ea-php83-php (8.3.16-1+2.2.cpanel) stable; urgency=low

  * EA-12650: Update ea-php83 from v8.3.15 to v8.3.16

 -- Cory McIntire <cory@cpanel.net>  Thu, 16 Jan 2025 00:00:00 -0000

ea-php83-php (8.3.15-1) stable; urgency=low

  * EA-12618: Update ea-php83 from v8.3.14 to v8.3.15

 -- Cory McIntire <cory@cpanel.net>  Thu, 19 Dec 2024 00:00:00 -0000

ea-php83-php (8.3.14-1) stable; urgency=low

  * EA-12578: Update ea-php83 from v8.3.13 to v8.3.14
  * (Single byte overread with convert.quoted-printable-decode filter). (CVE-2024-11233)
  * (Configuring a proxy in a stream context might allow for CRLF injection in URIs). (CVE-2024-11234)
  * (Integer overflow in the dblib quoter causing OOB writes). (CVE-2024-11236)
  * (Integer overflow in the firebird quoter causing OOB writes). (CVE-2024-11236)
  * (Leak partial content of the heap through heap buffer over-read). (CVE-2024-8929)
  * (OOB access in ldap_escape). (CVE-2024-8932)

 -- Cory McIntire <cory@cpanel.net>  Thu, 21 Nov 2024 00:00:00 -0000

ea-php83-php (8.3.13-2) stable; urgency=low

  * ZC-12246: Correct conffiles on Ubuntu

 -- Julian Brown <julian.brown@cpanel.net>  Fri, 25 Oct 2024 00:00:00 -0000

ea-php83-php (8.3.13-1) stable; urgency=low

  * EA-12497: Update ea-php83 from v8.3.12 to v8.3.13

 -- Cory McIntire <cory@cpanel.net>  Thu, 24 Oct 2024 00:00:00 -0000

ea-php83-php (8.3.12-1) stable; urgency=low

  * EA-12410: Update ea-php83 from v8.3.11 to v8.3.12
  * Fixed bug GHSA-865w-9rf3-2wh5 (Logs from childrens may be altered). (CVE-2024-9026)
  * Fixed bug GHSA-9pqp-7h25-4f32 (Erroneous parsing of multipart form data). (CVE-2024-8925)
  * Fixed bug GHSA-p99j-rfp4-xqvq (Bypass of CVE-2024-4577, Parameter Injection Vulnerability). (CVE-2024-8926)
  * Fixed bug GHSA-94p6-54jq-9mwp (cgi.force_redirect configuration is bypassable due to the environment variable collision). (CVE-2024-8927)

 -- Cory McIntire <cory@cpanel.net>  Thu, 26 Sep 2024 00:00:00 -0000

ea-php83-php (8.3.11-1) stable; urgency=low

  * ZC-12149: Update from v8.3.10 to v8.3.11

 -- Julian Brown <julian.brown@cpanel.net>  Mon, 23 Sep 2024 00:00:00 -0000

ea-php83-php (8.3.10-2) stable; urgency=low

  * ZC-12153: make opcache INI a configfile for debs

 -- Dan Muey <dan@cpanel.net>  Thu, 05 Sep 2024 00:00:00 -0000

ea-php83-php (8.3.10-1) stable; urgency=low

  * EA-12305: Update ea-php83 from v8.3.9 to v8.3.10

 -- Cory McIntire <cory@cpanel.net>  Thu, 01 Aug 2024 00:00:00 -0000

ea-php83-php (8.3.9-1) stable; urgency=low

  * EA-12276: Update ea-php83 from v8.3.8 to v8.3.9

 -- Cory McIntire <cory@cpanel.net>  Tue, 09 Jul 2024 00:00:00 -0000

ea-php83-php (8.3.8-1) stable; urgency=low

  * EA-12193: Update ea-php83 from v8.3.7 to v8.3.8
  * Fixed bug GHSA-3qgc-jrrr-25jv (Bypass of CVE-2012-1823, Argument Injection in PHP-CGI). (CVE-2024-4577)
  * Fixed bug GHSA-w8qr-v226-r27w (Filter bypass in filter_var FILTER_VALIDATE_URL). (CVE-2024-5458)
  * Fixed bug GHSA-9fcc-425m-g385 (Bypass of CVE-2024-1874). (CVE-2024-5585)
  * The openssl_private_decrypt function in PHP, when using PKCS1 padding (OPENSSL_PKCS1_PADDING, which is the default), is vulnerable to the Marvin Attack

