Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:123112 X-Original-To: internals@lists.php.net Delivered-To: internals@lists.php.net Received: from php-smtp4.php.net (php-smtp4.php.net [45.112.84.5]) by qa.php.net (Postfix) with ESMTPS id 3D53C1ADB51 for ; Thu, 11 Apr 2024 14:14:58 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=php.net; s=mail; t=1712844931; bh=EdlF3FzluPeXVqw/1eTmdxKw5B3yWx7gdppGT2rofCs=; h=From:Date:Subject:To:From; b=CazmFCEKbiHyjMXMzmy4Z9008Fc6FgXKjeAflc3+fJuot/rBTgnJDS8ZENdo65ggJ w+d/cVBKQ5Ne76X0clMEaQNF9zfxAjXQwcfBOoiCOlxB3YAs7UulJG/EGcm6Tzjtiy ti+1RqracjBYhtM1vh5fu1+GSJa4uu91RPpQk6SenhANMjq/M9HFryz3R92qm5VoGy q6vkGzDfEf6noUdXtA16odBcVmWyZAW9O3i3wi5m2x49Eb+nhcyu9NIMskah6d7AeN +cgDRNa29lP8Hz+xMzUxPMV3ute5JZgFBoKpnfA+sBeu2P8+f8qMh9b2mV2E7QBsQU YplwmineSVQ3g== Received: from php-smtp4.php.net (localhost [127.0.0.1]) by php-smtp4.php.net (Postfix) with ESMTP id BFF501806C9 for ; Thu, 11 Apr 2024 14:15:27 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-13) on php-smtp4.php.net X-Spam-Level: * X-Spam-Status: No, score=1.0 required=5.0 tests=BAYES_50,DMARC_MISSING, HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,RCVD_IN_DNSWL_NONE, RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL,SPF_HELO_NONE,SPF_PASS, T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=4.0.0 X-Spam-Virus: No X-Envelope-From: Received: from mail-pf1-f173.google.com (mail-pf1-f173.google.com [209.85.210.173]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by php-smtp4.php.net (Postfix) with ESMTPS for ; Thu, 11 Apr 2024 14:15:26 +0000 (UTC) Received: by mail-pf1-f173.google.com with SMTP id d2e1a72fcca58-6ed2dc03df6so3856348b3a.1 for ; Thu, 11 Apr 2024 07:14:52 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1712844891; x=1713449691; h=to:subject:message-id:date:from:mime-version:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=j3/JLD5TdPKh0YH6vKq5V7j64i3fO1ncrPQILS827cU=; b=ULTIKyf/4ZX9srRHLuRFnKcMPEdX4K2uTGVWm9qXF/ytmt27hadoTWnJFdl0sQrmGP wW6m2JC4f5x/XKUoI/d9ZKzOVYBaeS2TFXqpfg9ePW+H0K4/SDR16VNHcLmuk2RlLep7 0/tbUqyFTPqZuF0hsFRXD+4lynoZQ3X5nlZI19pcK7k4zx+8rYfAi3S2LUugRzWp0khr Ghdh1HFV+K2FvEgpzSoTl4F4rbFeV8xCUVuj5Z+MVtKTSpx12Saxm5NIQ/zdkvr58P8R 5NPpELtS7BkPDhBw1skW8von+wP6u4jEg0MjEdsLpaBeBnRPxNdX2iMfD7/SuNmMexbd rUKw== X-Gm-Message-State: