php8.4 (8.4.16-1) unstable; urgency=medium
authorOndřej Surý <ondrej@debian.org>
Thu, 18 Dec 2025 20:02:33 +0000 (21:02 +0100)
committerOndřej Surý <ondrej@debian.org>
Thu, 18 Dec 2025 20:02:33 +0000 (21:02 +0100)
commit0e5e91008190042b27f018f42542887029d177cf
tree587e426f0c4f9d1e71892156daffa7380772c569
parent04b930c809a7a1e391557a581cfb2d6237740327
parentda387d8379ad8f8dcda5c262830d97bfda5ba2f9
php8.4 (8.4.16-1) unstable; urgency=medium

  * Add preliminary LiteSpeed SAPI support
  * New upstream version 8.4.16
   + [CVE-2025-14180]: Fixed GHSA-8xr5-qppj-gvwj (PDO quoting result null
     deref).
   + [CVE-2025-14178]: Fixed GHSA-h96m-rvf9-jgm2 (Heap buffer overflow in
     array_merge()).
   + [CVE-2025-14177]: Fixed GHSA-3237-qqm7-mfv7 (Information Leak of
     Memory in getimagesize).

[dgit import unpatched php8.4 8.4.16-1]
187 files changed:
debian/PEAR-Builder-print-info-about-php-dev.patch
debian/README.Debian.security
debian/README.source
debian/changelog
debian/compat
debian/control
debian/control.in
debian/copyright
debian/freexian-dists
debian/gbp.conf
debian/libapache2-mod-php.apache2
debian/libapache2-mod-php.dirs.extra
debian/libapache2-mod-php.install.extra
debian/libapache2-mod-php.postinst.extra
debian/libphp-embed.dirs.extra
debian/libphp-embed.install.extra
debian/libphp-embed.postinst.extra
debian/libphp-embed.postrm.extra
debian/libphp-embed.prerm.extra
debian/patches/0001-libtool_fixes.patch
debian/patches/0002-debian_quirks.patch
debian/patches/0003-php-5.4.9-phpinfo.patch
debian/patches/0004-extension_api.patch
debian/patches/0005-php.ini_securitynotes.patch
debian/patches/0006-Add-support-for-use-of-the-system-timezone-database.patch
debian/patches/0007-strcmp_null-OnUpdateErrorLog.patch
debian/patches/0008-qdbm-is-usr_include_qdbm.patch
debian/patches/0009-session_save_path.patch
debian/patches/0010-php-fpm-man-section-and-cleanup.patch
debian/patches/0011-fpm-config.patch
debian/patches/0012-php-fpm-sysconfdir.patch
debian/patches/0013-lp564920-fix-big-files.patch
debian/patches/0014-temporary-path-fixes-for-multiarch.patch
debian/patches/0015-hurd-noptrace.patch
debian/patches/0016-php-5.3.3-macropen.patch
debian/patches/0017-php-5.2.4-embed.patch
debian/patches/0018-php-fpm-m68k.patch
debian/patches/0019-expose_all_built_and_installed_apis.patch
debian/patches/0020-Use-system-timezone.patch
debian/patches/0021-php-fpm-do-reload-on-SIGHUP.patch
debian/patches/0022-php-5.4.8-ldap_r.patch
debian/patches/0023-php-5.4.9-fixheader.patch
debian/patches/0024-php-5.6.0-noNO.patch
debian/patches/0025-php-5.6.0-oldpcre.patch
debian/patches/0026-hack-phpdbg-to-explicitly-link-with-libedit.patch
debian/patches/0027-Don-t-put-INSTALL_ROOT-into-phar.phar-exec-stanza.patch
debian/patches/0028-Really-expand-libdir-datadir-into-EXPANDED_LIBDIR-DA.patch
debian/patches/0029-Fix-ext-date-lib-parse_tz-PATH_MAX-HURD-FTBFS.patch
debian/patches/0030-Add-patch-to-install-php7-module-directly-to-APXS_LI.patch
debian/patches/0031-libtool2.2.patch
debian/patches/0032-Include-all-libtool-files-from-phpize.m4.patch
debian/patches/0033-In-phpize-also-copy-config.guess-config.sub-ltmain.s.patch
debian/patches/0034-Show-packaging-credits.patch
debian/patches/0035-Allow-printing-credits-buffer-larger-than-4k.patch
debian/patches/0036-Don-t-close-the-credits-buffer-file-descriptor-too-e.patch
debian/patches/0037-Lower-the-OpenSSL-requirement-to-1.0.1.patch
debian/patches/0038-Override-result-of-AC_PROG_LN_S-to-fix-FTBFS-on-ppc6.patch
debian/patches/0039-Update-gcc-func-attr-macro.patch
debian/patches/0040-scripts-php-.in-Explicitly-define-the-path-to-sed.patch
