-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 03 Jul 2025 18:16:05 +0200
Source: php8.2
Binary: php8.2 php8.2-xsl
Architecture: all
Version: 8.2.29-1~deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: all Build Daemon (x86-csail-02) <buildd_all-x86-csail-02@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 php8.2     - server-side, HTML-embedded scripting language (metapackage)
 php8.2-xsl - XSL module for PHP (dummy)
Changes:
 php8.2 (8.2.29-1~deb12u1) bookworm-security; urgency=high
 .
   * New upstream version 8.2.29
    - [CVE-2025-1735]: pgsql extension does not check for errors during
      escaping.
    - [CVE-2025-6491]: NULL Pointer Dereference in PHP SOAP Extension
      via Large XML Namespace Prefix.
    - [CVE-2025-6491]: Null byte termination in hostnames.
Checksums-Sha1:
 8eb7aeacf5c286b28af3dd3fd27bc86cd6e3d464 46836 php8.2-xsl_8.2.29-1~deb12u1_all.deb
 09e1abc55fd5d05d230852496c18d22864c00569 14306 php8.2_8.2.29-1~deb12u1_all-buildd.buildinfo
 d4917324eae744f5b118cb08f71190e30f3fddc2 47160 php8.2_8.2.29-1~deb12u1_all.deb
Checksums-Sha256:
 42eb674cdfa3397b068b20c4859225bb508521e16a972a2e0343d9f5bf01e64e 46836 php8.2-xsl_8.2.29-1~deb12u1_all.deb
 781e1c327c50a8de2d65f765d1f1a080d69c59f953bbb4570880940eef988587 14306 php8.2_8.2.29-1~deb12u1_all-buildd.buildinfo
 9a1de4067242a8a6b092e9e5a8f435a9e35706420a80d3d867a61a0aa9b7a504 47160 php8.2_8.2.29-1~deb12u1_all.deb
Files:
 ddb3b924ad0f652ff142a8b2ff224253 46836 php optional php8.2-xsl_8.2.29-1~deb12u1_all.deb
 edf10a1385b59de787e7a15d3c26fcd5 14306 php optional php8.2_8.2.29-1~deb12u1_all-buildd.buildinfo
 cbf99389120318cbfe7477e5958918b0 47160 php optional php8.2_8.2.29-1~deb12u1_all.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEELusn8jY95Sf7obGlx30Wh8LXl/YFAmiGUOUACgkQx30Wh8LX
l/Y3lw//Zmehvjqh6SXBnBx1pAQy2wYEYPVatM5fcsO/BGOhAQVepvEPzAxN/51M
NP/xrJmfjkc9OjpTAJ+yq6TjGtcLYyIYFwj+dP/uAI9Fs8zC4GJwMyvxRo+WRSlY
sr0cypsXc39DaN3Q3f8giu/A2X1ZQKPthDi7Squ4Fmicb7diT+XF81Q/4K7jvjI1
zPBkTEjAouXBDxVBl5qrXF1CE8ggxylXB3jzp/u+sykBuK5ggRlmBp/o3Lj01yNG
S4I6WU3qekH5erN01fCPs4Be1qdA8zkehJNqVXoSLI8YNTmXbVWqchdLXU4EanjK
53PUKrluTpJewTCAn69BrWwyHEDMvPqX/+ve6EuLOPLg7brBnAkB3jZeDCse7e4k
4G0q68t+l5yD/Sie8NcAb4CI1CXTV64Sxm3H8d4FwmFb/2gdpNO9DyIOYXXNeKhP
QprLVPgzj/Top+8sGzKMpdGXUpoeyEH5vZOLgBU0uO6kk0sm99Ai1JqwMSWPzQ3M
2ONZ6WSGsCqsdtKh1bJZqF7TY4Wj6J9/QlLGX4c1VP/Prd6h2XzQUy1G3OPYOuKN
vKyiLMyK/r/jG4bYUtTkSDINX95B1w8JdbiaezBdzUOM51Y3wzOh6R6BJDeJYFrw
OkWhlt/Fhpv018Jj+a5IUlM5K/IH6h3lcor41lilWLwkjxrFofI=
=Pry8
-----END PGP SIGNATURE-----