-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 28 Feb 2026 08:07:34 +0100
Source: php8.2
Binary: php8.2 php8.2-xsl
Architecture: all
Version: 8.2.30-1~deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 php8.2     - server-side, HTML-embedded scripting language (metapackage)
 php8.2-xsl - XSL module for PHP (dummy)
Changes:
 php8.2 (8.2.30-1~deb12u1) bookworm-security; urgency=high
 .
   * New upstream version 8.2.30
    + [CVE-2025-14180]: Fixed GHSA-8xr5-qppj-gvwj (PDO quoting result null
      deref).
    + [CVE-2025-14178]: Fixed GHSA-h96m-rvf9-jgm2 (Heap buffer overflow in
      array_merge()).
    + [CVE-2025-14177]: Fixed GHSA-3237-qqm7-mfv7 (Information Leak of
      Memory in getimagesize).
Checksums-Sha1:
 b8a94abab89949fd5a17c28d4447dc4a62496d55 47192 php8.2-xsl_8.2.30-1~deb12u1_all.deb
 91128046bc5f6c0db63727cbfcb60d18c651b7f9 14429 php8.2_8.2.30-1~deb12u1_all-buildd.buildinfo
 d9b41d88564e7e14d8e9d4d83e5164fafad78bd6 47532 php8.2_8.2.30-1~deb12u1_all.deb
Checksums-Sha256:
 dfa226d4108cb49de9e9d139e4bcc5c1f524eec770c045b6f85b7a6793c9ce71 47192 php8.2-xsl_8.2.30-1~deb12u1_all.deb
 bfc61724d11a6ac781e92bb3d04fa1203b39952d464a542af64452706552d5e0 14429 php8.2_8.2.30-1~deb12u1_all-buildd.buildinfo
 ea500854e34798d64147e77b1f3a0bf3c0902a6521cf5e2e9c941141cb7153b3 47532 php8.2_8.2.30-1~deb12u1_all.deb
Files:
 3208eae8eb3e8dd33b4cac40c53e1a4a 47192 php optional php8.2-xsl_8.2.30-1~deb12u1_all.deb
 34cbd895b1d67562fca14da21a36dddb 14429 php optional php8.2_8.2.30-1~deb12u1_all-buildd.buildinfo
 dceecdc8f0d0c860d93eae949090f6ca 47532 php optional php8.2_8.2.30-1~deb12u1_all.deb

-----BEGIN PGP SIGNATURE-----
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=zjig
-----END PGP SIGNATURE-----