AOJu0Yyj3EWdXkics3V0hx9y1F/VpHVyp2IfFJp6BSmPQ91vMTODk7R4 FKHpBYXZmfYhzfZ7Fpc1xhmz3krozQUOp9eEUPlORlyPvAAmfzCv0NLpRUlbCuXMjs7oYIWtgUm QYUqyTv1qHnBFIujhDn7d16latuuN3HXDm9pboS51aweiTTSuBrQ6gA== X-Google-Smtp-Source: AGHT+IGL0RTEO3wA0+dr3YIHt2j0YACvb7r059gd2VFhsgX2ppr2zfCwa1MeJyw3eHPl2XmoEo1kgqBwzuduF3C15sE= X-Received: by 2002:a17:902:ca03:b0:1e4:ddcf:5095 with SMTP id w3-20020a170902ca0300b001e4ddcf5095mr5167228pld.8.1712844891365; Thu, 11 Apr 2024 07:14:51 -0700 (PDT) Precedence: bulk list-help: list-post: List-Id: internals.lists.php.net MIME-Version: 1.0 Date: Thu, 11 Apr 2024 10:14:40 -0400 Message-ID: Subject: [PHP-DEV] PHP 8.2.18 Released! To: PHP internals Content-Type: multipart/alternative; boundary="0000000000004e3fd40615d2c791" From: pierrick@php.net (Pierrick Charron) --0000000000004e3fd40615d2c791 Content-Type: text/plain; charset="UTF-8" The PHP development team announces the immediate availability of PHP 8.2.18. This is a security release that addresses CVE-2024-1874, CVE-2024-2756 and CVE-2024-3096. All PHP 8.2 users are advised to upgrade to this version. For source downloads of PHP 8.2.18 please visit our downloads page. Windows binaries can be found on the PHP for Windows site. The list of changes is recorded in the ChangeLog. Release Announcement: Downloads: Windows downloads: Changelog: Release Manifest: Many thanks to all the contributors and supporters! Sergey Panteleev, Pierrick Charron & Ben Ramsey php-8.2.18.tar.bz2 SHA256 hash: ca0b07c254200320f518ac5b3df540a9cf14d866f3c93edc3013b52e06fac796 PGP signature: -----BEGIN PGP SIGNATURE----- iQJFBAABCgAvFiEEEZjAEXWTSXpexcGZKGrx+Yl0adwFAmYVjVoRHHBpZXJyaWNr QHBocC5uZXQACgkQKGrx+Yl0adxkvQ/+PlNTHY2iM3IVZIYvp6bKTCs0RYikHyep sFMtFBunEPzP2FYWV63Q1W0iBqBleA6rSplVkWmEH3HxZZ5Dpq6MgwZOs6w3ynZz vPX92DgRsXpfP2CxFwso9yWGFKmhyWD0UBdNZcEEWmFcNMOXXP5yuF41kVvqnJ+R 9nTdGtHN+SSoWeqfb1MGsrWoiPoo7BtfEW/PBWGehrrYKApHlMzDX6MKPMiTJBEW KQYh4KJdBac9eJCC7tXmvR89xq1954+78ofvdjm1B09BEiqTVdqqgu0KzHW76vlD VNqzbJQ4VZneqTNSHO6oEWk4M60CUHbDZ27wGvdkrpS+2ucR2fX5YLb1TTheLEay /GSrjoiQWTXZIRNgaCFDuW1uZIwzw0cFxlO4z+PH6HcnyBNhldzaNVJtOw5E8BEt hzKBWmw1K8RoK47m+oFov82eool/Z5o0Zawpf84B9Cv/ERFo0QAwdzwpcM6JlTgG fjoSWzql+F5gWmcEpgrcBsCXICxDUgjRDBiD7D9BEs2QwytS/5CVZQE23AOocZlL T4T5EM/Ie3hClWVAH/toR0gCS0faQrLAAx6BgpNO3qpBEg9iP9hnYdbBKMgFAxRg 