CVS commit: [pkgsrc-2025Q2] pkgsrc/lang

["Maya Rashish" <maya%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   maya
Date:           Fri Jul  4 14:13:22 UTC 2025

Modified Files:
        pkgsrc/lang/php [pkgsrc-2025Q2]: phpversion.mk
        pkgsrc/lang/php82 [pkgsrc-2025Q2]: Makefile distinfo

Log Message:
Pullup ticket #6976 - requested by taca
lang/php82: Security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.468
- lang/php82/Makefile                                           1.21
- lang/php82/distinfo                                           1.34

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Fri Jul  4 01:23:50 UTC 2025

   Modified Files:
        pkgsrc/lang/php: phpversion.mk
        pkgsrc/lang/php82: Makefile distinfo

   Log Message:
   lang/php82: update to 8.2.29

   PHP 8.2.29 (2025-07-03)

   - PGSQL:
     . Fixed GHSA-hrwm-9436-5mv3 (pgsql extension does not check for errors during
       escaping). (CVE-2025-1735) (Jakub Zelenka)

   - SOAP:
     . Fixed GHSA-453j-q27h-5p8x (NULL Pointer Dereference in PHP SOAP Extension
       via Large XML Namespace Prefix). (CVE-2025-6491) (Lekssays, nielsdos)

   - Standard:
     . Fixed GHSA-3cr5-j632-f35r (Null byte termination in hostnames).
       (CVE-2025-1220) (Jakub Zelenka)


To generate a diff of this commit:
cvs rdiff -u -r1.466 -r1.466.2.1 pkgsrc/lang/php/phpversion.mk
cvs rdiff -u -r1.20 -r1.20.2.1 pkgsrc/lang/php82/Makefile
cvs rdiff -u -r1.33 -r1.33.2.1 pkgsrc/lang/php82/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/php/phpversion.mk
diff -u pkgsrc/lang/php/phpversion.mk:1.466 pkgsrc/lang/php/phpversion.mk:1.466.2.1
--- pkgsrc/lang/php/phpversion.mk:1.466 Sun Jun  8 16:27:30 2025
+++ pkgsrc/lang/php/phpversion.mk       Fri Jul  4 14:13:22 2025
@@ -1,4 +1,4 @@
-# $NetBSD: phpversion.mk,v 1.466 2025/06/08 16:27:30 taca Exp $
+# $NetBSD: phpversion.mk,v 1.466.2.1 2025/07/04 14:13:22 maya Exp $
 #
 # This file selects a PHP version, based on the user's preferences and
 # the installed packages. It does not add a dependency on the PHP
@@ -111,7 +111,7 @@ PHPVERSION_MK=      defined
 PHP56_VERSION= 5.6.40
 PHP74_VERSION= 7.4.33
 PHP81_VERSION= 8.1.32
-PHP82_VERSION= 8.2.28
+PHP82_VERSION= 8.2.29
 PHP83_VERSION= 8.3.22
 PHP84_VERSION= 8.4.8
 

Index: pkgsrc/lang/php82/Makefile
diff -u pkgsrc/lang/php82/Makefile:1.20 pkgsrc/lang/php82/Makefile:1.20.2.1
--- pkgsrc/lang/php82/Makefile:1.20     Wed Jun 11 14:58:27 2025
+++ pkgsrc/lang/php82/Makefile  Fri Jul  4 14:13:22 2025
@@ -1,10 +1,9 @@
-# $NetBSD: Makefile,v 1.20 2025/06/11 14:58:27 taca Exp $
+# $NetBSD: Makefile,v 1.20.2.1 2025/07/04 14:13:22 maya Exp $
 
 #
 # We can't omit PKGNAME here to handle PKG_OPTIONS.
 #
 PKGNAME=               ${PHP_PKG_PREFIX}-${PHP_VERSION}
-PKGREVISION=           4
 CATEGORIES=            lang
 
 COMMENT=               PHP Hypertext Preprocessor version 8.2

Index: pkgsrc/lang/php82/distinfo
diff -u pkgsrc/lang/php82/distinfo:1.33 pkgsrc/lang/php82/distinfo:1.33.2.1
--- pkgsrc/lang/php82/distinfo:1.33     Wed Jun 11 14:58:27 2025
+++ pkgsrc/lang/php82/distinfo  Fri Jul  4 14:13:22 2025
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.33 2025/06/11 14:58:27 taca Exp $
+$NetBSD: distinfo,v 1.33.2.1 2025/07/04 14:13:22 maya Exp $
 
-BLAKE2s (php-8.2.28.tar.xz) = 8fb6d1b81c1a42a39dbe7cfc3bf6982bd54766c6cc1ac714273f55a001635064
-SHA512 (php-8.2.28.tar.xz) = af2a4f43da756a78f762dbd2b9e589e52864c7069fd55a6a2b900e32a08728a7d69b80577dc79b5d4a86993846a2232b809b75ae415344935610a3934b10c6ba
-Size (php-8.2.28.tar.xz) = 12147756 bytes
+BLAKE2s (php-8.2.29.tar.xz) = 36602c9e5e59adcc6f94156a3c5dff25622189ee3eb1736a7230c49253705f7c
+SHA512 (php-8.2.29.tar.xz) = 36d389e43a9d6bdc558f5e949f54e126c6fd4bf00da572e061e4e4c2f62ffeb292a34371486d3a64b85ab4a18678f7d84b2e3628e0ddc723a7757e90fecdbf92
+Size (php-8.2.29.tar.xz) = 12162364 bytes
 SHA1 (patch-build_Makefile.global) = 87c533087a536649b5f51108ef4f4b72c8efc5b2
 SHA1 (patch-build_php.m4) = 465d2896c8c4d88c325414caf221e1f2aec27fc3
 SHA1 (patch-configure.ac) = 97d6378ca03682aca635af45df3e7d777fd1d787