 -- Cory McIntire <cory@cpanel.net>  Thu, 06 Jun 2024 00:00:00 -0000

ea-php83-php (8.3.7-1) stable; urgency=low

  * EA-12145: Update ea-php83 from v8.3.6 to v8.3.7

 -- Dan Muey <dan@cpanel.net>  Tue, 04 Jun 2024 00:00:00 -0000

ea-php83-php (8.3.6-2) stable; urgency=low

  * ZC-11730: Add GD support for AVIF format on Ubuntu 22 and higher

 -- Brian Mendoza <brian.mendoza@cpanel.net>  Thu, 11 Apr 2024 00:00:00 -0000

ea-php83-php (8.3.6-1) stable; urgency=low

  * EA-12086: Update ea-php83 from v8.3.4 to v8.3.6
  * Fixed bug GHSA-pc52-254m-w9w7 (Command injection via array-ish $command parameter of proc_open). (CVE-2024-1874)
  * Fixed bug GHSA-wpj3-hf5j-x4v4 (__Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix). (CVE-2024-2756)
  * Fixed bug GHSA-h746-cjrr-wfmr (password_verify can erroneously return true, opening ATO risk). (CVE-2024-3096)
  * Fixed bug GHSA-fjp9-9hwx-59fq (mb_encode_mimeheader runs endlessly for some inputs). (CVE-2024-2757)

 -- Cory McIntire <cory@cpanel.net>  Thu, 11 Apr 2024 00:00:00 -0000

ea-php83-php (8.3.4-2) stable; urgency=low

  * ZC-11561: Add GD support for AVIF format on RHEL 8 and newer (RHEL only)

 -- Brian Mendoza <brian.mendoza@cpanel.net>  Thu, 21 Mar 2024 00:00:00 -0000

ea-php83-php (8.3.4-1) stable; urgency=low

  * EA-12018: Update ea-php83 from v8.3.3 to v8.3.4

 -- Cory McIntire <cory@cpanel.net>  Thu, 14 Mar 2024 00:00:00 -0000

ea-php83-php (8.3.3-1) stable; urgency=low

  * EA-11978: Update ea-php83 from v8.3.2 to v8.3.3

 -- Cory McIntire <cory@cpanel.net>  Thu, 15 Feb 2024 00:00:00 -0000

ea-php83-php (8.3.2-1) stable; urgency=low

  * EA-11920: Update ea-php83 from v8.3.1 to v8.3.2

 -- Cory McIntire <cory@cpanel.net>  Thu, 18 Jan 2024 00:00:00 -0000

ea-php83-php (8.3.1-1) stable; urgency=low

  * EA-11894: Update ea-php83 from v8.3.0 to v8.3.1

 -- Cory McIntire <cory@cpanel.net>  Thu, 04 Jan 2024 00:00:00 -0000

ea-php83-php (8.3.0-4) stable; urgency=low

  * EA-10753: Have snmp module require 'snmp-mibs-downloader' for deb

 -- Travis Holloway <t.holloway@cpanel.net>  Mon, 18 Dec 2023 00:00:00 -0000

ea-php83-php (8.3.0-3) stable; urgency=low

  * ZC-11475: Build on CentOS 7

 -- Julian Brown <julian.brown@cpanel.net>  Thu, 14 Dec 2023 00:00:00 -0000

ea-php83-php (8.3.0-2) stable; urgency=low

  * ZC-11183, ZC-11175: Initial Build

 -- Julian Brown <julian.brown@cpanel.net>  Mon, 27 Nov 2023 00:00:00 -0000