4Z9zMFalD+sNpvksRhofIpPK1epaT+vRwx+fxQ2gXcJm8lEc47VhCN5SQd8Ex7SI tCXy8u63g60= =5Pl+ -----END PGP SIGNATURE----- php-8.2.18.tar.gz SHA256 hash: b934ca7e8c82945c5cbf0aa2a3f66727eb5b5098e551819e1b090572d6a51ead PGP signature: -----BEGIN PGP SIGNATURE----- iQJFBAABCgAvFiEEEZjAEXWTSXpexcGZKGrx+Yl0adwFAmYVjV8RHHBpZXJyaWNr QHBocC5uZXQACgkQKGrx+Yl0adyQrQ//So3dKNN9W4+POpfimldUTY5/QUtKnWiv T4iID7mn+bt91T/wQkVfsDeY5dmb3W3HQ5dtB5xji7BbGOAC5duSZiAarWmOJHRm m9I2RbXrvLzEZuPOJCNLBXG0FqVpr8QBKioBF0FsqnSKNu0sHGMiCpsYPkTFNuxN /GmBxskS9oINycvTfGUM9uWvFMkbWIYdwkrCn/tQjcPW833iFGdpSX0/KLEIDTUe bDNgD5mVgt+Gdmu1VTN3sZYAv2t3BVdgakV9wI30jv8dkwFeybVSH+L3MRsW2YMA fry+IzPPlBR2WgptFNEnp3HXe1U+gc+IRhSHVp/EzXbt4bSP99wh+nosq1jmqSHF REDIr9LHe/DPqoH2VNZ0KA1a3G5a5V6p+88cvYIVTCAUMCe05hfT7wB6IEn4t3zT B6hx28zaPn1KIuckKv6kf8GfsWzSMvJQMOZaJb8cUH380F1Q53/vPMJP5+7QQYeH GaQRfLyP+mPKNAcQ9TK3K2WNCGSR9vAF+2sjR/+b2I2YuzghGDT5Eq8Qb1fYuMDo +KhKLcY0LBwAbPPXHyg96MI5b1QLRAiaA8+if17hl135PecOO4bL7XdLq4mZtT1O IbI/37z/jmdoIz4nwqyXIxR0ik3kDy46PUxhfYIg+b3o+hXmDIl8202wxnwixazu kWsQaqvLi7w= =+dSs -----END PGP SIGNATURE----- php-8.2.18.tar.xz SHA256 hash: 44b306fc021e56441f691da6c3108788bd9e450f293b3bc70fcd64b08dd41a50 PGP signature: -----BEGIN PGP SIGNATURE----- iQJFBAABCgAvFiEEEZjAEXWTSXpexcGZKGrx+Yl0adwFAmYVjWARHHBpZXJyaWNr QHBocC5uZXQACgkQKGrx+Yl0adzsFA//egQ1i7V64nxgDF9IqUwRZ/1T6S+zqGlX wczmmLuI+CVHsXD3jFlLmh/CLwtxjB8iv3+aj1nXhn6G3ZyWEI2o/qlM4m1z5+q2 d/WQfgz98HmswQC1WUJXsvn+j8pGMW1kM3S79rIft5nCFPnjhuZ/HHfD3si1k7Et yMH7arZZeuQrSCGzWoqbPLErqCfVbSceV+WDoNzv0HRiK6g9s5wxKoj2+RZTvXIV u3dx3LEYbPDtJ2yqZjNDlZ9AxSfFVER1T7gby+1TvwbGFxGqvo8OERBwcBioTIZJ MW+VwC7lAbbRKqlG82SiWxZvxo/25lTlSP0rJTH5cNJaiLirDMF1h59Nn+LsiGo/ p665V5YDMwazxe2KdKCF6rxo5aR7hlNvhD+2g28qITrjBE8lRQ5daPnCIzHpRXW7 TQRzYrqo4qJpnp6F4CV8MIjxN4pzHxWTb7wd3ueyqtaur3xDVMD0xO+u+6MYY0JU GDcwNXeLj6ah2ZyesxJNdMMTWeywnUHrssTpJp2GGNSS6yEGGQaei/CyiAEqoiZQ 63BJkIOvvxX++/x7FhJeGmGl28jwXfZ65NdE5eNbQX/TSRDNs4tKL6MjzU/qKA9J G9Gv//DEz6SMG06JQzzwMtiLJxuy+uQI9AGYGucecMiGyT53uBh2fDgmHQSxeLmf oHs4STkDsQ8= =ccDN -----END PGP SIGNATURE----- --0000000000004e3fd40615d2c791 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
The PHP development team announces the immediate availabil= ity of PHP
8.2.18. This is a security release that addresses CVE-2024-18= 74,
CVE-2024-2756 and CVE-2024-3096.

