CVS commit: pkgsrc/lang

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Fri Feb 13 15:26:05 UTC 2026

Modified Files:
        pkgsrc/lang/php: phpversion.mk
        pkgsrc/lang/php84: distinfo

Log Message:
lang/php84: update to 8.4.18

PHP 8.4.18 (2026-02-12)

- Core:
  . Fixed bug GH-20837 (NULL dereference when calling ob_start() in shutdown
    function triggered by bailout in php_output_lock_error()). (timwolla)
  . Fix OSS-Fuzz #471533782 (Infinite loop in GC destructor fiber). (ilutov)
  . Fix OSS-Fuzz #472563272 (Borked block_pass JMP[N]Z optimization). (ilutov)
  . Fixed bug GH-GH-20914 (Internal enums can be cloned and compared). (Arnaud)
  . Fix OSS-Fuzz #474613951 (Leaked parent property default value). (ilutov)
  . Fixed bug GH-20766 (Use-after-free in FE_FREE with GC interaction). (Bob)
  . Fix OSS-Fuzz #471486164 (Broken by-ref assignment to uninitialized hooked
    backing value). (ilutov)
  . Fix OSS-Fuzz #438780145 (Nested finally with repeated return type check may
    uaf). (ilutov)
  . Fixed bug GH-20905 (Lazy proxy bailing __clone assertion). (ilutov)
  . Fixed bug GH-20479 (Hooked object properties overflow). (ndossche)

- Date:
  . Update timelib to 2022.16. (Derick)

- DOM:
  . Fixed GH-21041 (Dom\HTMLDocument corrupts closing tags within scripts).
    (lexborisov)

- MbString:
  . Fixed bug GH-20833 (mb_str_pad() divide by zero if padding string is
    invalid in the encoding). (ndossche)
  . Fixed bug GH-20836 (Stack overflow in mb_convert_variables with
    recursive array references). (alexandre-daubois)

- Opcache:
  . Fixed bug GH-20818 (Segfault in Tracing JIT with object reference).
    (khasinski)

- OpenSSL:
  . Fix memory leaks when sk_X509_new_null() fails. (ndossche)
  . Fix crash when in openssl_x509_parse() when i2s_ASN1_INTEGER() fails.
    (ndossche)
  . Fix crash in openssl_x509_parse() when X509_NAME_oneline() fails.
    (ndossche)

- Phar:
  . Fixed bug GH-20882 (buildFromIterator breaks with missing base directory).
    (ndossche)

- PGSQL:
  . Fixed INSERT/UPDATE queries building with PQescapeIdentifier() and possible
    UB. (David Carlier)

- Readline:
  . Fixed bug GH-18139 (Memory leak when overriding some settings
    via readline_info()). (ndossche)

- SPL:
  . Fixed bug GH-20856 (heap-use-after-free in SplDoublyLinkedList iterator
    when modifying during iteration). (ndossche)

- Standard:
  . Fixed bug #74357 (lchown fails to change ownership of symlink with ZTS)
    (Jakub Zelenka)
  . Fixed bug GH-20843 (var_dump() crash with nested objects)
    (David Carlier)


To generate a diff of this commit:
cvs rdiff -u -r1.490 -r1.491 pkgsrc/lang/php/phpversion.mk
cvs rdiff -u -r1.17 -r1.18 pkgsrc/lang/php84/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/php/phpversion.mk
diff -u pkgsrc/lang/php/phpversion.mk:1.490 pkgsrc/lang/php/phpversion.mk:1.491
--- pkgsrc/lang/php/phpversion.mk:1.490 Mon Jan 19 15:35:56 2026
+++ pkgsrc/lang/php/phpversion.mk       Fri Feb 13 15:26:05 2026
@@ -1,4 +1,4 @@
-# $NetBSD: phpversion.mk,v 1.490 2026/01/19 15:35:56 taca Exp $
+# $NetBSD: phpversion.mk,v 1.491 2026/02/13 15:26:05 taca Exp $
 #
 # This file selects a PHP version, based on the user's preferences and
 # the installed packages. It does not add a dependency on the PHP
@@ -112,7 +112,7 @@ PHP56_VERSION=      5.6.40
 PHP74_VERSION= 7.4.33
 PHP82_VERSION= 8.2.30
 PHP83_VERSION= 8.3.30
-PHP84_VERSION= 8.4.17
+PHP84_VERSION= 8.4.18
 PHP85_VERSION= 8.5.2
 
 _VARGROUPS+=   php

Index: pkgsrc/lang/php84/distinfo
diff -u pkgsrc/lang/php84/distinfo:1.17 pkgsrc/lang/php84/distinfo:1.18
--- pkgsrc/lang/php84/distinfo:1.17     Mon Jan 19 15:32:18 2026
+++ pkgsrc/lang/php84/distinfo  Fri Feb 13 15:26:05 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.17 2026/01/19 15:32:18 taca Exp $
+$NetBSD: distinfo,v 1.18 2026/02/13 15:26:05 taca Exp $
 
-BLAKE2s (php-8.4.17.tar.xz) = 0dfc183447f532f6d967346a646682e7e52438bafc701fb74cea07696950f89b
-SHA512 (php-8.4.17.tar.xz) = 2d270f9093180b1a7d522d7a4e5eb7145cb40ca10d7d1d20b879383ea64e268b9a65104d7fe8d644c1f197a3ad27b9d2a1e460a27296fe93c3489fe7399bb2e6
-Size (php-8.4.17.tar.xz) = 13670792 bytes
+BLAKE2s (php-8.4.18.tar.xz) = 67d0565701e1ba62f5da4c37aab6a0da78c8bc76cefda698a84b68158d7be16e
+SHA512 (php-8.4.18.tar.xz) = 70f52f899268d064b65b3fe54aaa1c650d1d5db228b1708f12e4f57d74050871f15c9896ff3831730f754a4359bc02775775ab7678f6eccf8048ab527d18d732
+Size (php-8.4.18.tar.xz) = 13674716 bytes
 SHA1 (patch-build_Makefile.global) = da9577733497d026315b4702cb19d673053148ed
 SHA1 (patch-build_php.m4) = bb72e38ab391ad587962940ba85e8d4de8633dca
 SHA1 (patch-configure.ac) = 2bdd1d2b1def552032dba5fbeb6140922b72c880