]> dgit.raspbian.org Git - php8.2.git/commit
projects / php8.2.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(merge: 06efb0f c7f2cfc)
php8.2 (8.2.18-1~deb12u1) bookworm-security; urgency=high
authorOndřej Surý <ondrej@debian.org>
Thu, 11 Apr 2024 22:07:45 +0000 (00:07 +0200)
committerOndřej Surý <ondrej@debian.org>
Thu, 11 Apr 2024 22:07:45 +0000 (00:07 +0200)
commitc13d3f1caca476e99c0a220f5f2f29225819437c
tree97cf21090f0a9d6e016793dbc75d54200b0c6e03tree | snapshot
parent06efb0f6ca342ea4215b90afaeb761a655a4dad7commit | diff
parentc7f2cfc617c1d7b42ef5617a0b958c123997c5e8commit | diff
php8.2 (8.2.18-1~deb12u1) bookworm-security; urgency=high

  * New upstream version 8.2.18
   + CVE-2024-1874: Fixed bug GHSA-pc52-254m-w9w7 (Command injection via
     array-ish $command parameter of proc_open).
   + CVE-2024-2756: Fixed bug GHSA-wpj3-hf5j-x4v4 (__Host-/__Secure-
     cookie bypass due to partial CVE-2022-31629 fix).
   + CVE-2024-3096: Fixed bug GHSA-h746-cjrr-wfmr (password_verify can
     erroneously return true, opening ATO risk).

[dgit import unpatched php8.2 8.2.18-1~deb12u1]
181 files changed:
debian/PEAR-Builder-print-info-about-php-dev.patch | | blob
debian/README.Debian.security | | blob
debian/README.source | | blob
debian/changelog | | blob
debian/compat | | blob
debian/control | | blob
debian/control.in | | blob
debian/copyright | | blob
debian/gbp.conf | | blob
debian/libapache2-mod-php.apache2 | | blob
debian/libapache2-mod-php.dirs.extra | | blob
debian/libapache2-mod-php.install.extra | | blob
debian/libapache2-mod-php.postinst.extra | | blob
debian/libphp-embed.dirs.extra | | blob
debian/libphp-embed.install.extra | | blob
debian/libphp-embed.postinst.extra | | blob
debian/libphp-embed.postrm.extra | | blob
debian/libphp-embed.prerm.extra | | blob
debian/patches/0001-libtool_fixes.patch | | blob
debian/patches/0002-debian_quirks.patch | | blob
debian/patches/0003-php-5.4.9-phpinfo.patch | | blob
debian/patches/0004-extension_api.patch | | blob
debian/patches/0005-php.ini_securitynotes.patch | | blob
debian/patches/0006-php-5.4.7-libdb.patch | | blob
debian/patches/0007-Add-support-for-use-of-the-system-timezone-database.patch | | blob
debian/patches/0008-strcmp_null-OnUpdateErrorLog.patch | | blob
debian/patches/0009-qdbm-is-usr_include_qdbm.patch | | blob
debian/patches/0010-session_save_path.patch | | blob
debian/patches/0011-php-fpm-man-section-and-cleanup.patch | | blob
debian/patches/0012-fpm-config.patch | | blob
debian/patches/0013-php-fpm-sysconfdir.patch | | blob
debian/patches/0014-lp564920-fix-big-files.patch | | blob
debian/patches/0015-temporary-path-fixes-for-multiarch.patch | | blob
debian/patches/0016-hurd-noptrace.patch | | blob
debian/patches/0017-php-5.3.3-macropen.patch | | blob
debian/patches/0018-php-5.2.4-embed.patch | | blob
debian/patches/0019-php-fpm-m68k.patch | | blob
debian/patches/0020-expose_all_built_and_installed_apis.patch | | blob
debian/patches/0021-Use-system-timezone.patch | | blob
debian/patches/0022-php-fpm-do-reload-on-SIGHUP.patch | | blob
debian/patches/0023-php-5.4.8-ldap_r.patch | | blob
debian/patches/0024-php-5.4.9-fixheader.patch | | blob
debian/patches/0025-php-5.6.0-noNO.patch | | blob
debian/patches/0026-php-5.6.0-oldpcre.patch | | blob
debian/patches/0027-hack-phpdbg-to-explicitly-link-with-libedit.patch | | blob
debian/patches/0028-Remove-W3C-validation-icon-to-not-expose-the-reader-.patch | | blob
debian/patches/0029-Don-t-put-INSTALL_ROOT-into-phar.phar-exec-stanza.patch | | blob
debian/patches/0030-Really-expand-libdir-datadir-into-EXPANDED_LIBDIR-DA.patch | | blob
debian/patches/0031-Fix-ext-date-lib-parse_tz-PATH_MAX-HURD-FTBFS.patch | | blob
debian/patches/0032-Amend-C-11-for-intl-compilation-on-older-distributio.patch | | blob
debian/patches/0033-Add-patch-to-install-php7-module-directly-to-APXS_LI.patch | | blob
debian/patches/0034-libtool2.2.patch | | blob
debian/patches/0035-Include-all-libtool-files-from-phpize.m4.patch | | blob
debian/patches/0036-In-phpize-also-copy-config.guess-config.sub-ltmain.s.patch | | blob
debian/patches/0037-Don-t-use-hrtimers-on-GNU-Hurd.patch | | blob
debian/patches/0038-Show-packaging-credits.patch | | blob
debian/patches/0039-Allow-printing-credits-buffer-larger-than-4k.patch | | blob
debian/patches/0040-Don-t-close-the-credits-buffer-file-descriptor-too-e.patch | | blob
debian/patches/0041-Lower-the-OpenSSL-requirement-to-1.0.1.patch | | blob
debian/patches/0042-Fail-the-build-when-the-dtrace-call-fails.patch | | blob