All PHP 8.2 users are advise= d to upgrade to this version.

For source downloads of PHP 8.2.18 ple= ase visit our downloads page.
Windows binaries can be found on the PHP f= or Windows site.
The list of changes is recorded in the ChangeLog.
Release Announcement: <https://php.net/releases/8_2_18.php>
Downloads: =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0<https:= //php.net/downloads>
Windows downloads: =C2=A0 =C2=A0<https://windows.php.net/downl= oad#php-8.2>
Changelog: =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0= <https://php.net/Chan= geLog-8.php#8.2.18>
Release Manifest:
<https://gist.github.c= om/adoy/3d3a965ce597435758024dce156a8447>

Many thanks to all = the contributors and supporters!

Sergey Panteleev, Pierrick Charron = & Ben Ramsey

php-8.2.18.tar.bz2
SHA256 hash: ca0b07c254200320= f518ac5b3df540a9cf14d866f3c93edc3013b52e06fac796
PGP signature:
-----= BEGIN PGP SIGNATURE-----

iQJFBAABCgAvFiEEEZjAEXWTSXpexcGZKGrx+Yl0adw= FAmYVjVoRHHBpZXJyaWNr
QHBocC5uZXQACgkQKGrx+Yl0adxkvQ/+PlNTHY2iM3IVZIYvp6= bKTCs0RYikHyep
sFMtFBunEPzP2FYWV63Q1W0iBqBleA6rSplVkWmEH3HxZZ5Dpq6MgwZOs= 6w3ynZz
vPX92DgRsXpfP2CxFwso9yWGFKmhyWD0UBdNZcEEWmFcNMOXXP5yuF41kVvqnJ+R=
9nTdGtHN+SSoWeqfb1MGsrWoiPoo7BtfEW/PBWGehrrYKApHlMzDX6MKPMiTJBEW
KQY= h4KJdBac9eJCC7tXmvR89xq1954+78ofvdjm1B09BEiqTVdqqgu0KzHW76vlD
VNqzbJQ4VZ= neqTNSHO6oEWk4M60CUHbDZ27wGvdkrpS+2ucR2fX5YLb1TTheLEay
/GSrjoiQWTXZIRNga= CFDuW1uZIwzw0cFxlO4z+PH6HcnyBNhldzaNVJtOw5E8BEt
hzKBWmw1K8RoK47m+oFov82e= ool/Z5o0Zawpf84B9Cv/ERFo0QAwdzwpcM6JlTgG
fjoSWzql+F5gWmcEpgrcBsCXICxDUgj= RDBiD7D9BEs2QwytS/5CVZQE23AOocZlL
T4T5EM/Ie3hClWVAH/toR0gCS0faQrLAAx6Bgp= NO3qpBEg9iP9hnYdbBKMgFAxRg
4Z9zMFalD+sNpvksRhofIpPK1epaT+vRwx+fxQ2gXcJm8= lEc47VhCN5SQd8Ex7SI
tCXy8u63g60=3D
=3D5Pl+
-----END PGP SIGNATURE-= ----


php-8.2.18.tar.gz
SHA256 hash: b934ca7e8c82945c5cbf0aa2a= 3f66727eb5b5098e551819e1b090572d6a51ead
PGP signature:
-----BEGIN PGP= SIGNATURE-----

