head 1.6; access; symbols pkgsrc-2026Q3:1.3.0.2 pkgsrc-2026Q3-base:1.3 pkgsrc-2026Q2:1.2.0.4 pkgsrc-2026Q2-base:1.2 pkgsrc-2026Q1:1.2.0.2 pkgsrc-2026Q1-base:1.2; locks; strict; comment @# @; 1.6 date 2026.09.29.06.06.17; author wiz; state Exp; branches; next 1.5; commitid qal4xgy1mkCzPtXG; 1.5 date 2026.09.27.11.37.20; author tnn; state Exp; branches; next 1.4; commitid QJQtnAYom0oZIfXG; 1.4 date 2026.09.24.15.35.55; author taca; state Exp; branches; next 1.3; commitid q5MXbbjZaoFaaTWG; 1.3 date 2026.09.02.19.03.13; author wiz; state Exp; branches; next 1.2; commitid vXszxoxOqka005UG; 1.2 date 2026.01.10.09.10.48; author taca; state Exp; branches; next 1.1; commitid 78WC1vl3Zpi3iPpG; 1.1 date 2026.01.08.13.38.00; author taca; state Exp; branches; next ; commitid h0n1I71fiLUQPApG; desc @@ 1.6 log @*: recursive bump for pcre2 10.49 @ text @# $NetBSD: Makefile,v 1.5 2026/09/27 11:37:20 tnn Exp $ # # We can't omit PKGNAME here to handle PKG_OPTIONS. # PKGNAME= ${PHP_PKG_PREFIX}-${PHP_VERSION} PKGREVISION= 2 CATEGORIES= lang COMMENT= PHP Hypertext Preprocessor version 8.5 LICENSE= php TEST_TARGET= test USE_TOOLS+= autoconf gmake lex LIBTOOL_OVERRIDE= # empty PHP_VERSIONS_ACCEPTED= 85 .include "Makefile.php" CGIDIR= ${PREFIX}/libexec/cgi-bin CONFIGURE_ENV+= lt_cv_path_SED=${SED:Q} MAKE_ENV+= INSTALL_ROOT=${DESTDIR} CONF_FILES= ${PHP_EGDIR}/php.ini-production ${PKG_SYSCONFDIR}/php.ini PLIST_SUBST+= PHPEXTDIR="${PHP_EXTENSION_DIR}" # taken from devel/pkgconf/Makefile PKGCONFIG_PATHS= ${PREFIX}/lib/pkgconfig PKGCONFIG_PATHS+= ${PREFIX}/share/pkgconfig PKGCONFIG_PATHS+= /usr/lib/pkgconfig # At this point, PREFIX is not set yet. .if ${LOCALBASE} != ${X11BASE} PKGCONFIG_PATHS+= ${X11BASE}/lib/pkgconfig .endif PHP_PKGCONFIG_PATH= ${PKGCONFIG_PATHS:ts:} SUBST_FILES.path+= ${WRKDIR}/${PHP_PKGSRC_README:T} REPLACE_PHP= ext/phar/phar/phar.php run-tests.php INSTALLATION_DIRS+= ${CGIDIR} ${PHP_EXTENSION_DIR} ${PHP_EGDIR} \ ${PHP_SHAREDIR} PHP_PKGSRC_README= ../../lang/php/files/README.pkgsrc # Make sure modules can link correctly .if ${OPSYS} == "Darwin" INSTALL_UNSTRIPPED= yes .endif # Darwin < 9 (Mac OS X < 10.5 "Leopard") doesn't have gethostuuid(2) # and lacks the zone memory allocator .if !empty(MACHINE_PLATFORM:MDarwin-[0-8].*-*) CFLAGS+= -DSQLITE_ENABLE_LOCKING_STYLE=0 -DSQLITE_WITHOUT_ZONEMALLOC .endif post-patch: ${CP} ${.CURDIR}/${PHP_PKGSRC_README} ${WRKDIR}/${PHP_PKGSRC_README:T} pre-configure: cd ${WRKSRC} && ${PKGSRC_SETENV} ${CONFIGURE_ENV} autoconf -f post-install: cd ${WRKSRC}; ${INSTALL_DATA} php.ini-development php.ini-production \ ${DESTDIR}${PREFIX}/${PHP_EGDIR} ${INSTALL_DATA} ${WRKDIR}/${PHP_PKGSRC_README:T} \ ${DESTDIR}${PREFIX}/${PHP_SHAREDIR} .include "../../lang/php/phpversion.mk" .include "../../mk/bsd.pkg.mk" @ 1.5 log @*: revbump for pcre2 symbol versioning change @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.4 2026/09/24 15:35:55 taca Exp $ d7 1 a7 1 PKGREVISION= 1 @ 1.4 log @lang/php85: update to 8.5.11 PHP 8.5.11 (2026-09-24) - BCMath: . Fixed out-of-bounds read in bc_is_zero_for_scale() when scale exceeds n_scale. (Ilia Alshanetsky) - Core: . Fixed out-of-bounds reads during automatic UTF-16/32 encoding detection. (Yudai Takada) . Fixed bug GH-15375 (Nested "yield from" skips items after a valid() or next() call on the inner generator). (iliaal) . Fixed bug GH-23232 (lone namespace separator asks the autoloader for an empty class name). (spawnia) . Fixed bug GH-23301 (Nested "yield from" yields a value twice when the middle generator delegates again). (Lazizbek Ergashev) - DOM: . Fixed NamedNodeMap::getNamedItemNS() with an empty URI not matching the null namespace in spec-following