Debian 9931 Published by

For Debian GNU/Linux 10 LTS and 11, Ondřej Surý has released new PHP 8.2.1 and 8.1.14 packages in addition to PHP 8.0.27, 7.4.33-2, 7.3.33-9, 7.2.34-37, 7.1.33-51, 7.0.33-64, and 5.6.40-64 packages with a security fix for PDO/SQLite.



To add the repository:
#!/bin/bash # To add this repository please do:

if [ "$(whoami)" != "root" ]; then
SUDO=sudo
fi

${SUDO} apt-get -y install apt-transport-https lsb-release ca-certificates curl
${SUDO} wget -O /etc/apt/trusted.gpg.d/php.gpg https://packages.sury.org/php/apt.gpg
${SUDO} sh -c 'echo "deb https://packages.sury.org/php/ $(lsb_release -sc) main" > /etc/apt/sources.list.d/php.list'
${SUDO} apt-get update
PHP 8.2.0

PHP Packages
Issues Tracker

php-8.2.1

- Core:
. Fixed bug GH-9905 (constant() behaves inconsistent when class is undefined). (cmb)
. Fixed bug GH-9918 (License information for xxHash is not included in README.REDIST.BINS file). (Akama Hitoshi)
. Fixed bug GH-9890 (OpenSSL legacy providers not available on Windows). (cmb)
. Fixed bug GH-9650 (Can't initialize heap: [0x000001e7]). (Michael Voříšek)
. Fixed potentially undefined behavior in Windows ftok(3) emulation. (cmb)
. Fixed GH-9769 (Misleading error message for unpacking of objects). (jhdxr)

- Apache:
. Fixed bug GH-9949 (Partial content on incomplete POST request). (cmb)

- FPM:
. Fixed bug GH-9959 (Solaris port event mechanism is still broken after bug #66694). (Petr Sumbera)
. Fixed bug #68207 (Setting fastcgi.error_header can result in a WARNING). (Jakub Zelenka)
. Fixed bug #80669 (FPM numeric user fails to set groups). (Jakub Zelenka)
. Fixed bug GH-8517 (Random crash of FPM master process in fpm_stdio_child_said). (Jakub Zelenka)

- Imap:
. Fixed bug GH-10051 (IMAP: there's no way to check if a IMAP\Connection is still open). (Girgias)

- MBString:
. Fixed bug GH-9535 (The behavior of mb_strcut in mbstring has been changed in PHP8.1). (Nathan Freeman)

- Opcache:
. Fixed bug GH-9968 (Segmentation Fault during OPCache Preload). (Arnaud, michdingpayc)

- OpenSSL:
. Fixed bug GH-9997 (OpenSSL engine clean up segfault). (Jakub Zelenka)
. Fixed bug GH-9064 (PHP fails to build if openssl was built with --no-ec). (Jakub Zelenka)
. Fixed bug GH-10000 (OpenSSL test failures when OpenSSL compiled with no-dsa). (Jakub Zelenka)

- Pcntl:
. Fixed bug GH-9298 (Signal handler called after rshutdown leads to crash). (Erki Aring)

- PDO_Firebird:
. Fixed bug GH-9971 (Incorrect NUMERIC value returned from PDO_Firebird). (cmb)

- PDO/SQLite:
. Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631) (cmb)

- Session:
. Fixed GH-9932 (session name silently fails with . and [). (David Carlier)

- SPL:
. Fixed GH-9883 (SplFileObject::__toString() reads next line). (Girgias)
. Fixed GH-10011 (Trampoline autoloader will get reregistered and cannot be unregistered). (Girgias)

- SQLite3:
. Fixed bug #81742 (open_basedir bypass in SQLite3 by using file URI). (cmb)

- TSRM:
. Fixed Windows shmget() wrt. IPC_PRIVATE. (Tyson Andre)

php-8.1.14

- Core:
. Fixed bug GH-9905 (constant() behaves inconsistent when class is undefined). (cmb)
. Fixed bug GH-9918 (License information for xxHash is not included in README.REDIST.BINS file). (Akama Hitoshi)
. Fixed bug GH-9650 (Can't initialize heap: [0x000001e7]). (Michael Voříšek)
. Fixed potentially undefined behavior in Windows ftok(3) emulation. (cmb)

- Date:
. Fixed bug GH-9699 (DateTimeImmutable::diff differences in 8.1.10 onwards - timezone related). (Derick)
. Fixed bug GH-9700 (DateTime::createFromFormat: Parsing TZID string is too greedy). (Derick)
. Fixed bug GH-9866 (Time zone bug with \DateTimeInterface::diff()). (Derick)
. Fixed bug GH-9880 (DateTime diff returns wrong sign on day count when using a timezone). (Derick)

- FPM:
. Fixed bug GH-9959 (Solaris port event mechanism is still broken after bug #66694). (Petr Sumbera)
. Fixed bug #68207 (Setting fastcgi.error_header can result in a WARNING). (Jakub Zelenka)
. Fixed bug GH-8517 (Random crash of FPM master process in fpm_stdio_child_said). (Jakub Zelenka)

- MBString:
. Fixed bug GH-9535 (The behavior of mb_strcut in mbstring has been changed in PHP8.1). (Nathan Freeman)

- Opcache:
. Fixed bug GH-9968 (Segmentation Fault during OPCache Preload). (Arnaud, michdingpayc)

- OpenSSL:
. Fixed bug GH-9064 (PHP fails to build if openssl was built with --no-ec). (Jakub Zelenka)
. Fixed bug GH-10000 (OpenSSL test failures when OpenSSL compiled with no-dsa). (Jakub Zelenka)

- Pcntl:
. Fixed bug GH-9298 (Signal handler called after rshutdown leads to crash). (Erki Aring)

- PDO_Firebird:
. Fixed bug GH-9971 (Incorrect NUMERIC value returned from PDO_Firebird). (cmb)

- PDO/SQLite:
. Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631) (cmb)

- Session:
. Fixed GH-9932 (session name silently fails with . and [). (David Carlier)

- SPL:
. Fixed GH-9883 (SplFileObject::__toString() reads next line). (Girgias)
. Fixed GH-10011 (Trampoline autoloader will get reregistered and cannot be unregistered). (Girgias)

- SQLite3:
. Fixed bug #81742 (open_basedir bypass in SQLite3 by using file URI). (cmb)

php-8.0.27, 7.4.33-2, 7.3.33-9, 7.2.34-37, 7.1.33-51, 7.0.33-64, 5.6.40-64

- PDO/SQLite:
. Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631) (cmb)