iQJFBAABCgAvFiEEEZjAEXWTSXpexcGZKGrx+Yl0adwFAmYVjV8R= HHBpZXJyaWNr
QHBocC5uZXQACgkQKGrx+Yl0adyQrQ//So3dKNN9W4+POpfimldUTY5/QUt= KnWiv
T4iID7mn+bt91T/wQkVfsDeY5dmb3W3HQ5dtB5xji7BbGOAC5duSZiAarWmOJHRmm9I2RbXrvLzEZuPOJCNLBXG0FqVpr8QBKioBF0FsqnSKNu0sHGMiCpsYPkTFNuxN
/GmBx= skS9oINycvTfGUM9uWvFMkbWIYdwkrCn/tQjcPW833iFGdpSX0/KLEIDTUe
bDNgD5mVgt+G= dmu1VTN3sZYAv2t3BVdgakV9wI30jv8dkwFeybVSH+L3MRsW2YMA
fry+IzPPlBR2WgptFNE= np3HXe1U+gc+IRhSHVp/EzXbt4bSP99wh+nosq1jmqSHF
REDIr9LHe/DPqoH2VNZ0KA1a3G= 5a5V6p+88cvYIVTCAUMCe05hfT7wB6IEn4t3zT
B6hx28zaPn1KIuckKv6kf8GfsWzSMvJQM= OZaJb8cUH380F1Q53/vPMJP5+7QQYeH
GaQRfLyP+mPKNAcQ9TK3K2WNCGSR9vAF+2sjR/+b= 2I2YuzghGDT5Eq8Qb1fYuMDo
+KhKLcY0LBwAbPPXHyg96MI5b1QLRAiaA8+if17hl135Pec= OO4bL7XdLq4mZtT1O
IbI/37z/jmdoIz4nwqyXIxR0ik3kDy46PUxhfYIg+b3o+hXmDIl820= 2wxnwixazu
kWsQaqvLi7w=3D
=3D+dSs
-----END PGP SIGNATURE-----
<= br>
php-8.2.18.tar.xz
SHA256 hash: 44b306fc021e56441f691da6c3108788bd= 9e450f293b3bc70fcd64b08dd41a50
PGP signature:
-----BEGIN PGP SIGNATUR= E-----

iQJFBAABCgAvFiEEEZjAEXWTSXpexcGZKGrx+Yl0adwFAmYVjWARHHBpZXJya= WNr
QHBocC5uZXQACgkQKGrx+Yl0adzsFA//egQ1i7V64nxgDF9IqUwRZ/1T6S+zqGlX
= wczmmLuI+CVHsXD3jFlLmh/CLwtxjB8iv3+aj1nXhn6G3ZyWEI2o/qlM4m1z5+q2
d/WQfgz= 98HmswQC1WUJXsvn+j8pGMW1kM3S79rIft5nCFPnjhuZ/HHfD3si1k7Et
yMH7arZZeuQrSC= GzWoqbPLErqCfVbSceV+WDoNzv0HRiK6g9s5wxKoj2+RZTvXIV
u3dx3LEYbPDtJ2yqZjNDl= Z9AxSfFVER1T7gby+1TvwbGFxGqvo8OERBwcBioTIZJ
MW+VwC7lAbbRKqlG82SiWxZvxo/2= 5lTlSP0rJTH5cNJaiLirDMF1h59Nn+LsiGo/
p665V5YDMwazxe2KdKCF6rxo5aR7hlNvhD+= 2g28qITrjBE8lRQ5daPnCIzHpRXW7
TQRzYrqo4qJpnp6F4CV8MIjxN4pzHxWTb7wd3ueyqt= aur3xDVMD0xO+u+6MYY0JU
GDcwNXeLj6ah2ZyesxJNdMMTWeywnUHrssTpJp2GGNSS6yEGG= Qaei/CyiAEqoiZQ
63BJkIOvvxX++/x7FhJeGmGl28jwXfZ65NdE5eNbQX/TSRDNs4tKL6Mj= zU/qKA9J
G9Gv//DEz6SMG06JQzzwMtiLJxuy+uQI9AGYGucecMiGyT53uBh2fDgmHQSxeLm= f
oHs4STkDsQ8=3D
=3DccDN
-----END PGP SIGNATURE-----
--0000000000004e3fd40615d2c791--