CVS commit: [pkgsrc-2025Q2] pkgsrc/lang

["Maya Rashish" <maya%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   maya
Date:           Fri Jul  4 14:43:39 UTC 2025

Modified Files:
        pkgsrc/lang/php [pkgsrc-2025Q2]: phpversion.mk
        pkgsrc/lang/php83 [pkgsrc-2025Q2]: Makefile distinfo

Log Message:
Pullup ticket #6978 - requested by taca
lang/php83: Security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.470
- lang/php83/Makefile                                           1.17
- lang/php83/distinfo                                           1.26

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Fri Jul  4 01:25:48 UTC 2025

   Modified Files:
        pkgsrc/lang/php: phpversion.mk
        pkgsrc/lang/php83: Makefile distinfo

   Log Message:
   lang/php83: update to 8.3.23

   PHP 8.3.23 (2025-07-03)

   - Core:
     . Fixed GH-18695 (zend_ast_export() - float number is not preserved).
       (Oleg Efimov)
     . Do not delete main chunk in zend_gc. (danog, Arnaud)
     . Fix compile issues with zend_alloc and some non-default options. (nielsdos)

   - Curl:
     . Fix memory leak when setting a list via curl_setopt fails. (nielsdos)
     . Fix incorrect OpenSSL version detection. (Peter Kokot)

   - Date:
     . Fix leaks with multiple calls to DatePeriod iterator current(). (nielsdos)

   - FPM:
     . Fixed GH-18662 (fpm_get_status segfault). (txuna)

   - Hash:
     . Fixed bug GH-14551 (PGO build fails with xxhash). (nielsdos)

   - Intl:
     . Fix memory leak in intl_datetime_decompose() on failure. (nielsdos)
     . Fix memory leak in locale lookup on failure. (nielsdos)

   - ODBC:
     . Fix memory leak on php_odbc_fetch_hash() failure. (nielsdos)

   - Opcache:
     . Fixed bug GH-18743 (Incompatibility in Inline TLS Assembly on Alpine 3.22).
       (nielsdos, Arnaud)

   - OpenSSL:
     . Fix memory leak of X509_STORE in php_openssl_setup_verify() on failure.
       (nielsdos)
     . Fixed bug #74796 (Requests through http proxy set peer name).
       (Jakub Zelenka)

   - PGSQL:
     . Fixed GHSA-hrwm-9436-5mv3 (pgsql extension does not check for errors during
       escaping). (CVE-2025-1735) (Jakub Zelenka)

   - Phar:
     . Add missing filter cleanups on phar failure. (nielsdos)
     . Fixed bug GH-18642 (Signed integer overflow in ext/phar fseek). (nielsdos)

   - PHPDBG:
     . Fix 'phpdbg --help' segfault on shutdown with USE_ZEND_ALLOC=0. (nielsdos)

   - PDO ODBC:
     . Fix memory leak if WideCharToMultiByte() fails. (nielsdos)

   - PGSQL:
     . Fix warning not being emitted when failure to cancel a query with
       pg_cancel_query(). (Girgias)

   - Random:
     . Fix reference type confusion and leak in user random engine.
       (nielsdos, timwolla)

   - Readline:
     . Fix memory leak when calloc() fails in php_readline_completion_cb().
       (nielsdos)

   - SOAP:
     . Fix memory leaks in php_http.c when call_user_function() fails. (nielsdos)
     . Fixed GHSA-453j-q27h-5p8x (NULL Pointer Dereference in PHP SOAP Extension
       via Large XML Namespace Prefix). (CVE-2025-6491) (Lekssays, nielsdos)

   - Standard:
     . Fixed GHSA-3cr5-j632-f35r (Null byte termination in hostnames).
       (CVE-2025-1220) (Jakub Zelenka)

   - Tidy:
     . Fix memory leak in tidy output handler on error. (nielsdos)
     . Fix tidyOptIsReadonly deprecation, using tidyOptGetCategory. (David Carlier)


