CVS commit: [pkgsrc-2026Q2] pkgsrc/lang

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Mon Jul 13 18:24:07 UTC 2026

Modified Files:
        pkgsrc/lang/php [pkgsrc-2026Q2]: phpversion.mk
        pkgsrc/lang/php85 [pkgsrc-2026Q2]: distinfo

Log Message:
Pullup ticket #7166 - requested by taca
lang/php85: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.506
- lang/php85/distinfo                                           1.8

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Sat Jul  4 06:24:46 UTC 2026

   Modified Files:
        pkgsrc/lang/php: phpversion.mk
        pkgsrc/lang/php85: distinfo

   Log Message:
   lang/php85: update to 8.4.23

   PHP 8.5.8 (2026-07-02)

   - Core:
     . Fixed bug GH-22280 (Incorrect compile error for goto to label preceding
       try/finally block). (Pratik Bhujel)
     . Fixed bug GH-22112 (Assertion when error handler throws during NaN to
       bool/string coercion). (iliaal)

   - BCMath:
     . Fixed issues with oversized allocations and signed overflow in bcround()
       and BcMath\Number::round(). (edorian)

   - Date:
     . Fix incorrect recurrence check of DatePeriod::createFromISO8601String().
       (ndossche)

   - Exif:
     . Read correct value for single and double tags. (ndossche)

   - GD:
     . Fixed bug GH-22121 (Double free in gdImageSetStyle() after
       overflow-triggered early return). (iliaal)

   - Intl:
     . Fix incorrect argument positions for invalid start/end arguments in
       transliterator_transliterate().
       (Weilin Du)
     . Fixed IntlTimeZone::getDisplayName() to synchronize object error state
       for invalid display types. (Weilin Du)

   - Lexbor:
     . Merge patch c3a6847. (ilutov, timwolla)

   - Opcache:
     . Fixed bug GH-22265 (Another tailcall vm_interrupt bug). (Levi Morrison)
     . Fixed bug GH-20469 (Unsafe inheritance cache replay with reentrant
       autoloading). (Levi Morrison)
     . Fixed bug GH-21972 (Corrupted variable type when a typed by-value return
       contains a reference wrapper). (Weilin Du)

   - Phar:
     . Fixed a bypass of the magic ".phar" directory protection in
       Phar::addEmptyDir() for paths starting with "/.phar", while allowing
       non-magic directory names that merely share the ".phar" prefix. (Weilin Du)

   - Reflection:
     . Preserve class-name case in ReflectionClass::getProperty() error messages
       and autoloading. (jorgsowa)

   - SOAP:
     . Fixed bug GH-22218 (SoapServer::handle() crash on $_SERVER not being
       an array). (David Carlier / Rex-Reynolds)
     . Fixed bug GH-22285 (Soap server requires the raw input to be passed
       to $server->handle). (David Carlier / ndossche)

   - Sqlite:
     . Fix error checks for column retrieval. (ndossche)

   - URI:
     . Add LEXBOR_STATIC to CFLAGS_URI on Windows so ext/uri does not see
       LXB_API as __declspec(dllimport) when linked statically into PHP.
       (Luther Monson)
     . Clean error logs before each Uri\WhatWg\Url wither call so that errors from
       previous wither calls are not returned the next time a UrlValidationError
       is thrown. (kocsismate)

   - Zip:
     . Fixed error-related memory leaks. (ndossche)

   - Zlib:
     . Fixed memory leak if deflate initialization fails and there is a dict.
       (ndossche)
     . Fixed memory leak in inflate_add(). (ndossche)


To generate a diff of this commit:
cvs rdiff -u -r1.502.2.3 -r1.502.2.4 pkgsrc/lang/php/phpversion.mk
cvs rdiff -u -r1.7 -r1.7.2.1 pkgsrc/lang/php85/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/php/phpversion.mk
diff -u pkgsrc/lang/php/phpversion.mk:1.502.2.3 pkgsrc/lang/php/phpversion.mk:1.502.2.4
--- pkgsrc/lang/php/phpversion.mk:1.502.2.3     Mon Jul 13 17:30:47 2026
+++ pkgsrc/lang/php/phpversion.mk       Mon Jul 13 18:24:06 2026
@@ -1,4 +1,4 @@
-# $NetBSD: phpversion.mk,v 1.502.2.3 2026/07/13 17:30:47 bsiegert Exp $
+# $NetBSD: phpversion.mk,v 1.502.2.4 2026/07/13 18:24:06 bsiegert Exp $
 #
 # This file selects a PHP version, based on the user's preferences and
 # the installed packages. It does not add a dependency on the PHP
@@ -113,7 +113,7 @@ PHP74_VERSION=      7.4.33
 PHP82_VERSION= 8.2.32
 PHP83_VERSION= 8.3.32
 PHP84_VERSION= 8.4.23
-PHP85_VERSION= 8.5.7
+PHP85_VERSION= 8.5.8
 
 _VARGROUPS+=   php
 _USER_VARS.php=        PHP_VERSION_DEFAULT

Index: pkgsrc/lang/php85/distinfo
diff -u pkgsrc/lang/php85/distinfo:1.7 pkgsrc/lang/php85/distinfo:1.7.2.1
--- pkgsrc/lang/php85/distinfo:1.7      Sat Jun  6 02:42:08 2026
+++ pkgsrc/lang/php85/distinfo  Mon Jul 13 18:24:06 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.7 2026/06/06 02:42:08 taca Exp $
+$NetBSD: distinfo,v 1.7.2.1 2026/07/13 18:24:06 bsiegert Exp $
 
-BLAKE2s (php-8.5.7.tar.xz) = 008b5a92e8777af2bb9df7e20b65ddabc5570146533914bbf1b99283384868a6
-SHA512 (php-8.5.7.tar.xz) = 2d4081b8684936afae946d5cc4d6714a6e40f8a25c9a286fe22190600896ab447293a0a73f58fae09d4543153134fd0b6a1131dccfc2b585406ae2a4d9aa08b7
-Size (php-8.5.7.tar.xz) = 14398060 bytes
+BLAKE2s (php-8.5.8.tar.xz) = 1ab2203df6ba434faa204b676408fcb9d92a6f8fc5b2a8fa378c941ae015925c
+SHA512 (php-8.5.8.tar.xz) = 9c58a121f91a23ec78834cb89b504031ba4d5d8ecb501c3de2172a315f2dad8a1dc39234e39f7b0e70c278c880a13f1eb198858fa7f1ee028701b583dbfbde28
+Size (php-8.5.8.tar.xz) = 14410156 bytes
 SHA1 (patch-build_Makefile.global) = 570d813a05626f633e2ce380ab6668fdc7e8f030
 SHA1 (patch-build_php.m4) = bb72e38ab391ad587962940ba85e8d4de8633dca
 SHA1 (patch-configure.ac) = 20c95915d5e4aa622d04ee923c626789c44fef11