乐胖代购免代理版

general

source: php8.2 (main)
version: 8.2.24-1
maintainer: Debian PHP Maintainers (DMD)
uploaders: Lior Kaplan [DMD] – Ondřej Surý [DMD]
arch: all any
std-ver: 4.5.0.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

stable: 8.2.24-1~deb12u1
stable-sec: 8.2.26-1~deb12u1
testing: 8.2.24-1
unstable: 8.2.24-1

versioned links

8.2.24-1~deb12u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
8.2.24-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
8.2.26-1~deb12u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libapache2-mod-php8.2
libphp8.2-embed (1 bugs: 1, 0, 0, 0)
php8.2
php8.2-bcmath
php8.2-bz2
php8.2-cgi
php8.2-cli
php8.2-common
php8.2-curl (2 bugs: 0, 2, 0, 0)
php8.2-dba
php8.2-dev
php8.2-enchant
php8.2-fpm (2 bugs: 0, 1, 1, 0)
php8.2-gd
php8.2-gmp
php8.2-imap
php8.2-interbase
php8.2-intl
php8.2-ldap
php8.2-mbstring
php8.2-mysql
php8.2-odbc
php8.2-opcache
php8.2-pgsql
php8.2-phpdbg
php8.2-pspell
php8.2-readline
php8.2-snmp
php8.2-soap
php8.2-sqlite3
php8.2-sybase
php8.2-tidy
php8.2-xml
php8.2-xsl
php8.2-zip

action needed

A new upstream version is available: 8.2.26 high

A new upstream version 8.2.26 is available, you should consider packaging it.

Created: 2024-10-25 Last update: 2024-11-27 21:32

5 security issues in trixie high

There are 5 open security issues in trixie.

5 important issues:

CVE-2024-8929: In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, a hostile MySQL server can cause the client to disclose the content of its heap containing data from other SQL requests and possible other data belonging to different users of the same server.
CVE-2024-8932: In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.
CVE-2024-11233: In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, due to an error in convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose content of other memory areas.
CVE-2024-11234: In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, when using streams with configured proxy and "request_fulluri" option, the URI is not properly sanitized which can lead to HTTP request smuggling and allow the attacker to use the proxy to perform arbitrary HTTP requests originating from the server, thus potentially gaining access to resources not normally available to the external user.
CVE-2024-11236: In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.

Created: 2024-11-20 Last update: 2024-11-26 22:04

5 security issues in sid high

There are 5 open security issues in sid.

5 important issues:

CVE-2024-8929: In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, a hostile MySQL server can cause the client to disclose the content of its heap containing data from other SQL requests and possible other data belonging to different users of the same server.
CVE-2024-8932: In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.
CVE-2024-11233: In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, due to an error in convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose content of other memory areas.
CVE-2024-11234: In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, when using streams with configured proxy and "request_fulluri" option, the URI is not properly sanitized which can lead to HTTP request smuggling and allow the attacker to use the proxy to perform arbitrary HTTP requests originating from the server, thus potentially gaining access to resources not normally available to the external user.
CVE-2024-11236: In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.

Created: 2024-11-20 Last update: 2024-11-26 22:04

lintian reports 5 errors and 65 warnings high

Lintian reports 5 errors and 65 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2024-09-27 Last update: 2024-11-15 17:03

Depends on packages which need a new maintainer normal

The packages that php8.2 depends on which need a new maintainer are:

qdbm (#890504)
- Depends: libqdbm14t64
- Build-Depends: libqdbm-dev
db5.3 (#1055356)
- Depends: libdb5.3t64
db-defaults (#1055344)
- Build-Depends: libdb-dev

Created: 2023-01-06 Last update: 2024-11-27 21:34

Does not build reproducibly during testing normal

A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!

Created: 2024-09-01 Last update: 2024-11-27 17:32

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 8.2.26-3, distribution unstable) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 153f1a4a548cf9a1a5198abc123c3d808ec3aebe
Author: Ondřej Surý <ondrej@sury.org>
Date:   Mon Nov 25 18:19:31 2024 +0100

    Update changelog for 8.2.26-3 release

commit 36632c93b6f2c6e67d9d505f4c220f82150bdd23
Author: Ondřej Surý <ondrej@sury.org>
Date:   Mon Nov 25 18:19:25 2024 +0100

    Revert "ext/gmp: gmp_pow fix FPE with large values" patch

commit b85f3d39be0ebab910a9d69ddd7b913acbcb26e3
Author: Ondřej Surý <ondrej@sury.org>
Date:   Thu Nov 21 15:40:23 2024 +0100

    Update changelog for 8.2.26-2 release

commit 7945624627385ec889b289046e574adaec11b453
Author: Ondřej Surý <ondrej@sury.org>
Date:   Thu Nov 21 15:40:21 2024 +0100

    Fix GH-16870: gmp_pow(64, 11) throws overflow exception

commit adfda8666e5c4540c773142fc592ea465efda7dc
Author: Ondřej Surý <ondrej@sury.org>
Date:   Thu Nov 21 11:29:52 2024 +0100

    Update changelog for 8.2.26-1 release (reorder)

commit b022e46620917cbbad69dbb3295485bcd47131cd
Author: Ondřej Surý <ondrej@sury.org>
Date:   Thu Nov 21 06:49:47 2024 +0100

    Update changelog for 8.2.26-1 release

commit c5ed41806dee7f71a94461232ef99b1da16432c6
Author: Ondřej Surý <ondrej@sury.org>
Date:   Thu Nov 21 06:45:47 2024 +0100