mode. (Ilia Alshanetsky) . Fixed stale getElementsByClassName() and other node list caches after className/classList writes and attribute removals. (Ilia Alshanetsky) . Fixed a use-after-free when cloning a DOMNameSpaceNode after DOMDocument::xinclude(). (iliaal) . Fixed a crash in DOMXPath when a php:function callback receives a nodeset and a later callback returns a node from another document. (iliaal) . Fixed bug GH-23331 (UAF when node_list_unlink() skips attribute children that still have a live wrapper). (iliaal) . Fixed a use-after-free when Dom\Element::setAttributeNS() replaces the value of an attribute whose child still has a live wrapper. (iliaal) - GD: . Fixed imageaffinematrixget() and imageaffinematrixconcat() reporting the wrong argument in error messages. (Weilin Du) - FPM: . Fixed bug GH-19320 (FPM UID and GID overflow). (Pratik Bhujel) . Fixed GHSA-62xp-839h-2637 (IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison). (CVE-2026-91768) (Alexandre Daubois) - Intl: . Fixed grapheme_strpos() and grapheme_strrpos() with an empty needle returning UTF-16 offsets instead of grapheme offsets. (Ilia Alshanetsky) . Fixed a memory leak when dumping IntlCalendar instances. (Ilia Alshanetsky) . Fixed a memory leak when iterating IntlBreakIterator::getPartsIterator() results. (iliaal) . Fixed a double-free when IntlGregorianCalendar construction fails after the ICU constructor adopts the TimeZone. (iliaal) . Fixed bug GH-23094 (NumberFormatter parsing offsets use UTF-16 positions for UTF-8 strings). (ColumbusLabs) . Fixed Locale::parseLocale() reading past a trailing '-' or '_'. (iliaal, Xuyang Zhang) . Fixed grapheme_str_split() treating UBRK_DONE as a byte index. (iliaal) . Fixed a leak in Locale::getKeywords() when a keyword value cannot be read. (iliaal) . Fixed a use-after-free when IntlRuleBasedBreakIterator is constructed from compiled rules. (iliaal) - MBString: . Fixed mb_ereg_replace() emitting a NUL or out-of-bounds bytes in the replacement when a \k backref has no closing delimiter. (Ilia Alshanetsky) - MySQLnd: . Fixed GHSA-r6x9-5r99-36j7 (Various packet overreads in mysqlnd wire protocol). (CVE-2025-1218) (Jakub Zelenka, Nora Dossche) - ODBC: . Fixed odbc_field_len(), odbc_field_scale() and odbc_field_type() returning uninitialized memory when SQLColAttribute fails. (Ilia Alshanetsky) - Opcache: . Fixed opcache.protect_memory race under ZTS. (realFlowControl) . Fixed a tracing JIT crash when compiling a side trace for a method of a class that could not be stored in the inheritance cache. (GH-21710) (Arnaud, iliaal) . Fixed a crash when the huge page SHM remap discarded mappings outside the reserved address range. (Piotr Hałas) - OpenSSL: . Fixed GHSA-vvx9-73fr-5jjx (TLS hostname verification falls back to CN after SAN mismatch). (CVE-2026-91769) (Jakub Zelenka) . Fixed GHSA-xr7j-rvgx-xq5p (Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN). (CVE-2026-91767) (Jakub Zelenka) - PDO: . Fixed a leak when a persistent connection failed a liveness check with no other live PDO handle. (iliaal) - PDO_PGSQL: . Fixed PDO::CURSOR_SCROLL statements failing under lazy fetching (PDO::ATTR_PREFETCH => 0). (KentarouTakeda) - PDO Sqlite: . Fixed bug GH-20214 (PDO::FETCH_DEFAULT unexpected behavior with PDOStatement::setFetchMode). (SakiTakamachi) - Phar: . Fixed bug GH-23418 (Use-after-free when looking up mounted directories). (Weilin Du) . Fixed bug GH-23477 (Memory leak on duplicate native Phar manifest entries). (Weilin Du) . Fixed GHSA-j3wh-g957-2m85 (Integer overflow in phar_tar_number() allowing TAR archive entry injection). (CVE-2026-6103) (Jakub Zelenka) - Readline: . Fixed the interactive shell