CVS commit: pkgsrc/lang

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Fri Jul 31 04:46:42 UTC 2026

Modified Files:
        pkgsrc/lang/php: phpversion.mk
        pkgsrc/lang/php82: distinfo

Log Message:
lang/php82: update to 8.2.33

PHP 8.2.33 (2026-07-30)

- Date:
  . Fixed leak on double DatePeriod::__construct() call. (ilutov)

- GD:
  . Upgrade libgd. (CVE-2026-9672) (Pierre Joye)

- PGSQL:
  . Fixed GHSA-7qpv-r5mr-78m4 (SQL injection via E'...' backslash breakout).
    (CVE-2026-17543) (ilutov)

- Phar:
  . Fixed GHSA-vc5h-9ppw-p5f3 (Crash via recursive symlinks). (CVE-2026-7260)
    (Jakub Zelenka)


To generate a diff of this commit:
cvs rdiff -u -r1.507 -r1.508 pkgsrc/lang/php/phpversion.mk
cvs rdiff -u -r1.37 -r1.38 pkgsrc/lang/php82/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/php/phpversion.mk
diff -u pkgsrc/lang/php/phpversion.mk:1.507 pkgsrc/lang/php/phpversion.mk:1.508
--- pkgsrc/lang/php/phpversion.mk:1.507 Fri Jul 24 15:39:08 2026
+++ pkgsrc/lang/php/phpversion.mk       Fri Jul 31 04:46:42 2026
@@ -1,4 +1,4 @@
-# $NetBSD: phpversion.mk,v 1.507 2026/07/24 15:39:08 taca Exp $
+# $NetBSD: phpversion.mk,v 1.508 2026/07/31 04:46:42 taca Exp $
 #
 # This file selects a PHP version, based on the user's preferences and
 # the installed packages. It does not add a dependency on the PHP
@@ -110,7 +110,7 @@ PHPVERSION_MK=      defined
 # Define each PHP's version.
 PHP56_VERSION= 5.6.40
 PHP74_VERSION= 7.4.33
-PHP82_VERSION= 8.2.32
+PHP82_VERSION= 8.2.33
 PHP83_VERSION= 8.3.32
 PHP84_VERSION= 8.4.23
 PHP85_VERSION= 8.5.8

Index: pkgsrc/lang/php82/distinfo
diff -u pkgsrc/lang/php82/distinfo:1.37 pkgsrc/lang/php82/distinfo:1.38
--- pkgsrc/lang/php82/distinfo:1.37     Sat Jul  4 06:19:04 2026
+++ pkgsrc/lang/php82/distinfo  Fri Jul 31 04:46:42 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.37 2026/07/04 06:19:04 taca Exp $
+$NetBSD: distinfo,v 1.38 2026/07/31 04:46:42 taca Exp $
 
-BLAKE2s (php-8.2.32.tar.xz) = bbd27c08366f0a1dce746c417edbfbbb60667947bdd308aa3bd5c6a66063ddec
-SHA512 (php-8.2.32.tar.xz) = 7411eb65ba5c50a8c793295fa6b635fd660c8e77586be64b25c86993080b1a31af4f2c6656d864af905d6cbaa11262eeeb620e91d24504e6e64ba5c100e07542
-Size (php-8.2.32.tar.xz) = 12162364 bytes
+BLAKE2s (php-8.2.33.tar.xz) = 79702ce4c202b8aa16f5803abd3e7b66127d732bb4032dc08538696e1bbe0289
+SHA512 (php-8.2.33.tar.xz) = 4d96978f1f59a61c1c49bcb5e884799805ba26d4dac9e1bdaeaf659de85e1c025df765f4cdb8b1ea957519fd62cd54c060611abc2a11f9828c53d407077992eb
+Size (php-8.2.33.tar.xz) = 12166568 bytes
 SHA1 (patch-build_Makefile.global) = 87c533087a536649b5f51108ef4f4b72c8efc5b2
 SHA1 (patch-build_php.m4) = 465d2896c8c4d88c325414caf221e1f2aec27fc3
 SHA1 (patch-configure.ac) = 97d6378ca03682aca635af45df3e7d777fd1d787