07 Jan 2021, PHP 7.4.14

   - Core:
     . Fixed bug #74558 (Can't rebind closure returned by Closure::fromCallable()).
       (cmb)
     . Fixed bug #80345 (PHPIZE configuration has outdated PHP_RELEASE_VERSION).
       (cmb)
     . Fixed bug #72964 (White space not unfolded for CC/Bcc headers). (cmb)
     . Fixed bug #80362 (Running dtrace scripts can cause php to crash).
       (al at coralnet dot name)
     . Fixed bug #80393 (Build of PHP extension fails due to configuration gap
       with libtool). (kir dot morozov at gmail dot com)
     . Fixed bug #80402 (configure filtering out -lpthread). (Nikita)
     . Fixed bug #77069 (stream filter loses final block of data). (cmb)

   - Fileinfo:
     . Fixed bug #77961 (finfo_open crafted magic parsing SIGABRT). (cmb)

   - FPM:
     . Fixed bug #69625 (FPM returns 200 status on request without
       SCRIPT_FILENAME env). (Jakub Zelenka)

   - Intl:
     . Fixed bug #80425 (MessageFormatAdapter::getArgTypeList redefined). (Nikita)

   - OpenSSL:
     . Fixed bug #80368 (OpenSSL extension fails to build against LibreSSL due to
       lack of OCB support). (Nikita)

   - Phar:
     . Fixed bug #73809 (Phar Zip parse crash - mmap fail). (cmb)
     . Fixed bug #75102 (`PharData` says invalid checksum for valid tar). (cmb)
     . Fixed bug #77322 (PharData::addEmptyDir('/') Possible integer overflow).
       (cmb)

   - PDO MySQL:
     . Fixed bug #80458 (PDOStatement::fetchAll() throws for upsert queries).
       (Kamil Tekiela)
     . Fixed bug #63185 (nextRowset() ignores MySQL errors with native prepared
       statements). (Nikita)
     . Fixed bug #78152 (PDO::exec() - Bad error handling with multiple commands).
       (Nikita)
     . Fixed bug #70066 (Unexpected "Cannot execute queries while other \ 
unbuffered
       queries"). (Nikita)
     . Fixed bug #71145 (Multiple statements in init command triggers unbuffered
       query error). (Nikita)
     . Fixed bug #76815 (PDOStatement cannot be GCed/closeCursor-ed when a
       PROCEDURE resultset SIGNAL). (Nikita)

   - Standard:
     . Fixed bug #77423 (FILTER_VALIDATE_URL accepts URLs with invalid userinfo).
       (CVE-2020-7071) (cmb)
     . Fixed bug #80366 (Return Value of zend_fstat() not Checked). (sagpant, cmb)
     . Fixed bug #80411 (References to null-serialized object break serialize()).
       (Nikita)

   - Tidy:
     . Fixed bug #77594 (ob_tidyhandler is never reset). (cmb)

   - Zlib:
     . Fixed #48725 (Support for flushing in zlib stream). (cmb)

Files:
RevisionActionfile
1.17.2.1modifypkgsrc/lang/php74/distinfo