CVS commit: [pkgsrc-2026Q3] pkgsrc/lang

["Maya Rashish" <maya%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   maya
Date:           Wed Oct 21 14:47:58 UTC 2026

Modified Files:
        pkgsrc/lang/php [pkgsrc-2026Q3]: phpversion.mk
        pkgsrc/lang/php83 [pkgsrc-2026Q3]: distinfo

Log Message:
Pullup ticket #7308 - requested by taca
lang/php83: Security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.519
- lang/php83/Makefile                                           1.26
- lang/php83/distinfo                                           1.38

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Wed Oct 21 13:56:31 UTC 2026

   Modified Files:
        pkgsrc/lang/php: phpversion.mk
        pkgsrc/lang/php83: Makefile distinfo

   Log Message:
   lang/php83: update to 8.3.36

   PHP 8.3.36 (2026-10-22)

   - Core:
     . Fixed GHSA-w8hw-w9fx-j79w, GHSA-6wmf-4rv5-p3rp (Avoid state corruption via
       bailout). (CVE-2026-109618, CVE-2026-109619) (Arnaud, ilutov, Jakub Zelenka,
       ndossche, Nicolas Grekas)


To generate a diff of this commit:
cvs rdiff -u -r1.513.2.5 -r1.513.2.6 pkgsrc/lang/php/phpversion.mk
cvs rdiff -u -r1.36.2.1 -r1.36.2.2 pkgsrc/lang/php83/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/php/phpversion.mk
diff -u pkgsrc/lang/php/phpversion.mk:1.513.2.5 pkgsrc/lang/php/phpversion.mk:1.513.2.6
--- pkgsrc/lang/php/phpversion.mk:1.513.2.5     Wed Oct 21 14:42:30 2026
+++ pkgsrc/lang/php/phpversion.mk       Wed Oct 21 14:47:58 2026
@@ -1,4 +1,4 @@
-# $NetBSD: phpversion.mk,v 1.513.2.5 2026/10/21 14:42:30 maya Exp $
+# $NetBSD: phpversion.mk,v 1.513.2.6 2026/10/21 14:47:58 maya Exp $
 #
 # This file selects a PHP version, based on the user's preferences and
 # the installed packages. It does not add a dependency on the PHP
@@ -111,7 +111,7 @@ PHPVERSION_MK=      defined
 PHP56_VERSION= 5.6.40
 PHP74_VERSION= 7.4.33
 PHP82_VERSION= 8.2.35
-PHP83_VERSION= 8.3.35
+PHP83_VERSION= 8.3.36
 PHP84_VERSION= 8.4.26
 PHP85_VERSION= 8.5.11
 

Index: pkgsrc/lang/php83/distinfo
diff -u pkgsrc/lang/php83/distinfo:1.36.2.1 pkgsrc/lang/php83/distinfo:1.36.2.2
--- pkgsrc/lang/php83/distinfo:1.36.2.1 Tue Oct 20 23:11:52 2026
+++ pkgsrc/lang/php83/distinfo  Wed Oct 21 14:47:58 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.36.2.1 2026/10/20 23:11:52 maya Exp $
+$NetBSD: distinfo,v 1.36.2.2 2026/10/21 14:47:58 maya Exp $
 
-BLAKE2s (php-8.3.35.tar.xz) = d6578dbb842554aca882e8d4de0cc0ae9654fbc6e0cd164f0112a6390c14768a
-SHA512 (php-8.3.35.tar.xz) = 40afcfb15a974b147e470c16809b96db0d6cd03e83cc77c71d6fd8e946cc707eb3d783c0e6452639cf644857a52ef46e0e0c25efeff464aaa15eac8aa8ecd2bf
-Size (php-8.3.35.tar.xz) = 12623068 bytes
+BLAKE2s (php-8.3.36.tar.xz) = a402850847bf8573c5361c53843f5d56339adc367660a977ee19bfcc4fd02679
+SHA512 (php-8.3.36.tar.xz) = fe8dbd2ecd58026b8d636a1e0e48d369779eeecd13db28c6f25e831a4e3ff72fadb8c005dc6fab2da518ee199fc48f66aa95297e44f5e569078aa12c529f6039
+Size (php-8.3.36.tar.xz) = 12669456 bytes
 SHA1 (patch-TSRM_TSRM.c) = 278007810b74fa7a9cd971dac051d6a2ea0ad90d
 SHA1 (patch-TSRM_TSRM.h) = 70ebc03a611124d76d6813f619ff18b3a8fbf1e8
 SHA1 (patch-build_Makefile.global) = 25ee73157c012aa731a2979cb0546ea94aa5ee16