debian/patches/0043-Override-result-of-AC_PROG_LN_S-to-fix-FTBFS-on-ppc6.patch | | blob
debian/patches/0044-Update-gcc-func-attr-macro.patch | | blob
debian/patches/0045-scripts-php-.in-Explicitly-define-the-path-to-sed.patch | | blob
debian/patches/0046-Remove-timestamps-from-phar.patch | | blob
debian/patches/series | | blob
debian/php-cgi.apache2 | | blob
debian/php-cgi.conf | | blob
debian/php-cgi.dirs.extra | | blob
debian/php-cgi.install.extra | | blob
debian/php-cgi.postinst.extra | | blob
debian/php-cgi.prerm.extra | | blob
debian/php-cli.dirs.extra | | blob
debian/php-cli.install.extra | | blob
debian/php-cli.links | | blob
debian/php-cli.postinst.extra | | blob
debian/php-cli.prerm.extra | | blob
debian/php-common.README.Debian | | blob
debian/php-common.dirs.extra | | blob
debian/php-common.docs | | blob
debian/php-common.lintian-overrides.extra | | blob
debian/php-common.preinst.extra | | blob
debian/php-common.substvars.extra | | blob
debian/php-curl.substvars.extra | | blob
debian/php-dev.dirs | | blob
debian/php-dev.files | | blob
debian/php-dev.install | | blob
debian/php-dev.lintian-overrides | | blob
debian/php-dev.postinst | | blob
debian/php-dev.prerm | | blob
debian/php-fpm-checkconf | | blob
debian/php-fpm-reopenlogs | | blob
debian/php-fpm.apache2 | | blob
debian/php-fpm.conf | | blob
debian/php-fpm.dirs.extra | | blob
debian/php-fpm.init | | blob
debian/php-fpm.install.extra | | blob
debian/php-fpm.logrotate | | blob
debian/php-fpm.maintscript | | blob
debian/php-fpm.postinst.extra | | blob
debian/php-fpm.prerm.extra | | blob
debian/php-fpm.service | | blob
debian/php-fpm.tmpfile | | blob
debian/php-module.bug-control.in | | blob
debian/php-module.bug-script.in | | blob
debian/php-module.control.in | | blob
debian/php-module.dirs.in | | blob
debian/php-module.ini.in | | blob
debian/php-module.lintian-overrides.in | | blob
debian/php-module.postinst.in | | blob
debian/php-module.postrm.in | | blob
debian/php-module.preinst.in | | blob
debian/php-module.prerm.in | | blob
debian/php-module.substvars.in | | blob
debian/php-module.triggers.in | | blob
debian/php-phpdbg.dirs.extra | | blob
debian/php-phpdbg.install.extra | | blob
debian/php-phpdbg.postinst.extra | | blob
debian/php-phpdbg.prerm.extra | | blob
debian/php-sapi.bug-control | | blob
debian/php-sapi.bug-script | | blob
debian/php-sapi.dirs | | blob
debian/php-sapi.install | | blob
debian/php-sapi.lintian-overrides | | blob
debian/php-sapi.postinst | | blob
debian/php-sapi.postrm | | blob
debian/php-sapi.prerm | | blob
debian/php-sapi.triggers | | blob
debian/php-snmp.substvars.extra | | blob
debian/php-xml.postinst.extra | | blob
debian/php-xml.substvars.extra | | blob
debian/php.bug-control | | blob
debian/php.conf | | blob
debian/php.load | | blob
debian/phpapi | | blob
debian/phpdbg.1 | | blob
debian/prepare-files | | blob
debian/rules | | blob
debian/rules.d/ext-bcmath.mk | | blob
debian/rules.d/ext-bz2.mk | | blob
debian/rules.d/ext-common.mk | | blob
debian/rules.d/ext-curl.mk | | blob
debian/rules.d/ext-dba.mk | | blob
debian/rules.d/ext-enchant.mk | | blob
debian/rules.d/ext-gd.mk | | blob
debian/rules.d/ext-gmp.mk | | blob
debian/rules.d/ext-imap.mk | | blob
debian/rules.d/ext-interbase.mk | | blob
debian/rules.d/ext-intl.mk | | blob
debian/rules.d/ext-ldap.mk | | blob
debian/rules.d/ext-mbstring.mk | | blob
debian/rules.d/ext-mysql.mk | | blob
debian/rules.d/ext-odbc.mk | | blob
debian/rules.d/ext-pgsql.mk | | blob
debian/rules.d/ext-pspell.mk | | blob
debian/rules.d/ext-readline.mk | | blob
debian/rules.d/ext-snmp.mk | | blob
debian/rules.d/ext-soap.mk | | blob
debian/rules.d/ext-sqlite3.mk | | blob
debian/rules.d/ext-sybase.mk | | blob
debian/rules.d/ext-tidy.mk | | blob
debian/rules.d/ext-xml.mk | | blob
debian/rules.d/ext-zip.mk | | blob
debian/rules.d/opcache.mk | | blob
debian/rules.d/prepare-fpm-pools.mk | | blob
debian/sedsed | | blob
debian/source.lintian-overrides | | blob
debian/source.lintian-overrides.in | | blob
debian/source/format | | blob
debian/source/include-binaries | | blob
debian/tests.in/cgi | | blob
debian/tests.in/cli | | blob
debian/tests.in/control | | blob
debian/tests.in/fpm | | blob
debian/tests.in/mod-php | | blob
debian/tests/cgi | | blob
debian/tests/cli | | blob
debian/tests/control | | blob
debian/tests/fpm | | blob
debian/tests/mod-php | | blob
debian/upstream/signing-key.asc | | blob
debian/watch | | blob
Unnamed repository; edit this file 'description' to name the repository.