Change log for php8.2 package in Ubuntu

php8.2 (8.2.10-2ubuntu2.2) mantic-security; urgency=medium

  * SECURITY UPDATE: Invalid user information
    - debian/patches/CVE-2024-5458.patch: improves filters validation
      in ext/filter/logical_filters.c and adds test
      in ext/filter/tests/ghsa-w8qr-v226-r27w.phpt.
    - CVE-2024-5458

 -- Leonidas Da Silva Barbosa <email address hidden>  Thu, 13 Jun 2024 13:03:15 -0300

Available diffs

• diff from 8.2.10-2ubuntu2.1 to 8.2.10-2ubuntu2.2 (2.2 KiB)

php8.2 (8.2.10-2ubuntu2.1) mantic-security; urgency=medium

  * SECURITY UPDATE: Cookie by pass
    - debian/patches/CVE-2024-2756.patch: adds more mangling rules
      in main/php_variable.c.
    - CVE-2024-2756
  * SECURITY UPDATE: Account take over risk
    - debian/patches/CVE-2024-3096.patch: disallow null character in bcrypt
      password in ext/standard/password.c,
      ext/standard/tests/password_bcrypt_errors.phpt.
    - CVE-2024-3096

 -- Leonidas Da Silva Barbosa <email address hidden>  Wed, 01 May 2024 07:15:40 -0300

Available diffs

• diff from 8.2.10-2ubuntu1 (in Ubuntu) to 8.2.10-2ubuntu2.1 (3.5 KiB)

php8.2 (8.2.10-2ubuntu2) mantic; urgency=medium

  * d/p/0048-Fix-segfault-in-fpm_status_export_to_zval.patch: fix segmentation
    fault in fpm_status_export_to_zval. (LP: #2057576)

 -- Athos Ribeiro <email address hidden>  Tue, 26 Mar 2024 11:21:53 -0300

Available diffs

• diff from 8.2.10-2ubuntu1 to 8.2.10-2ubuntu2 (1.4 KiB)

php8.2 (8.2.12-1ubuntu2) noble; urgency=medium

  * No-change rebuild for ICU soname change.

 -- Matthias Klose <email address hidden>  Tue, 19 Dec 2023 18:38:24 +0100

Available diffs

• diff from 8.2.12-1ubuntu1 to 8.2.12-1ubuntu2 (330 bytes)

php8.2 (8.2.12-1ubuntu1) noble; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - d/rules: fix PHP_EXTRA_VERSION setting. (LP #1989196)
    - Test PHP_EXTRA_VERSION setting with autopkgtest.
    - d/rules: Disable garbage collection routine in ini files.
      (LP #1772915, Closes: #831752)

 -- Gianfranco Costamagna <email address hidden>  Sun, 29 Oct 2023 08:47:19 +0100

Available diffs

• diff from 8.2.10-2ubuntu1 to 8.2.12-1ubuntu1 (47.6 KiB)

php8.2 (8.2.10-2ubuntu1) mantic; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - d/rules: fix PHP_EXTRA_VERSION setting. (LP #1989196)
    - Test PHP_EXTRA_VERSION setting with autopkgtest.
    - d/rules: Disable garbage collection routine in ini files.
      (LP #1772915, Closes: #831752)

 -- Gianfranco Costamagna <email address hidden>  Tue, 05 Sep 2023 16:37:47 +0200

Available diffs

• diff from 8.2.10-1ubuntu2 to 8.2.10-2ubuntu1 (556 bytes)

php8.2 (8.2.10-1ubuntu2) mantic; urgency=medium

  * Also enable systemtap-sdt-dev in control file, not just
    in control.in (this fixes build on s390x and others)

 -- Gianfranco Costamagna <email address hidden>  Sat, 02 Sep 2023 23:35:51 +0200

Available diffs

• diff from 8.2.7-1ubuntu2 to 8.2.10-1ubuntu2 (196.8 KiB)
• diff from 8.2.10-1ubuntu1 to 8.2.10-1ubuntu2 (510 bytes)

php8.2 (8.2.10-1ubuntu1) mantic; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - d/rules: fix PHP_EXTRA_VERSION setting. (LP #1989196)
    - Test PHP_EXTRA_VERSION setting with autopkgtest.
    - d/rules: Disable garbage collection routine in ini files.
      (LP #1772915, Closes: #831752)

 -- Gianfranco Costamagna <email address hidden>  Sat, 02 Sep 2023 23:26:52 +0200

Available diffs

• diff from 8.2.7-1ubuntu2 to 8.2.10-1ubuntu1 (196.7 KiB)

php8.2 (8.2.7-1ubuntu2) mantic; urgency=medium

  * Drop riscv64 build fix, atomic is now native on gcc-13
  * Add changes from php8.1 (Athos Ribeiro <email address hidden>)
    - d/rules: fix PHP_EXTRA_VERSION setting. (LP #1989196)
    - Test PHP_EXTRA_VERSION setting with autopkgtest.
    - d/rules: Disable garbage collection routine in ini files.
      (LP #1772915, Closes: #831752)

 -- Gianfranco Costamagna <email address hidden>  Wed, 30 Aug 2023 10:49:25 +0200

Available diffs

• diff from 8.2.7-1ubuntu1 to 8.2.7-1ubuntu2 (2.3 KiB)

php8.2 (8.2.7-1ubuntu1) mantic; urgency=low

  * Merge from Debian unstable. Remaining changes:
     - Cherry-pick patch from Debian bug: #1025446) to fix riscv64 build

 -- Gianfranco Costamagna <email address hidden>  Sat, 10 Jun 2023 12:11:26 +0200

Available diffs

• diff from 8.2.5-2ubuntu1 to 8.2.7-1ubuntu1 (65.7 KiB)

php8.2 (8.2.5-2ubuntu1) mantic; urgency=medium

  [ Gianfranco Costamagna ]
  * Cherry-pick patch from Debian bug: #1025446) to fix riscv64 build
  * Non-maintainer upload.
  * riscv64: fix linking against -latomic

 -- Gianfranco Costamagna <email address hidden>  Thu, 04 May 2023 16:51:38 +0200

Available diffs

• diff from 8.2.5-2 (in Debian) to 8.2.5-2ubuntu1 (617 bytes)

php8.2 (8.2.5-2) unstable; urgency=medium

  * Hard code sed path to /bin/sed (Closes: #1034423)
  * Remove timestamps from phar (Closes: #1034892)

 -- Ondřej Surý <email address hidden>  Thu, 27 Apr 2023 10:13:47 +0200