CVS commit: pkgsrc/lang

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Fri Jul 31 04:49:00 UTC 2026

Modified Files:
        pkgsrc/lang/php: phpversion.mk
        pkgsrc/lang/php83: distinfo

Log Message:
lang/php83: update to 8.3.33

PHP 8.3.33 (2026-07-30)

- Date:
  . Fixed leak on double DatePeriod::__construct() call. (ilutov)

- GD:
  . Upgrade libgd. (CVE-2026-9672) (Pierre Joye)

- PGSQL:
  . Fixed GHSA-7qpv-r5mr-78m4 (SQL injection via E'...' backslash breakout).
    (CVE-2026-17543) (ilutov)

- Phar:
  . Fixed GHSA-vc5h-9ppw-p5f3 (Crash via recursive symlinks). (CVE-2026-7260)
    (Jakub Zelenka)


To generate a diff of this commit:
cvs rdiff -u -r1.508 -r1.509 pkgsrc/lang/php/phpversion.mk
cvs rdiff -u -r1.35 -r1.36 pkgsrc/lang/php83/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/php/phpversion.mk
diff -u pkgsrc/lang/php/phpversion.mk:1.508 pkgsrc/lang/php/phpversion.mk:1.509
--- pkgsrc/lang/php/phpversion.mk:1.508 Fri Jul 31 04:46:42 2026
+++ pkgsrc/lang/php/phpversion.mk       Fri Jul 31 04:49:00 2026
@@ -1,4 +1,4 @@
-# $NetBSD: phpversion.mk,v 1.508 2026/07/31 04:46:42 taca Exp $
+# $NetBSD: phpversion.mk,v 1.509 2026/07/31 04:49:00 taca Exp $
 #
 # This file selects a PHP version, based on the user's preferences and
 # the installed packages. It does not add a dependency on the PHP
@@ -111,7 +111,7 @@ PHPVERSION_MK=      defined
 PHP56_VERSION= 5.6.40
 PHP74_VERSION= 7.4.33
 PHP82_VERSION= 8.2.33
-PHP83_VERSION= 8.3.32
+PHP83_VERSION= 8.3.33
 PHP84_VERSION= 8.4.23
 PHP85_VERSION= 8.5.8
 

Index: pkgsrc/lang/php83/distinfo
diff -u pkgsrc/lang/php83/distinfo:1.35 pkgsrc/lang/php83/distinfo:1.36
--- pkgsrc/lang/php83/distinfo:1.35     Sat Jul  4 06:21:01 2026
+++ pkgsrc/lang/php83/distinfo  Fri Jul 31 04:49:00 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.35 2026/07/04 06:21:01 taca Exp $
+$NetBSD: distinfo,v 1.36 2026/07/31 04:49:00 taca Exp $
 
-BLAKE2s (php-8.3.32.tar.xz) = 89ccb2d71d9dd4c8aefa081ce0b2a8b9ecfeef3d307aa28b5a1e58f38e9f82bd
-SHA512 (php-8.3.32.tar.xz) = 125683403ae0a300b4537a4493568e06d79cb27c57739c1c37af4b0bf869b484633247d03c4df860d5ab0aa0ccc3a06c66ff0b01b4415ff6d4f6232324c60c88
-Size (php-8.3.32.tar.xz) = 12606844 bytes
+BLAKE2s (php-8.3.33.tar.xz) = 1b62738e5268a04665f8c76d4f59be3df8a3d8bfae78f4dcfd098331d643a103
+SHA512 (php-8.3.33.tar.xz) = e2340294b11ae47ba527018d700b6d896f73e04d06a8cdf099a60380f06b3899adaca01fe654bd9ac8e2dc5f3ff73c94ab1801a006a83558b222e448edd847dc
+Size (php-8.3.33.tar.xz) = 12613000 bytes
 SHA1 (patch-TSRM_TSRM.c) = 278007810b74fa7a9cd971dac051d6a2ea0ad90d
 SHA1 (patch-TSRM_TSRM.h) = 70ebc03a611124d76d6813f619ff18b3a8fbf1e8
 SHA1 (patch-build_Makefile.global) = 25ee73157c012aa731a2979cb0546ea94aa5ee16