    Refresh patches
    
    Gbp-Dch: ignore

commit 5fa3827d2e1e80f989c87afa46a834314a94b361
Author: Ondřej Surý <ondrej@sury.org>
Date:   Thu Nov 21 06:45:34 2024 +0100

    Revert "Update changelog for 8.2.25-1 release"
    
    This reverts commit 61cbdc204367fcbc082c15f61e80bf5e3a427d80.

commit ffa28b637661e7cd303e086a79677a1d1e6ebb57
Merge: 61cbdc20 a6e03b43
Author: Ondřej Surý <ondrej@sury.org>
Date:   Thu Nov 21 06:45:17 2024 +0100

    Update upstream source from tag 'upstream/8.2.26'
    
    Update to upstream version '8.2.26'
    with Debian dir 75e996e04ac3c24a216ffa492d91569988d75487

commit a6e03b4315181e00fc28cbcb2c722fa8d911c6a7
Author: Ondřej Surý <ondrej@sury.org>
Date:   Thu Nov 21 06:44:46 2024 +0100

    New upstream version 8.2.26

Created: 2024-07-04 Last update: 2024-11-25 20:01

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2024-10-24 Last update: 2024-10-24 18:01

debian/patches: 46 patches to forward upstream low

Among the 48 debian patches available in version 8.2.24-1 of the package, we noticed the following issues:

46 patches where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2023-02-26 Last update: 2024-09-27 13:35

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.0 instead of 4.5.0.0).

Created: 2023-01-06 Last update: 2024-09-27 11:09

testing migrations

This package will soon be part of the auto-openldap transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.
This package will soon be part of the auto-libxml2 transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.
This package will soon be part of the auto-libsodium transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.
This package will soon be part of the auto-uw-imap transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.
This package will soon be part of the auto-icu transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.

news

[rss feed]

[2024-11-26] Accepted php8.2 8.2.26-1~deb12u1 (source) into stable-security (Debian FTP Masters) (signed by: Ondřej Surý)
[2024-10-06] Accepted php8.2 8.2.24-1~deb12u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Ondřej Surý)
[2024-10-02] Accepted php8.2 8.2.24-1~deb12u1 (source) into stable-security (Debian FTP Masters) (signed by: Ondřej Surý)
[2024-09-29] php8.2 8.2.24-1 MIGRATED to testing (Debian testing watch)
[2024-09-27] Accepted php8.2 8.2.24-1 (source) into unstable (Ondřej Surý)
[2024-09-01] php8.2 8.2.23-1 MIGRATED to testing (Debian testing watch)
[2024-08-30] Accepted php8.2 8.2.23-1 (source) into unstable (Ondřej Surý)
[2024-07-09] php8.2 8.2.21-1 MIGRATED to testing (Debian testing watch)
[2024-07-04] Accepted php8.2 8.2.21-1 (source) into unstable (Ondřej Surý)
[2024-06-29] php8.2 8.2.20-3 MIGRATED to testing (Debian testing watch)
[2024-06-24] Accepted php8.2 8.2.20-3 (source) into unstable (Ondřej Surý)
[2024-06-22] Accepted php8.2 8.2.20-2 (source) into unstable (Ondřej Surý)
[2024-06-22] Accepted php8.2 8.2.20-1~deb12u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Ondřej Surý)
[2024-06-20] Accepted php8.2 8.2.20-1~deb12u1 (source) into stable-security (Debian FTP Masters) (signed by: Ondřej Surý)
[2024-05-06] php8.2 8.2.18-1 MIGRATED to testing (Debian testing watch)
[2024-05-05] Accepted php8.2 8.2.18-1~deb12u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Ondřej Surý)
[2024-04-15] Accepted php8.2 8.2.18-1~deb12u1 (source) into stable-security (Debian FTP Masters) (signed by: Ondřej Surý)
[2024-04-12] Accepted php8.2 8.2.18-1 (source) into unstable (Ondřej Surý)
[2024-03-16] Accepted php8.2 8.2.17-1 (source) into unstable (Ondřej Surý)
[2024-03-15] Accepted php8.2 8.2.16-2.1 (source) into unstable (Andrey Rakhmatullin) (signed by: Andrey Rahmatullin)
[2024-02-18] Accepted php8.2 8.2.16-2 (source) into unstable (Ondřej Surý)
[2024-02-16] Accepted php8.2 8.2.16-1 (source) into unstable (Ondřej Surý)
[2023-12-01] php8.2 8.2.12-1 MIGRATED to testing (Debian testing watch)
[2023-10-27] Accepted php8.2 8.2.12-1 (source) into unstable (Ondřej Surý)
[2023-09-07] php8.2 8.2.10-2 MIGRATED to testing (Debian testing watch)
[2023-09-05] Accepted php8.2 8.2.10-2 (source) into unstable (Ondřej Surý)
[2023-09-02] Accepted php8.2 8.2.10-1 (source) into unstable (Ondřej Surý)
[2023-06-18] php8.2 8.2.7-1 MIGRATED to testing (Debian testing watch)
[2023-06-16] Accepted php8.2 8.2.7-1~deb12u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Ondřej Surý)
[2023-06-13] Accepted php8.2 8.2.7-1~deb12u1 (source) into stable-security (Debian FTP Masters) (signed by: Ondřej Surý)

bugs [bug history graph]

all: 10
RC: 1
I&N: 6
M&W: 3
F&P: 0
patch: 0

links

homepage
lintian (5, 65)
buildd: logs, checks, reproducibility, cross
popcon
browse source code
edit tags
other distros
security tracker
screenshots
debian patches
debci