debian/patches/0041-Remove-timestamps-from-phar.patch
debian/patches/0042-Disable-assembly-detection-in-Zend-arithmetic-with-g.patch
debian/patches/0043-Disable-avx-detection-with-gcc-6.patch
debian/patches/0044-Disable-garbage-collection-routine.patch
debian/patches/0045-Add-missing-header-includes.patch
debian/patches/0046-Add-enable-rtld-deepbind-configure-flag.patch
debian/patches/series
debian/php-cgi.apache2
debian/php-cgi.conf
debian/php-cgi.dirs.extra
debian/php-cgi.install.extra
debian/php-cgi.postinst.extra
debian/php-cgi.prerm.extra
debian/php-cli.dirs.extra
debian/php-cli.install.extra
debian/php-cli.links
debian/php-cli.postinst.extra
debian/php-cli.prerm.extra
debian/php-common.README.Debian
debian/php-common.dirs.extra
debian/php-common.docs
debian/php-common.lintian-overrides.extra
debian/php-common.preinst.extra
debian/php-common.substvars.extra
debian/php-curl.substvars.extra
debian/php-dev.dirs
debian/php-dev.files
debian/php-dev.install
debian/php-dev.lintian-overrides
debian/php-dev.postinst
debian/php-dev.prerm
debian/php-fpm-checkconf
debian/php-fpm-reopenlogs
debian/php-fpm.apache2
debian/php-fpm.conf
debian/php-fpm.dirs.extra
debian/php-fpm.init
debian/php-fpm.install.extra
debian/php-fpm.logrotate
debian/php-fpm.maintscript
debian/php-fpm.postinst.extra
debian/php-fpm.prerm.extra
debian/php-fpm.service
debian/php-fpm.tmpfile
debian/php-litespeed.dirs.extra
debian/php-litespeed.init
debian/php-litespeed.install.extra
debian/php-litespeed.postinst.extra
debian/php-litespeed.prerm.extra
debian/php-litespeed.service
debian/php-litespeed.tmpfile
debian/php-module.bug-control.in
debian/php-module.bug-script.in
debian/php-module.control.in
debian/php-module.dirs.in
debian/php-module.ini.in
debian/php-module.lintian-overrides.in
debian/php-module.postinst.in
debian/php-module.postrm.in
debian/php-module.preinst.in
debian/php-module.prerm.in
debian/php-module.substvars.in
debian/php-module.triggers.in
debian/php-phpdbg.dirs.extra
debian/php-phpdbg.install.extra
debian/php-phpdbg.postinst.extra
debian/php-phpdbg.prerm.extra
debian/php-sapi.bug-control
debian/php-sapi.bug-script
debian/php-sapi.dirs
debian/php-sapi.install
debian/php-sapi.lintian-overrides
debian/php-sapi.postinst
debian/php-sapi.postrm
debian/php-sapi.prerm
debian/php-sapi.triggers
debian/php-snmp.substvars.extra
debian/php-xml.postinst.extra
debian/php-xml.substvars.extra
debian/php.bug-control
debian/php.conf
debian/php.load
debian/phpapi
debian/phpdbg.1
debian/prepare-files
debian/rules
debian/rules.d/ext-bcmath.mk
debian/rules.d/ext-bz2.mk
debian/rules.d/ext-common.mk
debian/rules.d/ext-curl.mk
debian/rules.d/ext-dba.mk
debian/rules.d/ext-enchant.mk
debian/rules.d/ext-gd.mk
debian/rules.d/ext-gmp.mk
debian/rules.d/ext-interbase.mk
debian/rules.d/ext-intl.mk
debian/rules.d/ext-ldap.mk
debian/rules.d/ext-mbstring.mk
debian/rules.d/ext-mysql.mk
debian/rules.d/ext-odbc.mk
debian/rules.d/ext-pgsql.mk
debian/rules.d/ext-readline.mk
debian/rules.d/ext-snmp.mk
debian/rules.d/ext-soap.mk
debian/rules.d/ext-sqlite3.mk
debian/rules.d/ext-sybase.mk
debian/rules.d/ext-tidy.mk
debian/rules.d/ext-xml.mk
debian/rules.d/ext-zip.mk
debian/rules.d/opcache.mk
debian/rules.d/prepare-fpm-pools.mk
debian/sedsed
debian/source.lintian-overrides
debian/source.lintian-overrides.in
debian/source/format
debian/source/include-binaries
debian/tests.in/cgi
debian/tests.in/cli
debian/tests.in/control
debian/tests.in/fpm
debian/tests.in/mod-php
debian/tests/cgi
debian/tests/cli
debian/tests/control
debian/tests/fpm
debian/tests/mod-php
debian/upstream/signing-key.asc
debian/watch