To generate a diff of this commit:
cvs rdiff -u -r1.466.2.2 -r1.466.2.3 pkgsrc/lang/php/phpversion.mk
cvs rdiff -u -r1.16 -r1.16.2.1 pkgsrc/lang/php83/Makefile
cvs rdiff -u -r1.25 -r1.25.2.1 pkgsrc/lang/php83/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/php/phpversion.mk
diff -u pkgsrc/lang/php/phpversion.mk:1.466.2.2 pkgsrc/lang/php/phpversion.mk:1.466.2.3
--- pkgsrc/lang/php/phpversion.mk:1.466.2.2     Fri Jul  4 14:22:47 2025
+++ pkgsrc/lang/php/phpversion.mk       Fri Jul  4 14:43:38 2025
@@ -1,4 +1,4 @@
-# $NetBSD: phpversion.mk,v 1.466.2.2 2025/07/04 14:22:47 maya Exp $
+# $NetBSD: phpversion.mk,v 1.466.2.3 2025/07/04 14:43:38 maya Exp $
 #
 # This file selects a PHP version, based on the user's preferences and
 # the installed packages. It does not add a dependency on the PHP
@@ -112,7 +112,7 @@ PHP56_VERSION=      5.6.40
 PHP74_VERSION= 7.4.33
 PHP81_VERSION= 8.1.33
 PHP82_VERSION= 8.2.29
-PHP83_VERSION= 8.3.22
+PHP83_VERSION= 8.3.23
 PHP84_VERSION= 8.4.8
 
 _VARGROUPS+=   php

Index: pkgsrc/lang/php83/Makefile
diff -u pkgsrc/lang/php83/Makefile:1.16 pkgsrc/lang/php83/Makefile:1.16.2.1
--- pkgsrc/lang/php83/Makefile:1.16     Wed Jun 11 14:58:27 2025
+++ pkgsrc/lang/php83/Makefile  Fri Jul  4 14:43:38 2025
@@ -1,10 +1,9 @@
-# $NetBSD: Makefile,v 1.16 2025/06/11 14:58:27 taca Exp $
+# $NetBSD: Makefile,v 1.16.2.1 2025/07/04 14:43:38 maya Exp $
 
 #
 # We can't omit PKGNAME here to handle PKG_OPTIONS.
 #
 PKGNAME=               ${PHP_PKG_PREFIX}-${PHP_VERSION}
-PKGREVISION=           1
 CATEGORIES=            lang
 
 COMMENT=               PHP Hypertext Preprocessor version 8.3

Index: pkgsrc/lang/php83/distinfo
diff -u pkgsrc/lang/php83/distinfo:1.25 pkgsrc/lang/php83/distinfo:1.25.2.1
--- pkgsrc/lang/php83/distinfo:1.25     Wed Jun 11 14:58:27 2025
+++ pkgsrc/lang/php83/distinfo  Fri Jul  4 14:43:38 2025
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.25 2025/06/11 14:58:27 taca Exp $
+$NetBSD: distinfo,v 1.25.2.1 2025/07/04 14:43:38 maya Exp $
 
-BLAKE2s (php-8.3.22.tar.xz) = 90934219c8efa794845cd474bc518eb9e6c3d131f85505cf2a153c5693e9dbf1
-SHA512 (php-8.3.22.tar.xz) = 58a107531bb6a28c058fd45a6fd2cab049ebd1ca541729dea2e9c08bd1cbe25279fdb30a10da138efd2ccad424c4fe0b06b5a40c34aad249ceed1cfae3110b67
-Size (php-8.3.22.tar.xz) = 12555076 bytes
+BLAKE2s (php-8.3.23.tar.xz) = dd18090efa68c7130d0ca99a8e2c31644e30fa1e23c363f7fc9ed23518e43ce1
+SHA512 (php-8.3.23.tar.xz) = c3dd534d5597ff9c1b64bfd1662984ef768030cd418e11e594f80e3e851e15e0d2da9ed1639c3e367a8e849b22bcd97e0117b4e19265fa2c86edd747a7c39191
+Size (php-8.3.23.tar.xz) = 12577624 bytes
 SHA1 (patch-TSRM_TSRM.c) = 278007810b74fa7a9cd971dac051d6a2ea0ad90d
 SHA1 (patch-TSRM_TSRM.h) = 70ebc03a611124d76d6813f619ff18b3a8fbf1e8
 SHA1 (patch-build_Makefile.global) = 25ee73157c012aa731a2979cb0546ea94aa5ee16