not waiting for the pager process to exit. (Weilin Du) - SOAP: . Fixed WSDL cache corruption when a soap:header defines headerfaults. (Ilia Alshanetsky) . Fixed stack overflow when parsing a WSDL with self-referential schema groups or attributeGroups. (Ilia Alshanetsky) . Fixed GHSA-rgrp-mwpx-f6rm (Unbounded recursion in server-side cleanup_xml_node()). (CVE-2026-91765) (Alexandre Daubois) . Fixed GHSA-cj93-vc83-wgqv (Integer overflow to buffer overflow in SOAP HTTP parsing). (CVE-2025-14181) (Nora Dossche, Jakub Zelenka) - Standard: . Fixed a segfault when a stream filter callback unsets StreamBucket::$data before re-attaching the bucket. (iliaal) . Fixed GHSA-7875-c8px-7q5f (Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header). (CVE-2026-93682) (Ilia Alshanetsky, Jordi Kroon) . Fixed read buffer compaction in php_stream_filter_flush(). (crystarm) . Fixed bug GH-22410 (Incorrect float behavior with large numbers). (arshidkv12) . Fixed GH-23338 (fsockopen()/pfsockopen() ValueError reported wrong argument number for $timeout). (lacatoire) . Fixed bug GH-23576 (Next index for array returned from array_keys() is wrong). (Lazizbek Ergashev) . Fixed GHSA-88hq-2827-7pg6 (Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL). (CVE-2026-92842) (geeknik) . Fixed GHSA-fpwc-w8rq-cr92 (Cross-origin credential leak in HTTP stream wrapper redirects). (CVE-2026-91766) (Alexandre Daubois) - SimpleXML: . Fixed writing to a dimension of the object returned by attributes() not creating the attribute. (Ilia Alshanetsky) . Fixed child elements of the element returned by SimpleXMLElement::addChild() not being accessible by property name when namespaces are involved. (Ilia Alshanetsky) - Windows: . Fixed GHSA-9f67-6fw4-hpfp (Reserved device names are not rejected before file and stream I/O). (CVE-2026-17545) (Shivam Mathur, Jakub Zelenka) - Zip: . Fixed bug GH-17787 (ZipArchive stream stops reading early when the archive is freed while the stream is still open). (Eyüp Can Akman) . Fixed bug GH-23276 (ZipArchive subclass storing its own stream cannot be garbage collected). (Weilin Du, ndossche) - SAPI: . Fixed fuzzer targets failing to build in isolation. (Mrmaxmeier) . Fixed returns uninitialized value on LiteSpeed lsapi SAPI (Go Kudo) @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.3 2026/09/02 19:03:13 wiz Exp $ d7 1 @ 1.3 log @*: recursive bump for pcre2 10.48 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.2 2026/01/10 09:10:48 taca Exp $ a6 1 PKGREVISION= 1 @ 1.2 log @lang/php5: fix build problem of php85-fpm Move PHP_PKGSRC_README from Makefile.php to Makefile. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.1 2026/01/08 13:38:00 taca Exp $ d7 1 @ 1.1 log @lang/php: add package version 8.5.1 PHP is a widely-used open source general-purpose scripting language that is especially suited for web development and can be embedded into HTML. It is modular, and object-oriented. Much of its syntax is borrowed from C, Java and Perl with a couple of unique PHP-specific features thrown in. The language is designed to allow web developers to write dynamically generated pages quickly. PHP 8.5 comes with numerous improvements and new features such as * Built-in URI Extension to parse, normalize and handle URL. * Pipe Operator |> enables chaining callables and passing values. * Clone objects and update properties with the new clone() syntax. * A new attribute #[\NoDiscard] for a function. * Static closures and first-class-callables in constatnt expressisons. * cURL shared handles support. * array_first() and array_last() functions are added to array. * And much much more... @ text @d1 1 a1 1 # $NetBSD$ d40 1 d47 2 @