CVS commit: [pkgsrc-2026Q1] pkgsrc/lang

["Maya Rashish" <maya%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   maya
Date:           Tue Jun  9 22:44:44 UTC 2026

Modified Files:
        pkgsrc/lang/php [pkgsrc-2026Q1]: phpversion.mk
        pkgsrc/lang/php85 [pkgsrc-2026Q1]: distinfo

Log Message:
Pullup ticket #7134 - requested by taca
lang/php85: Security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.501
- lang/php85/distinfo                                           1.7

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Sat Jun  6 02:42:08 UTC 2026

   Modified Files:
        pkgsrc/lang/php: phpversion.mk
        pkgsrc/lang/php85: distinfo

   Log Message:
   lang/php85: update to 8.5.7

   PHP 8.5.7 (2026-06-04)

   - CLI:
     . Fixed bug GH-21901 (Stale getopt() optional value). (onthebed)

   - Date:
     . Fixed bug GH-18422 (int overflow in php_date_llabs). (iliaal)

   - DOM:
     . Fixed bug GH-22077 (UAF in custom XPath function).
       (afflerbach/David Carlier)

   - Opcache:
     . Fixed tracing JIT crash when a VM interrupt is handled during an observed
       user function call. (Levi Morrison)
     . Fixed bug GH-21746 (Segfault with tracing JIT). (Arnaud)
     . Fixed bug GH-22004 (Assertion failure at ext/opcache/jit/zend_jit_trace.c).
       (Arnaud)
     . Fixed tailcall VM crash when a VM interrupt is handled from a VM helper.
       (Levi Morrison, Arnaud)

   - OpenSSL:
     . Fix compatibility issues with OpenSSL 4.0. (jordikroon, Remi)

   - Standard:
     . Fixed bug GH-21689 (version_compare() incorrectly handles versions ending
       with a dot). (timwolla)

   - URI:
     . Fixed CVE-2026-44927 (In uriparser before 1.0.2, there is pointer
       difference truncation to int in various places). (CVE-2026-44927)
       (Sebastian Pipping)
     . Fixed CVE-2026-44928 (In uriparser before 1.0.2, the function family
       EqualsUri can misclassify two unequal URIs as equal). (CVE-2026-44928)
       (Sebastian Pipping)


To generate a diff of this commit:
cvs rdiff -u -r1.494.2.4 -r1.494.2.5 pkgsrc/lang/php/phpversion.mk
cvs rdiff -u -r1.4.2.1 -r1.4.2.2 pkgsrc/lang/php85/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/php/phpversion.mk
diff -u pkgsrc/lang/php/phpversion.mk:1.494.2.4 pkgsrc/lang/php/phpversion.mk:1.494.2.5
--- pkgsrc/lang/php/phpversion.mk:1.494.2.4     Sat May  9 19:13:10 2026
+++ pkgsrc/lang/php/phpversion.mk       Tue Jun  9 22:44:44 2026
@@ -1,4 +1,4 @@
-# $NetBSD: phpversion.mk,v 1.494.2.4 2026/05/09 19:13:10 bsiegert Exp $
+# $NetBSD: phpversion.mk,v 1.494.2.5 2026/06/09 22:44:44 maya Exp $
 #
 # This file selects a PHP version, based on the user's preferences and
 # the installed packages. It does not add a dependency on the PHP
@@ -113,7 +113,7 @@ PHP74_VERSION=      7.4.33
 PHP82_VERSION= 8.2.31
 PHP83_VERSION= 8.3.31
 PHP84_VERSION= 8.4.20
-PHP85_VERSION= 8.5.6
+PHP85_VERSION= 8.5.7
 
 _VARGROUPS+=   php
 _USER_VARS.php=        PHP_VERSION_DEFAULT

Index: pkgsrc/lang/php85/distinfo
diff -u pkgsrc/lang/php85/distinfo:1.4.2.1 pkgsrc/lang/php85/distinfo:1.4.2.2
--- pkgsrc/lang/php85/distinfo:1.4.2.1  Sat May  9 17:25:26 2026
+++ pkgsrc/lang/php85/distinfo  Tue Jun  9 22:44:44 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.4.2.1 2026/05/09 17:25:26 bsiegert Exp $
+$NetBSD: distinfo,v 1.4.2.2 2026/06/09 22:44:44 maya Exp $
 
-BLAKE2s (php-8.5.6.tar.xz) = 9ddd69e000b551d0534bcf0fecf68bfb270d20fc772e901054e715caba9c7682
-SHA512 (php-8.5.6.tar.xz) = e0ce5430809d5347ffdaba827e2c62fefb570b112014add16be545fd444ec374ebc76c373d5a254930538994a639ddd15508cd1083c4ead8ea0b76e7cead0c7c
-Size (php-8.5.6.tar.xz) = 14392820 bytes
+BLAKE2s (php-8.5.7.tar.xz) = 008b5a92e8777af2bb9df7e20b65ddabc5570146533914bbf1b99283384868a6
+SHA512 (php-8.5.7.tar.xz) = 2d4081b8684936afae946d5cc4d6714a6e40f8a25c9a286fe22190600896ab447293a0a73f58fae09d4543153134fd0b6a1131dccfc2b585406ae2a4d9aa08b7
+Size (php-8.5.7.tar.xz) = 14398060 bytes
 SHA1 (patch-build_Makefile.global) = 570d813a05626f633e2ce380ab6668fdc7e8f030
 SHA1 (patch-build_php.m4) = bb72e38ab391ad587962940ba85e8d4de8633dca
 SHA1 (patch-configure.ac) = 20c95915d5e4aa622d04ee923c626789c44fef11