CVS commit: pkgsrc/lang

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Fri Mar 14 15:27:16 UTC 2025

Modified Files:
        pkgsrc/lang/php: phpversion.mk
        pkgsrc/lang/php82: distinfo

Log Message:
lang/php82: update to 8.2.28

This is security release.

PHP 8.2.28 (2025-03-13)

- Core:
  . Fixed bug GH-17211 (observer segfault on function loaded with dl()).
    (Arnaud)

- LibXML:
  . Fixed GHSA-wg4p-4hqh-c3g9 (Reocurrence of #72714). (nielsdos)
  . Fixed GHSA-p3x9-6h7p-cgfc (libxml streams use wrong `content-type` header
    when requesting a redirected resource). (CVE-2025-1219) (timwolla)

- Streams:
  . Fixed GHSA-hgf54-96fm-v528 (Stream HTTP wrapper header check might omit
    basic auth header). (CVE-2025-1736) (Jakub Zelenka)
  . Fixed GHSA-52jp-hrpf-2jff (Stream HTTP wrapper truncate redirect location
    to 1024 bytes). (CVE-2025-1861) (Jakub Zelenka)
  . Fixed GHSA-pcmh-g36c-qc44 (Streams HTTP wrapper does not fail for headers
    without colon). (CVE-2025-1734) (Jakub Zelenka)
  . Fixed GHSA-v8xr-gpvj-cx9g (Header parser of `http` stream wrapper does not
    handle folded headers). (CVE-2025-1217) (Jakub Zelenka)

- Windows:
  . Fixed phpize for Windows 11 (24H2). (bwoebi)


To generate a diff of this commit:
cvs rdiff -u -r1.458 -r1.459 pkgsrc/lang/php/phpversion.mk
cvs rdiff -u -r1.30 -r1.31 pkgsrc/lang/php82/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/php/phpversion.mk
diff -u pkgsrc/lang/php/phpversion.mk:1.458 pkgsrc/lang/php/phpversion.mk:1.459
--- pkgsrc/lang/php/phpversion.mk:1.458 Fri Mar 14 15:25:30 2025
+++ pkgsrc/lang/php/phpversion.mk       Fri Mar 14 15:27:16 2025
@@ -1,4 +1,4 @@
-# $NetBSD: phpversion.mk,v 1.458 2025/03/14 15:25:30 taca Exp $
+# $NetBSD: phpversion.mk,v 1.459 2025/03/14 15:27:16 taca Exp $
 #
 # This file selects a PHP version, based on the user's preferences and
 # the installed packages. It does not add a dependency on the PHP
@@ -111,7 +111,7 @@ PHPVERSION_MK=      defined
 PHP56_VERSION= 5.6.40
 PHP74_VERSION= 7.4.33
 PHP81_VERSION= 8.1.32
-PHP82_VERSION= 8.2.27
+PHP82_VERSION= 8.2.28
 PHP83_VERSION= 8.3.19
 PHP84_VERSION= 8.4.5
 

Index: pkgsrc/lang/php82/distinfo
diff -u pkgsrc/lang/php82/distinfo:1.30 pkgsrc/lang/php82/distinfo:1.31
--- pkgsrc/lang/php82/distinfo:1.30     Sat Feb  8 02:59:45 2025
+++ pkgsrc/lang/php82/distinfo  Fri Mar 14 15:27:16 2025
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.30 2025/02/08 02:59:45 taca Exp $
+$NetBSD: distinfo,v 1.31 2025/03/14 15:27:16 taca Exp $
 
-BLAKE2s (php-8.2.27.tar.xz) = 199cc4f96c54f9598e74e7e29c3e66969a18c6f980973eab7bd3edd6959cfe14
-SHA512 (php-8.2.27.tar.xz) = c368d90d833e25d2b2e3a667010f1c5b37df772e2200855d38e4bcb3344585e0783ae53fadae499fe98abab95372adf787ba2413e9b6bc818628bc29a11ed453
-Size (php-8.2.27.tar.xz) = 12150992 bytes
+BLAKE2s (php-8.2.28.tar.xz) = 8fb6d1b81c1a42a39dbe7cfc3bf6982bd54766c6cc1ac714273f55a001635064
+SHA512 (php-8.2.28.tar.xz) = af2a4f43da756a78f762dbd2b9e589e52864c7069fd55a6a2b900e32a08728a7d69b80577dc79b5d4a86993846a2232b809b75ae415344935610a3934b10c6ba
+Size (php-8.2.28.tar.xz) = 12147756 bytes
 SHA1 (patch-build_Makefile.global) = 87c533087a536649b5f51108ef4f4b72c8efc5b2
 SHA1 (patch-build_php.m4) = 465d2896c8c4d88c325414caf221e1f2aec27fc3
 SHA1 (patch-configure.ac) = d3bb35c423250d1124e2ada0974fc93448634abb