Path to this page:
Subject: CVS commit: [pkgsrc-2021Q3] pkgsrc/lang
From: Thomas Merkel
Date: 2021-11-23 23:50:50
Message id: 20211123225050.7546DFAEC@cvs.NetBSD.org
Log Message:
Pullup ticket #6543 - requested by taca
lang/php80: security fix
Revisions pulled up:
- lang/php/phpversion.mk 1.347
- lang/php80/distinfo 1.13
---
Module Name: pkgsrc
Committed By: taca
Date: Fri Nov 19 14:29:05 UTC 2021
Modified Files:
pkgsrc/lang/php: phpversion.mk
pkgsrc/lang/php80: distinfo
Log Message:
lang/php80: update to 8.0.13
This release contains security fix.
18 Nov 2021, PHP 8.0.13
- Core:
. Fixed bug #81518 (Header injection via default_mimetype / default_charset).
(cmb)
- Date:
. Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
(cmb)
- MBString:
. Fixed bug #76167 (mbstring may use pointer from some previous request).
(cmb, cataphract)
- Opcache:
. Fixed bug #81512 (Unexpected behavior with arrays and JIT). (Dmitry)
- PCRE:
. Fixed bug #81424 (PCRE2 10.35 JIT performance regression). (cmb)
- XML:
. Fixed bug #79971 (special character is breaking the path in xml function).
(CVE-2021-21707) (cmb)
- XMLReader:
. Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid
property). (Nikita)
Files: