CVS commit: [pkgsrc-2025Q2] pkgsrc/lang

["Maya Rashish" <maya%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   maya
Date:           Fri Jul  4 14:22:47 UTC 2025

Modified Files:
        pkgsrc/lang/php [pkgsrc-2025Q2]: phpversion.mk
        pkgsrc/lang/php81 [pkgsrc-2025Q2]: Makefile distinfo

Log Message:
Pullup ticket #6977 - requested by taca
lang/php81: Security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.469
- lang/php81/Makefile                                           1.35
- lang/php81/distinfo                                           1.41

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Fri Jul  4 01:24:52 UTC 2025

   Modified Files:
        pkgsrc/lang/php: phpversion.mk
        pkgsrc/lang/php81: Makefile distinfo

   Log Message:
   lang/php81: update to 8.1.33

   PHP 8.1.33 (2025-07-03)

   - PGSQL:
     . Fixed GHSA-hrwm-9436-5mv3 (pgsql extension does not check for errors during
       escaping). (CVE-2025-1735) (Jakub Zelenka)

   - SOAP:
     . Fixed GHSA-453j-q27h-5p8x (NULL Pointer Dereference in PHP SOAP Extension
       via Large XML Namespace Prefix). (CVE-2025-6491) (Lekssays, nielsdos)

   - Standard:
     . Fixed GHSA-3cr5-j632-f35r (Null byte termination in hostnames).
       (CVE-2025-1220) (Jakub Zelenka)


To generate a diff of this commit:
cvs rdiff -u -r1.466.2.1 -r1.466.2.2 pkgsrc/lang/php/phpversion.mk
cvs rdiff -u -r1.34 -r1.34.2.1 pkgsrc/lang/php81/Makefile
cvs rdiff -u -r1.40 -r1.40.2.1 pkgsrc/lang/php81/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/php/phpversion.mk
diff -u pkgsrc/lang/php/phpversion.mk:1.466.2.1 pkgsrc/lang/php/phpversion.mk:1.466.2.2
--- pkgsrc/lang/php/phpversion.mk:1.466.2.1     Fri Jul  4 14:13:22 2025
+++ pkgsrc/lang/php/phpversion.mk       Fri Jul  4 14:22:47 2025
@@ -1,4 +1,4 @@
-# $NetBSD: phpversion.mk,v 1.466.2.1 2025/07/04 14:13:22 maya Exp $
+# $NetBSD: phpversion.mk,v 1.466.2.2 2025/07/04 14:22:47 maya Exp $
 #
 # This file selects a PHP version, based on the user's preferences and
 # the installed packages. It does not add a dependency on the PHP
@@ -110,7 +110,7 @@ PHPVERSION_MK=      defined
 # Define each PHP's version.
 PHP56_VERSION= 5.6.40
 PHP74_VERSION= 7.4.33
-PHP81_VERSION= 8.1.32
+PHP81_VERSION= 8.1.33
 PHP82_VERSION= 8.2.29
 PHP83_VERSION= 8.3.22
 PHP84_VERSION= 8.4.8

Index: pkgsrc/lang/php81/Makefile
diff -u pkgsrc/lang/php81/Makefile:1.34 pkgsrc/lang/php81/Makefile:1.34.2.1
--- pkgsrc/lang/php81/Makefile:1.34     Sat Jun 14 14:00:12 2025
+++ pkgsrc/lang/php81/Makefile  Fri Jul  4 14:22:47 2025
@@ -1,10 +1,9 @@
-# $NetBSD: Makefile,v 1.34 2025/06/14 14:00:12 taca Exp $
+# $NetBSD: Makefile,v 1.34.2.1 2025/07/04 14:22:47 maya Exp $
 
 #
 # We can't omit PKGNAME here to handle PKG_OPTIONS.
 #
 PKGNAME=               ${PHP_PKG_PREFIX}-${PHP_VERSION}
-PKGREVISION=           5
 CATEGORIES=            lang
 
 COMMENT=               PHP Hypertext Preprocessor version 8.1

Index: pkgsrc/lang/php81/distinfo
diff -u pkgsrc/lang/php81/distinfo:1.40 pkgsrc/lang/php81/distinfo:1.40.2.1
--- pkgsrc/lang/php81/distinfo:1.40     Sat Jun 14 14:00:12 2025
+++ pkgsrc/lang/php81/distinfo  Fri Jul  4 14:22:47 2025
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.40 2025/06/14 14:00:12 taca Exp $
+$NetBSD: distinfo,v 1.40.2.1 2025/07/04 14:22:47 maya Exp $
 
-BLAKE2s (php-8.1.32.tar.xz) = b0555666ee77e5fc629cde2879d0336b1d39324032be82d68ab259cd8150444a
-SHA512 (php-8.1.32.tar.xz) = d8084415ead65d685c68c4264e793abb1322b01e120c2ac09c2e33889a13513fb42401621fcb702e36bc1a3239b317a4c10e20c676bb19eb05749a6d6e646318
-Size (php-8.1.32.tar.xz) = 11893516 bytes
+BLAKE2s (php-8.1.33.tar.xz) = 478daa8c3289445314abf3fa1511ed56ab1204bf21272d89e6db2b901cdbc061
+SHA512 (php-8.1.33.tar.xz) = 657b5e3689edcb83d55c1e3c4403e714dd3f29824a678da622678fff3bfc9d333b5de07e136d856a4e6bc981f104c999797500046df7fefdf3880e76574d8880
+Size (php-8.1.33.tar.xz) = 11898724 bytes
 SHA1 (patch-build_Makefile.global) = a5540dc209ea9b2b696ded4c1a3967eec9727800
 SHA1 (patch-build_php.m4) = 0d1bb2ded23a86b339a453655b7381de129e9274
 SHA1 (patch-configure.ac) = efa879e8304838d3c8cf3851310ce3d9e54c1a1e