CVS commit: pkgsrc/lang

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Mon Jan 19 15:32:18 UTC 2026

Modified Files:
        pkgsrc/lang/php: phpversion.mk
        pkgsrc/lang/php84: Makefile distinfo

Log Message:
lang/php84: update to 8.4.17

8.4.17 (2025-01-15)

- Core:
  . Fix OSS-Fuzz #465488618 (Wrong assumptions when dumping function signature
    with dynamic class const lookup default argument). (ilutov)
  . Fixed bug GH-20695 (Assertion failure in normalize_value() when parsing
    malformed INI input via parse_ini_string()). (ndossche)
  . Fixed bug GH-20714 (Uncatchable exception thrown in generator). (ilutov)
  . Fixed bug GH-20352 (UAF in php_output_handler_free via re-entrant
    ob_start() during error deactivation). (ndossche)

- Bz2:
  . Fixed bug GH-20620 (bzcompress overflow on large source size).
    (David Carlier)

- DOM:
  . Fixed bug GH-20722 (Null pointer dereference in DOM namespace node cloning
    via clone on malformed objects). (ndossche)
  . Fixed bug GH-20444 (Dom\XMLDocument::C14N() seems broken compared
    to DOMDocument::C14N()). (ndossche)

- GD:
  . Fixed bug GH-20622 (imagestring/imagestringup overflow). (David Carlier)

- Intl:
  . Fix leak in umsg_format_helper(). (ndossche)

- LDAP:
  . Fix memory leak in ldap_set_options(). (ndossche)

- Mbstring:
  . Fixed bug GH-20674 (mb_decode_mimeheader does not handle separator).
    (Yuya Hamada)

- PCNTL:
  . Fixed bug with pcntl_getcpuaffinity() on solaris regarding invalid
    process ids handling. (David Carlier)

- Phar:
  . Fixed bug GH-20732 (Phar::LoadPhar undefined behavior when reading fails).
    (ndossche)
  . Fix SplFileInfo::openFile() in write mode. (ndossche)
  . Fix build on legacy OpenSSL 1.1.0 systems. (Giovanni Giacobbi)
  . Fixed bug #74154 (Phar extractTo creates empty files). (ndossche)

- POSIX:
  . Fixed crash on posix groups to php array creation on macos.
    (David Carlier)

- SPL:
  . Fixed bug GH-20678 (resource created by GlobIterator crashes with fclose()).
    (David Carlier)

- Sqlite3:
  . Fixed bug GH-20699 (SQLite3Result fetchArray return array|false,
    null returned). (ndossche, plusminmax)

- Standard:
  . Fix error check for proc_open() command. (ndossche)
  . Fix memory leak in mail() when header key is numeric. (Girgias)
  . Fixed bug GH-20582 (Heap Buffer Overflow in iptcembed). (ndossche)

- Zlib:
  . Fix OOB gzseek() causing assertion failure. (ndossche)


To generate a diff of this commit:
cvs rdiff -u -r1.487 -r1.488 pkgsrc/lang/php/phpversion.mk
cvs rdiff -u -r1.10 -r1.11 pkgsrc/lang/php84/Makefile
cvs rdiff -u -r1.16 -r1.17 pkgsrc/lang/php84/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/php/phpversion.mk
diff -u pkgsrc/lang/php/phpversion.mk:1.487 pkgsrc/lang/php/phpversion.mk:1.488
--- pkgsrc/lang/php/phpversion.mk:1.487 Thu Jan  8 14:33:02 2026
+++ pkgsrc/lang/php/phpversion.mk       Mon Jan 19 15:32:17 2026
@@ -1,4 +1,4 @@
-# $NetBSD: phpversion.mk,v 1.487 2026/01/08 14:33:02 taca Exp $
+# $NetBSD: phpversion.mk,v 1.488 2026/01/19 15:32:17 taca Exp $
 #
 # This file selects a PHP version, based on the user's preferences and
 # the installed packages. It does not add a dependency on the PHP
@@ -112,7 +112,7 @@ PHP56_VERSION=      5.6.40
 PHP74_VERSION= 7.4.33
 PHP82_VERSION= 8.2.30
 PHP83_VERSION= 8.3.29
-PHP84_VERSION= 8.4.16
+PHP84_VERSION= 8.4.17
 PHP85_VERSION= 8.5.1
 
 _VARGROUPS+=   php

Index: pkgsrc/lang/php84/Makefile
diff -u pkgsrc/lang/php84/Makefile:1.10 pkgsrc/lang/php84/Makefile:1.11
--- pkgsrc/lang/php84/Makefile:1.10     Wed Jan  7 08:47:40 2026
+++ pkgsrc/lang/php84/Makefile  Mon Jan 19 15:32:17 2026
@@ -1,10 +1,9 @@
-# $NetBSD: Makefile,v 1.10 2026/01/07 08:47:40 wiz Exp $
+# $NetBSD: Makefile,v 1.11 2026/01/19 15:32:17 taca Exp $
 
 #
 # We can't omit PKGNAME here to handle PKG_OPTIONS.
 #
 PKGNAME=               ${PHP_PKG_PREFIX}-${PHP_VERSION}
-PKGREVISION=           1
 CATEGORIES=            lang
 
 COMMENT=               PHP Hypertext Preprocessor version 8.4

Index: pkgsrc/lang/php84/distinfo
diff -u pkgsrc/lang/php84/distinfo:1.16 pkgsrc/lang/php84/distinfo:1.17
--- pkgsrc/lang/php84/distinfo:1.16     Fri Dec 19 14:32:34 2025
+++ pkgsrc/lang/php84/distinfo  Mon Jan 19 15:32:18 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.16 2025/12/19 14:32:34 taca Exp $
+$NetBSD: distinfo,v 1.17 2026/01/19 15:32:18 taca Exp $
 
-BLAKE2s (php-8.4.16.tar.xz) = 5f8a62542656e6d142e24b694de8f33b2b3a3e7d2a49c9e96b93188e5c083cf0
-SHA512 (php-8.4.16.tar.xz) = 1943a3622b7d373f7e45ba1467968744a86d2819643459bd6351beffa00bb5f3acb983d6cf3485795f24c959cfc667f1dd6b584e8e76fe752b1a1b0c83211c8a
-Size (php-8.4.16.tar.xz) = 13660836 bytes
+BLAKE2s (php-8.4.17.tar.xz) = 0dfc183447f532f6d967346a646682e7e52438bafc701fb74cea07696950f89b
+SHA512 (php-8.4.17.tar.xz) = 2d270f9093180b1a7d522d7a4e5eb7145cb40ca10d7d1d20b879383ea64e268b9a65104d7fe8d644c1f197a3ad27b9d2a1e460a27296fe93c3489fe7399bb2e6
+Size (php-8.4.17.tar.xz) = 13670792 bytes
 SHA1 (patch-build_Makefile.global) = da9577733497d026315b4702cb19d673053148ed
 SHA1 (patch-build_php.m4) = bb72e38ab391ad587962940ba85e8d4de8633dca
 SHA1 (patch-configure.ac) = 2bdd1d2b1def552032dba5fbeb6140922b72c880