From: Peter Michael Green Date: Fri, 17 Oct 2025 01:22:38 +0000 (+0000) Subject: Merge tag '8.2.7-1_deb12u1+rpi1' of 172.17.3.10:/build/git/p/php8.2 into trixie-staging X-Git-Tag: archive/raspbian/8.4.11-1+rpi1^0 X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=5f82fb7f7aa2f12e36fd84e94b64d4a2b0269705;p=php8.4.git Merge tag '8.2.7-1_deb12u1+rpi1' of 172.17.3.10:/build/git/p/php8.2 into trixie-staging --- 5f82fb7f7aa2f12e36fd84e94b64d4a2b0269705 diff --cc debian/changelog index 64649af3,a8dbcf3e..7e3523e7 --- a/debian/changelog +++ b/debian/changelog @@@ -1,348 -1,22 +1,354 @@@ -php8.2 (8.2.7-1~deb12u1+rpi1) bookworm-staging; urgency=medium ++php8.4 (8.4.11-1+rpi1) trixie-staging; urgency=medium + + * Fix fpu setting for raspbian. + - -- Peter Michael Green Thu, 20 Jul 2023 18:02:54 +0000 ++ -- Peter Michael Green Fri, 17 Oct 2025 01:23:38 +0000 + -php8.2 (8.2.7-1~deb12u1) bookworm-security; urgency=high +php8.4 (8.4.11-1) unstable; urgency=medium - * No change upload to bookworm-security + * New upstream version 8.4.11 - -- Ondřej Surý Fri, 09 Jun 2023 21:37:27 +0200 + -- Ondřej Surý Sun, 03 Aug 2025 09:32:21 +0200 -php8.2 (8.2.7-1) unstable; urgency=medium +php8.4 (8.4.10-1) unstable; urgency=medium - * New upstream version 8.2.7 - + Fixed GHSA-76gg-c692-v2mw: Missing error check and insufficient - random bytes in HTTP Digest authentication for SOAP. + * Set PHP_BUILD_PROVIDER to Debian with option to override this from + shell environment + * New upstream version 8.4.10 - -- Ondřej Surý Fri, 09 Jun 2023 08:51:32 +0200 + -- Ondřej Surý Thu, 03 Jul 2025 14:35:27 +0200 + +php8.4 (8.4.8-1) unstable; urgency=medium + + * Move setting ICU_CXXFLAGS to the right place in d/rules + * Use ICU >= 75 version to determine the need for C++11 or C++17 + * New upstream version 8.4.8 + + -- Ondřej Surý Sat, 07 Jun 2025 16:22:04 +0200 + +php8.4 (8.4.7-1) unstable; urgency=medium + + * New upstream version 8.4.7 + + -- Ondřej Surý Fri, 09 May 2025 08:06:27 +0200 + +php8.4 (8.4.6-2) unstable; urgency=medium + + * Remove libxmltok1-dev from Build-Depends (Closes: #871826) + + -- Ondřej Surý Mon, 14 Apr 2025 18:59:47 +0200 + +php8.4 (8.4.6-1) unstable; urgency=medium + + * New upstream version 8.4.6 + + -- Ondřej Surý Fri, 11 Apr 2025 03:47:19 +0200 + +php8.4 (8.4.5-1) unstable; urgency=medium + + * New upstream version 8.4.5 + - [CVE-2024-11235]: Reference counting in php_request_shutdown + causes Use-After-Free. + - [CVE-2025-1219]: libxml streams use wrong `content-type` header + when requesting a redirected resource. + - [CVE-2025-1736]: Stream HTTP wrapper header check might omit + basic auth header. + - [CVE-2025-1861]: Stream HTTP wrapper truncate redirect location + to 1024 bytes. + - [CVE-2025-1734]: Streams HTTP wrapper does not fail for headers + without colon. + - [CVE-2025-1217]: Header parser of `http` stream wrapper does not + handle folded headers. + + -- Ondřej Surý Thu, 13 Mar 2025 16:28:14 +0100 + +php8.4 (8.4.4-1) unstable; urgency=medium + + * New upstream version 8.4.4 + + -- Ondřej Surý Sat, 15 Feb 2025 09:51:15 +0100 + +php8.4 (8.4.3-1) unstable; urgency=medium + + * New upstream version 8.4.3 + * Remove the C++11 compatibility patch (Closes: #1092329) + + -- Ondřej Surý Sun, 19 Jan 2025 14:35:15 +0100 + +php8.4 (8.4.2-1) unstable; urgency=medium + + * Add --enable-rtld-deepbind configure flag, disable it by default + except for apache (Closes: #1089097) + * New upstream version 8.4.2 + + -- Ondřej Surý Tue, 24 Dec 2024 06:58:15 +0100 + +php8.4 (8.4.1-6) unstable; urgency=medium + + * Bump php-common dependency to >= 2:95~ + + -- Ondřej Surý Wed, 04 Dec 2024 12:17:25 +0100 + +php8.4 (8.4.1-5) unstable; urgency=medium + + * Remove the /usr/lib/libphp.so symbolic link if unowned + (Closes: #1035798) + + -- Ondřej Surý Mon, 02 Dec 2024 08:28:50 +0100 + +php8.4 (8.4.1-4) unstable; urgency=medium + + * Upload to unstable. + + -- Ondřej Surý Wed, 27 Nov 2024 13:57:13 +0100 + +php8.4 (8.4.1-3) experimental; urgency=medium + + * Revert "ext/gmp: gmp_pow fix FPE with large values" patch + + -- Ondřej Surý Mon, 25 Nov 2024 18:17:44 +0100 + +php8.4 (8.4.1-2) experimental; urgency=medium + + * Fix GH-16870: gmp_pow(64, 11) throws overflow exception + + -- Ondřej Surý Thu, 21 Nov 2024 15:37:00 +0100 + +php8.4 (8.4.1-1) experimental; urgency=medium + + * New upstream version 8.4.1 + + -- Ondřej Surý Thu, 21 Nov 2024 14:21:13 +0100 + +php8.4 (8.4.0~rc4-1) experimental; urgency=medium + + * New upstream version 8.4.0~rc4 + + -- Ondřej Surý Sat, 16 Nov 2024 10:40:32 +0100 + +php8.4 (8.4.0~rc3-1) experimental; urgency=medium + + * New upstream version 8.4.0~rc3 + + -- Ondřej Surý Wed, 30 Oct 2024 12:23:46 +0100 + +php8.4 (8.4.0~rc1-2) experimental; urgency=medium + + * Bump required versions for several build-dependencies + + -- Ondřej Surý Wed, 02 Oct 2024 11:50:27 +0200 + +php8.4 (8.4.0~rc1-1) experimental; urgency=medium + + * New upstream version 8.4.0~rc1 + * Bump PHP API number to 20240924 + + -- Ondřej Surý Fri, 27 Sep 2024 05:39:51 +0200 + +php8.4 (8.4.0~beta5-1) experimental; urgency=medium + + * New upstream version 8.4.0~beta5 + + -- Ondřej Surý Sat, 14 Sep 2024 13:40:48 +0200 + +php8.4 (8.4.0~beta4-1) experimental; urgency=medium + + * New upstream version 8.4.0~beta4 + + -- Ondřej Surý Fri, 30 Aug 2024 11:14:08 +0200 + +php8.4 (8.4.0~beta3-1) experimental; urgency=medium + + * New upstream version 8.4.0~beta3 + + -- Ondřej Surý Tue, 27 Aug 2024 05:20:02 +0200 + +php8.4 (8.4.0~alpha4-1) experimental; urgency=medium + + * New upstream version 8.4.0~alpha4 + + -- Ondřej Surý Fri, 02 Aug 2024 18:03:15 +0200 + +php8.4 (8.4.0~alpha2-1) experimental; urgency=medium + + * New upstream version 8.4.0~alpha2 + * Update d/watch to use qa.php.net site + + -- Ondřej Surý Sat, 20 Jul 2024 21:07:00 +0200 + +php8.4 (8.4.0~alpha1-1) experimental; urgency=medium + + * Update upstream signing keys for PHP 8.4 + * New upstream version 8.4.0~alpha1 + * The IMAP extension has been unbundled and moved to PECL. + * The pspell extension has been unbundled and moved to PECL. + * Bump phpapi to 20230901 + + -- Ondřej Surý Sat, 06 Jul 2024 07:48:05 +0200 + +php8.3 (8.3.9-1) experimental; urgency=medium + + * Add Restart=on-failure to the systemd service file + * New upstream version 8.3.9 + * Remove the patch that fixed GH-14480 (merged upstream) + + -- Ondřej Surý Fri, 05 Jul 2024 13:48:48 +0200 + +php8.3 (8.3.8-2) experimental; urgency=medium + + * Fix GH-14480: Method visibility issue introduced in version 8.3.8 (#14484) + + -- Ondřej Surý Sat, 08 Jun 2024 22:27:05 +0200 + +php8.3 (8.3.8-1) experimental; urgency=medium + + * New upstream version 8.3.8 + + [CVE-2024-4577]: Bypass of CVE-2012-1823, Argument Injection in + PHP-CGI. + + [CVE-2024-5458]: Filter bypass in filter_var FILTER_VALIDATE_URL. + + [CVE-2024-5585]: Bypass of CVE-2024-1874. + + -- Ondřej Surý Thu, 06 Jun 2024 17:16:55 +0200 + +php8.3 (8.3.7-2) experimental; urgency=medium + + * Fix the php-config mangling script in configure embeds the options in + a single quote + + -- Ondřej Surý Thu, 23 May 2024 12:29:30 +0200 + +php8.3 (8.3.7-1) experimental; urgency=medium + + * New upstream version 8.3.7 + + -- Ondřej Surý Mon, 13 May 2024 17:25:50 +0200 + +php8.3 (8.3.6-1) experimental; urgency=medium + + * New upstream version 8.3.6 + + -- Ondřej Surý Thu, 11 Apr 2024 22:16:27 +0200 + +php8.3 (8.3.4-1) experimental; urgency=medium + + [ Ondřej Surý ] + * New upstream version 8.3.4 + * Just don't set PHP extra version at all - it makes a little + sense when we are just updating upstream versions + * Remove hardcoded dependency on libmagic1 (Closes: #1065985) + + [ Andrey Rakhmatullin ] + * Fix FTBFS with -Werror=implicit-function-declaration (Closes: #1066234). + + -- Ondřej Surý Sat, 16 Mar 2024 09:31:56 +0100 + +php8.3 (8.3.3-1) experimental; urgency=medium + + * New upstream version 8.3.3 + + -- Ondřej Surý Thu, 15 Feb 2024 19:30:31 +0100 + +php8.3 (8.3.2-1) experimental; urgency=medium + + [ Ondřej Surý ] + * New upstream version 8.3.2 + + [ Athos Ribeiro ] + * Fix PHP_EXTRA_VERSION setting + * Test the PHP_EXTRA_VERSION setting + * Move disabling the upstream GC routine to a patch (Closes: #831752) + + -- Ondřej Surý Sat, 20 Jan 2024 14:05:31 +0100 + +php8.3 (8.3.1-1) experimental; urgency=medium + + * New upstream version 8.3.1 + + -- Ondřej Surý Thu, 21 Dec 2023 21:05:27 +0100 + +php8.3 (8.3.0-5) experimental; urgency=medium + + * Disable avx512vbmi detection with gcc < 6 + + -- Ondřej Surý Tue, 05 Dec 2023 08:12:00 +0100 + +php8.3 (8.3.0-4) experimental; urgency=medium + + * Disable AVX detection with GCC < 6 + + -- Ondřej Surý Mon, 04 Dec 2023 19:54:57 +0100 + +php8.3 (8.3.0-3) experimental; urgency=medium + + * Also disable avx detection with older compilers + + -- Ondřej Surý Sun, 03 Dec 2023 08:59:08 +0100 + +php8.3 (8.3.0-2) experimental; urgency=medium + + * We also have to disable assembly code with gcc 4.9 on i386. + + -- Ondřej Surý Sat, 02 Dec 2023 22:10:03 +0100 + +php8.3 (8.3.0-1) experimental; urgency=medium + + * New upstream version 8.3.0 + + -- Ondřej Surý Fri, 24 Nov 2023 09:03:44 +0100 + +php8.3 (8.3.0~rc5-1) experimental; urgency=medium + + * New upstream version 8.3.0~rc5 + + -- Ondřej Surý Thu, 26 Oct 2023 08:55:54 +0200 + +php8.3 (8.3.0~rc3-1) experimental; urgency=medium + + * Reintroduce patch to copy config.guess, config.sub, and ltmain.sh + * New upstream version 8.3.0~rc3 + + -- Ondřej Surý Fri, 06 Oct 2023 11:18:21 +0200 + +php8.3 (8.3.0~rc1-1) experimental; urgency=medium + + * New upstream version 8.3.0~rc1 + * Bump PHPAPI to 20230831 + + -- Ondřej Surý Sat, 02 Sep 2023 08:28:02 +0200 + +php8.3 (8.3.0~beta3-2) experimental; urgency=medium + + * Disable DTrace as it still FTBFS + + -- Ondřej Surý Tue, 29 Aug 2023 11:19:05 +0200 + +php8.3 (8.3.0~beta3-1) experimental; urgency=medium + + * New upstream version 8.3.0~beta3 + + -- Ondřej Surý Tue, 29 Aug 2023 09:27:19 +0200 + +php8.3 (8.3.0~beta2-1) experimental; urgency=medium + + * New upstream version 8.3.0~beta2 + * Remove DTrace build patch, fixed upstream + * Enable DTrace on all architectures + * Pull patch to fix DTrace enabled build + + -- Ondřej Surý Sun, 20 Aug 2023 13:28:13 +0200 + +php8.3 (8.3.0~alpha3-1) experimental; urgency=medium + + * New upstream version 8.3.0~alpha3 + * Bump PHPAPI to 20220830 + + -- Ondřej Surý Mon, 10 Jul 2023 09:57:19 +0200 + +php8.3 (8.3.0~alpha1-1) experimental; urgency=low + + * New upstream version 8.3.0~alpha1 + + -- Ondřej Surý Fri, 09 Jun 2023 19:15:41 +0200 php8.2 (8.2.6-1) unstable; urgency=medium