-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 28 Feb 2026 08:07:34 +0100 Source: php8.2 Architecture: source Version: 8.2.30-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: Debian PHP Maintainers Changed-By: Ondřej Surý Changes: php8.2 (8.2.30-1~deb12u1) bookworm-security; urgency=high . * New upstream version 8.2.30 + [CVE-2025-14180]: Fixed GHSA-8xr5-qppj-gvwj (PDO quoting result null deref). + [CVE-2025-14178]: Fixed GHSA-h96m-rvf9-jgm2 (Heap buffer overflow in array_merge()). + [CVE-2025-14177]: Fixed GHSA-3237-qqm7-mfv7 (Information Leak of Memory in getimagesize). Checksums-Sha1: 7dd95182f5c0168f88eed1cfad555b7627691a3e 5726 php8.2_8.2.30-1~deb12u1.dsc ceed9e6c523e22e909452d3665c290c1345298d3 12153868 php8.2_8.2.30.orig.tar.xz 9d90670e067a53f6f48479f44bf75c1f40a4ca06 858 php8.2_8.2.30.orig.tar.xz.asc aaed99ea08deb4cd00bc88b288be4f0a5f6dac38 70696 php8.2_8.2.30-1~deb12u1.debian.tar.xz 5dd9eccea59b14a53695143752426e52556d5828 35098 php8.2_8.2.30-1~deb12u1_amd64.buildinfo Checksums-Sha256: 61bf5b91e9732612e16b702a25d0ded916e5e5dd4d125630e73b8d64fb954dff 5726 php8.2_8.2.30-1~deb12u1.dsc bc90523e17af4db46157e75d0c9ef0b9d0030b0514e62c26ba7b513b8c4eb015 12153868 php8.2_8.2.30.orig.tar.xz 55e5f6bd2c5b8c69acdadd166007a7027d5eca0cdd06a6a963725800482aac84 858 php8.2_8.2.30.orig.tar.xz.asc 3a5472009954195005f10dae3c6585b18469cb133c6efcf8e68c1272b4463bd0 70696 php8.2_8.2.30-1~deb12u1.debian.tar.xz c3b8cf882b204a0a95d6d086e49202f50c6a36d45645be7a1eb0d145a66d8629 35098 php8.2_8.2.30-1~deb12u1_amd64.buildinfo Files: 5bd28b233a34b053a63477090512b495 5726 php optional php8.2_8.2.30-1~deb12u1.dsc d5de0732629633b2713cce81d9e327c1 12153868 php optional php8.2_8.2.30.orig.tar.xz 898956c4cf5d65aec8b75c29e7f6b906 858 php optional php8.2_8.2.30.orig.tar.xz.asc 3c806552faaecbbc5914cdda82a09d1f 70696 php optional php8.2_8.2.30-1~deb12u1.debian.tar.xz 26df33f6aed5307d3b2d718a65653de4 35098 php optional php8.2_8.2.30-1~deb12u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEEw2Gx4wKVQ+vGJel9g3Kkd++uWcIFAmmj1r1fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEMz NjFCMUUzMDI5NTQzRUJDNjI1RTk3RDgzNzJBNDc3RUZBRTU5QzIACgkQg3Kkd++u WcKbyhAAh+Z404DuTv9zIxD6BnvJNOSxAwpWCqWqHkm6bnhIooTNkcm7BSt3c0ro edXB/2D3pFtVNbQJUD+H1tnLaHQsZusdhO8KN4J+WqOzBnwEmy75DDunpcrn1JOI 8AlGOJBEh80ZwWNl589+byXuBeQ1to6nOrLSd6U3BNrvQoPGMnNpwZ1F3MJwX9Z6 Ji5VUSAO+XGFBMkMqCQlCMyC5C+Ha7bTJ3IfOb3MaNxRtClJxhpzUXfIB4UYcuza ITQ3yOEnsPSpmHtikmP7uFYkc9rg3oPQRUseKvTy7Yjwc5Uzl44i8mROx199UVtg huipsbH41iS/OkbPnYgMtKssLsF8ddog270RtE0WU7ik+SHpeVhYFbNdkXvHDgJ3 ljoSAsSYuokLrpJeV/bT83hOSnE9PecSV+tAfdq+O5XMgq58PL+dfTiWRBZY/rhp GHhcCch5bRJzjGJQbtvNcCUCnZsAFaHzB3zw5auMoiEzx0DXb2ivrXVsRQAt05mT DrSaxjhLEAVUkfruexK4eVPieCAV+nkP3OcvImXzPzc140EbfUKdktSiXnaxB5Xz U/+NzR7jAbB2uRp3gctlCYY/nbYhNxK1qjONAMghMqCX1bDtEG2RxLhJjSG1f4nH RVQAr4lDMC1fS9cXw66/LU5oKhsdNKPgg7OmDF6senMzyth+My8= =id3X -----END PGP SIGNATURE-----