CVS commit: pkgsrc/lang

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Fri Apr 10 15:13:16 UTC 2026

Modified Files:
        pkgsrc/lang/php: phpversion.mk
        pkgsrc/lang/php84: distinfo

Log Message:
lang/php84: update to 8.4.20

PHP 8.4.20 (2026-04-09)

- Bz2:
  . Fix truncation of total output size causing erroneous errors. (ndossche)

- Core:
  . Fixed bugs GH-20875, GH-20873, GH-20854 (Propagate IN_GET guard in
    get_property_ptr_ptr for lazy proxies). (iliaal)

- DOM:
  . Fixed bug GH-21486 (Dom\HTMLDocument parser mangles xml:space and
    xml:lang attributes). (ndossche)

- FFI:
  . Fixed resource leak in FFI::cdef() onsymbol resolution failure.
    (David Carlier)

- GD:
  . Fixed bug GH-21431 (phpinfo() to display libJPEG 10.0 support).
    (David Carlier)

- Opcache:
  . Fixed bug GH-20838 (JIT compiler produces wrong arithmetic results).
    (Dmitry, iliaal)
  . Fixed bug GH-21267 (JIT tracing: infinite loop on FETCH_OBJ_R with
    IS_UNDEF property in polymorphic context). (Dmitry, iliaal)
  . Fixed bug GH-21395 (uaf in jit). (ndossche)

- OpenSSL:
  . Fixed bug GH-21083 (Skip private_key_bits validation for EC/curve-based
    keys). (iliaal)
  . Fix missing error propagation for BIO_printf() calls. (ndossche)

- PCRE:
  . Fixed re-entrancy issue on php_pcre_match_impl, php_pcre_replace_impl,
    php_pcre_split_impl, and php_pcre_grep_impl. (David Carlier)

- PGSQL:
  . Fixed preprocessor silently guarding PGSQL_SUPPRESS_TIMESTAMPS support
    due to a typo. (KentarouTakeda)

- SNMP:
  . Fixed bug GH-21336 (SNMP::setSecurity() undefined behavior with
    NULL arguments). (David Carlier)

- SOAP:
  . Fixed Set-Cookie parsing bug wrong offset while scanning attributes.
    (David Carlier)

- SPL:
  . Fixed bug GH-21454 (missing write lock validation in SplHeap).
    (ndossche)

- Standard:
  . Fixed bug GH-20906 (Assertion failure when messing up output buffers).
    (ndossche)
  . Fixed bug GH-20627 (Cannot identify some avif images with getimagesize).
    (y-guyon)

- Sysvshm:
  . Fix memory leak in shm_get_var() when variable is corrupted. (ndossche)

- XSL:
  . Fix GH-21357 (XSLTProcessor works with DOMDocument, but fails with
    Dom\XMLDocument). (ndossche)
  . Fixed bug GH-21496 (UAF in dom_objects_free_storage).
    (David Carlier/ndossche)


To generate a diff of this commit:
cvs rdiff -u -r1.495 -r1.496 pkgsrc/lang/php/phpversion.mk
cvs rdiff -u -r1.19 -r1.20 pkgsrc/lang/php84/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/php/phpversion.mk
diff -u pkgsrc/lang/php/phpversion.mk:1.495 pkgsrc/lang/php/phpversion.mk:1.496
--- pkgsrc/lang/php/phpversion.mk:1.495 Thu Apr  9 15:26:52 2026
+++ pkgsrc/lang/php/phpversion.mk       Fri Apr 10 15:13:15 2026
@@ -1,4 +1,4 @@
-# $NetBSD: phpversion.mk,v 1.495 2026/04/09 15:26:52 taca Exp $
+# $NetBSD: phpversion.mk,v 1.496 2026/04/10 15:13:15 taca Exp $
 #
 # This file selects a PHP version, based on the user's preferences and
 # the installed packages. It does not add a dependency on the PHP
@@ -112,7 +112,7 @@ PHP56_VERSION=      5.6.40
 PHP74_VERSION= 7.4.33
 PHP82_VERSION= 8.2.30
 PHP83_VERSION= 8.3.30
-PHP84_VERSION= 8.4.19
+PHP84_VERSION= 8.4.20
 PHP85_VERSION= 8.5.5
 
 _VARGROUPS+=   php

Index: pkgsrc/lang/php84/distinfo
diff -u pkgsrc/lang/php84/distinfo:1.19 pkgsrc/lang/php84/distinfo:1.20
--- pkgsrc/lang/php84/distinfo:1.19     Sun Mar 15 15:29:11 2026
+++ pkgsrc/lang/php84/distinfo  Fri Apr 10 15:13:15 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.19 2026/03/15 15:29:11 taca Exp $
+$NetBSD: distinfo,v 1.20 2026/04/10 15:13:15 taca Exp $
 
-BLAKE2s (php-8.4.19.tar.xz) = 19f8c747042bbd61bd9a773684fb4343c0db2dd6749c2d3e0b3019a775efd017
-SHA512 (php-8.4.19.tar.xz) = 1b5ae8cde9ab88a9f53337d7b640434550ef676809d2a521564fceed37fc063d7a6b94b8b7c887b1fb84acf1d1ef862a6c32ccb4d16f846294c2aeaecd85a908
-Size (php-8.4.19.tar.xz) = 13684456 bytes
+BLAKE2s (php-8.4.20.tar.xz) = 77198c86d32681684638802ebd347c61ba36776156ccb94ef03b632962bd4f1e
+SHA512 (php-8.4.20.tar.xz) = 8ec32d7c25bdd2528fb5baafba90175ffa9e94db68a9408e6d006810c6cd22404e8602c7f327b8590371a4f01680f027b3d7a6ddfb51e613e4c7ffccb73196b1
+Size (php-8.4.20.tar.xz) = 13685708 bytes
 SHA1 (patch-build_Makefile.global) = da9577733497d026315b4702cb19d673053148ed
 SHA1 (patch-build_php.m4) = bb72e38ab391ad587962940ba85e8d4de8633dca
 SHA1 (patch-configure.ac) = 2bdd1d2b1def552032dba5fbeb6140922b72c880