-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 21 Oct 2026 08:29:51 +0200
Source: php8.2
Architecture: source
Version: 8.2.35-1~deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: Debian PHP Maintainers <team+pkg-php@tracker.debian.org>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Changes:
php8.2 (8.2.35-1~deb12u1) bookworm-security; urgency=high
.
* Non-maintainer upload by the LTS Team.
* New upstream version 8.2.35:
+ Fix CVE-2026-109618 and CVE-2026-109619: State corruption via bailout.
* Refresh d/patches.
Checksums-Sha1:
4d67243ea9df467665037b741e938ff8732b0835 5596 php8.2_8.2.35-1~deb12u1.dsc
550876878da81875fea950ee84d7f7c28ea27363 12216408 php8.2_8.2.35.orig.tar.xz
527cdfffa6f700d07bb38725354d529d80089a1e 870 php8.2_8.2.35.orig.tar.xz.asc
8d8d305e36ed2f6a894c25a7cc7cd6a220c79805 71768 php8.2_8.2.35-1~deb12u1.debian.tar.xz
4adfaaf097462d106be15a68bf288419b442a58b 7936 php8.2_8.2.35-1~deb12u1_source.buildinfo
Checksums-Sha256:
0245227c3f81cce69909a713141bbea26a854612a8e66810b1c27c38d2690542 5596 php8.2_8.2.35-1~deb12u1.dsc
5737b98601fe5ab1b8c5db0c82ed3158acb9283ed3081ffe2faffb9ac81455e6 12216408 php8.2_8.2.35.orig.tar.xz
79af893d2e7571e0e312754af8e5536179d722b6a102481b888c28d605c4aca0 870 php8.2_8.2.35.orig.tar.xz.asc
e2b72f0770ee8ff430879e2ded4a165c09ffedba1234dc15b87041934f035b4f 71768 php8.2_8.2.35-1~deb12u1.debian.tar.xz
a2d025c6d948f1eb827f213acdc3c6d93152cda0fb1b097bd2aba20e97b56e04 7936 php8.2_8.2.35-1~deb12u1_source.buildinfo
Files:
2048916b52e0714273a0a8b9fe8b35a0 5596 php optional php8.2_8.2.35-1~deb12u1.dsc
cc0eb90f075ce2a7444db390c5edb696 12216408 php optional php8.2_8.2.35.orig.tar.xz
201abe785abf5db0032d97dcb2b54cc4 870 php optional php8.2_8.2.35.orig.tar.xz.asc
4e6b42bc12246db90007c8153a2f946a 71768 php optional php8.2_8.2.35-1~deb12u1.debian.tar.xz
52745983397beb544386567387944d45 7936 php optional php8.2_8.2.35-1~deb12u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=ZURo
-----END PGP SIGNATURE-----
