Log message:
Pullup ticket #6198 - requested by taca
lang/php73: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.296
- lang/php73/distinfo                                           1.22

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu May 14 14:23:08 UTC 2020

   Modified Files:
   	pkgsrc/lang/php: phpversion.mk
   	pkgsrc/lang/php73: distinfo

   Log message:
   lang/php73: update to 7.3.18

   Update php73 to 7.3.18 (PHP 7.3.18).

   14 May 2020, PHP 7.3.18

   - Core:
     . Fixed bug #78875 (Long filenames cause OOM and temp files are not cleaned).
       (CVE-2019-11048) (cmb)
     . Fixed bug #78876 (Long variables in multipart/form-data cause OOM and temp
       files are not cleaned). (CVE-2019-11048) (cmb)
     . Fixed bug #79434 (PHP 7.3 and PHP-7.4 crash with NULL-pointer dereference
       on !CS constant). (Nikita)
     . Fixed bug #79477 (casting object into array creates references). (Nikita)
     . Fixed bug #79470 (PHP incompatible with 3rd party file system on demand).
       (cmb)
     . Fixed bug #78784 (Unable to interact with files inside a VFS for Git
       repository). (cmb)

   - DOM:
     . Fixed bug #78221 (DOMNode::normalize() doesn't remove empty text nodes).
       (cmb)

   - FCGI:
     . Fixed bug #79491 (Search for .user.ini extends up to root dir). (cmb)

   - MBString:
     . Fixed bug #79441 (Segfault in mb_chr() if internal encoding is unsupported).
       (Girgias)

   - OpenSSL:
     . Fixed bug #79497 (stream_socket_client() throws an unknown error sometimes
       with <1s timeout). (Joe Cai)

   - Phar:
     . Fix bug #79503 (Memory leak on duplicate metadata). (cmb)

   - SimpleXML:
     . Fixed bug #79528 (Different object of the same xml between 7.4.5 and
       7.4.4). (cmb)

   - Standard:
     . Fixed bug #79468 (SIGSEGV when closing stream handle with a stream filter
       appended). (dinosaur)

Log message:
Pullup ticket #6171 - requested by taca
lang/php73: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.293
- lang/php73/distinfo                                           1.21

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sat Apr 18 04:59:41 UTC 2020

   Modified Files:
   	pkgsrc/lang/php: phpversion.mk
   	pkgsrc/lang/php73: distinfo

   Log message:
   lang/php73: update to 7.3.17.

   Update php73 to 7.3.17.

   16 Apr 2020, PHP 7.3.17

   - Core:
     . Fixed bug #79364 (When copy empty array, next key is unspecified). (cmb)
     . Fixed bug #78210 (Invalid pointer address). (cmb, Nikita)

   - CURL:
     . Fixed bug #79199 (curl_copy_handle() memory leak). (cmb)

   - Date:
     . Fixed bug #79396 (DateTime hour incorrect during DST jump forward). (Nate
       Brunette)

   - Iconv:
     . Fixed bug #79200 (Some iconv functions cut Windows-1258). (cmb)

   - OPcache:
     . Fixed bug #79412 (Opcache chokes and uses 100% CPU on specific script).
       (Dmitry)

   - Session:
     . Fixed bug #79413 (session_create_id() fails for active sessions). (cmb)

   - Shmop:
     . Fixed bug #79427 (Integer Overflow in shmop_open()). (cmb)

   - SimpleXML:
     . Fixed bug #61597 (SXE properties may lack attributes and content). (cmb)

   - Spl:
     . Fixed bug #75673 (SplStack::unserialize() behavior). (cmb)
     . Fixed bug #79393 (Null coalescing operator failing with SplFixedArray).
       (cmb)

   - Standard:
     . Fixed bug #79330 (shell_exec() silently truncates after a null byte). (stas)
     . Fixed bug #79465 (OOB Read in urldecode()). (stas)
     . Fixed bug #79410 (system() swallows last chunk if it is exactly 4095 bytes
       without newline). (Christian Schneider)

   - Zip:
     . Fixed Bug #79296 (ZipArchive::open fails on empty file). (Remi)
     . Fixed bug #79424 (php_zip_glob uses gl_pathc after call to globfree).
       (Max Rees)