Subject: CVS commit: [pkgsrc-2021Q3] pkgsrc/lang
From: Thomas Merkel
Date: 2021-11-23 23:47:05
Message id: 20211123224705.178BDFAEC@cvs.NetBSD.org

Log Message:
Pullup ticket #6541 - requested by taca
lang/php74: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.345
- lang/php74/distinfo                                           1.33
- lang/php74/patches/patch-ext_intl_breakiterator_codepointiterator__internal.cpp 1.3

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Fri Nov 19 14:26:29 UTC 2021

   Modified Files:
   	pkgsrc/lang/php: phpversion.mk
   	pkgsrc/lang/php74: distinfo
   	pkgsrc/lang/php74/patches:
   	    patch-ext_intl_breakiterator_codepointiterator__internal.cpp

   Log Message:
   lang/php74: udpate to 7.4.26

   This release contains security fix.

   18 Nov 2021, PHP 7.4.26

   - Core:
     . Fixed bug #81518 (Header injection via default_mimetype / default_charset).
       (cmb)

   - Date:
     . Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
       (cmb)

   - MBString:
     . Fixed bug #76167 (mbstring may use pointer from some previous request).
       (cmb, cataphract)

   - MySQLi:
     . Fixed bug #81494 (Stopped unbuffered query does not throw error). (Nikita)

   - PCRE:
     . Fixed bug #81424 (PCRE2 10.35 JIT performance regression). (cmb)

   - Streams:
     . Fixed bug #54340 (Memory corruption with user_filter). (Nikita)

   - XML:
     . Fixed bug #79971 (special character is breaking the path in xml function).
       (CVE-2021-21707) (cmb)

Files:
RevisionActionfile
1.28.2.2modifypkgsrc/lang/php74/distinfo
1.2.8.1modifypkgsrc/lang/php74/patches/patch-ext_intl_breakiterator_codepointiterator__internal.cpp