ea-php84-php (8.4.23-1+2.2.cpanel) stable; urgency=low

  * EA-13484: Update ea-php84 from v8.4.22 to v8.4.23
  * Fixed bug GH-22187 (Memory corruption in openssl_encrypt with AES-WRAP-PAD). (CVE-2026-14355)

 -- EA4 Update Bot <cory.mcintire@webpros.com>  Sat, 04 Jul 2026 00:00:00 -0000

ea-php84-php (8.4.22-1) stable; urgency=low

  * EA-13455: Update ea-php84 from v8.4.21 to v8.4.22

 -- EA4 Update Bot <cory.mcintire@webpros.com>  Fri, 05 Jun 2026 00:00:00 -0000

ea-php84-php (8.4.21-2) stable; urgency=low

  * EA4-260: Build for Ubuntu 26.04

 -- Heekyoung Park <heekyoung.park@webpros.com>  Fri, 08 May 2026 00:00:00 -0000

ea-php84-php (8.4.21-1) stable; urgency=low

  * EA-13429: Update ea-php84 from v8.4.20 to v8.4.21
  * Fixed GHSA-7qg2-v9fj-4mwv (XSS within FPM status endpoint). (CVE-2026-6735)
  * Fixed GHSA-wm6j-2649-pv75 (Null pointer dereference in mb_ereg_search_init()). (CVE-2026-7259)
  * Fixed GHSA-w476-322c-wpvm (SQL injection via NUL bytes in PDO_Firebird). (CVE-2025-14179)
  * Fixed GHSA-85c2-q967-79q5 (Stale SOAP_GLOBAL ref_map pointer). (CVE-2026-6722)
  * Fixed GHSA-m33r-qmcv-p97q (Use-after-free in SOAP persistence session). (CVE-2026-7261)
  * Fixed GHSA-hmxp-6pc4-f3vv (Broken Apache map value NULL check in SOAP). (CVE-2026-7262)
  * Fixed GHSA-96wq-48vp-hh57 (Signed integer overflow of char array offset). (CVE-2026-7568)
  * Fixed GHSA-m8rr-4c36-8gq4 (Unsigned char handling in ctype.h functions). (CVE-2026-7258)

 -- Cory McIntire <cory.mcintire@webpros.com>  Thu, 07 May 2026 00:00:00 -0000

ea-php84-php (8.4.20-1) stable; urgency=low

  * EA-13403: Update ea-php84 from v8.4.19 to v8.4.20

 -- EA4 Update Bot <cory.mcintire@webpros.com>  Fri, 10 Apr 2026 00:00:00 -0000

ea-php84-php (8.4.19-1) stable; urgency=low

  * EA-13372: Update ea-php84 from v8.4.18 to v8.4.19

 -- Cory McIntire <cory.mcintire@webpros.com>  Thu, 12 Mar 2026 00:00:00 -0000

ea-php84-php (8.4.18-1) stable; urgency=low

  * EA-13343: Update ea-php84 from v8.4.17 to v8.4.18

 -- Cory McIntire <cory.mcintire@webpros.com>  Thu, 12 Feb 2026 00:00:00 -0000

ea-php84-php (8.4.17-2) stable; urgency=low

  * EA4-230: Use system libxml2 in PHP 8.4

 -- Gary Stanley <gary.stanley@webpros.com>  Thu, 22 Jan 2026 00:00:00 -0000

ea-php84-php (8.4.17-1) stable; urgency=low

  * EA-13321: Update ea-php84 from v8.4.16 to v8.4.17

 -- Cory McIntire <cory.mcintire@webpros.com>  Wed, 21 Jan 2026 00:00:00 -0000

ea-php84-php (8.4.16-1) stable; urgency=low

  * EA-13296: Update ea-php84 from v8.4.15 to v8.4.16
  * Fixed GHSA-8xr5-qppj-gvwj (PDO quoting result null deref). (CVE-2025-14180)
  * Fixed GHSA-h96m-rvf9-jgm2 (Heap buffer overflow in array_merge()). (CVE-2025-14178)
  * Fixed GHSA-3237-qqm7-mfv7 (Information Leak of Memory in getimagesize). (CVE-2025-14177)

 -- Dan Muey <daniel.muey@webpros.com>  Thu, 18 Dec 2025 00:00:00 -0000

ea-php84-php (8.4.15-1) stable; urgency=low

  * EA-13267: Update ea-php84 from v8.4.14 to v8.4.15

 -- Cory McIntire <cory.mcintire@webpros.com>  Thu, 20 Nov 2025 00:00:00 -0000

ea-php84-php (8.4.14-2) stable; urgency=low

  * EA-13088: Update php-litespeed to 8.3

 -- Chris Castillo <chris.castillo@webpros.com>  Thu, 06 Nov 2025 00:00:00 -0000

ea-php84-php (8.4.14-1) stable; urgency=low

  * EA-13231: Update ea-php84 from v8.4.13 to v8.4.14

 -- Cory McIntire <cory.mcintire@webpros.com>  Tue, 28 Oct 2025 00:00:00 -0000

ea-php84-php (8.4.13-1) stable; urgency=low

  * EA-13171: Update ea-php84 from v8.4.12 to v8.4.13

 -- Cory McIntire <cory.mcintire@webpros.com>  Tue, 07 Oct 2025 00:00:00 -0000

ea-php84-php (8.4.12-2) stable; urgency=low

  * EA4-122: map u24 libodbc for PHP extension

 -- Dan Muey <daniel.muey@webpros.com>  Wed, 10 Sep 2025 00:00:00 -0000

ea-php84-php (8.4.12-1) stable; urgency=low

  * EA-13086: Update ea-php84 from v8.4.11 to v8.4.12

 -- Cory McIntire <cory.mcintire@webpros.com>  Tue, 02 Sep 2025 00:00:00 -0000

ea-php84-php (8.4.11-1) stable; urgency=low

  * EA-13049: Update ea-php84 from v8.4.10 to v8.4.11

 -- Cory McIntire <cory.mcintire@webpros.com>  Fri, 01 Aug 2025 00:00:00 -0000

ea-php84-php (8.4.10-1) stable; urgency=low

  * EA-12995: Update ea-php84 from v8.4.8 to v8.4.10
  * Fixed GHSA-hrwm-9436-5mv3 (pgsql extension does not check for errors during escaping). (CVE-2025-1735)
  * Fixed GHSA-453j-q27h-5p8x (NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix). (CVE-2025-6491)
  * Fixed GHSA-3cr5-j632-f35r (Null byte termination in hostnames). (CVE-2025-1220)

 -- Cory McIntire <cory.mcintire@webpros.com>  Thu, 03 Jul 2025 00:00:00 -0000

ea-php84-php (8.4.8-1) stable; urgency=low

  * EA-12918: Update ea-php84 from v8.4.7 to v8.4.8

 -- Cory McIntire <cory.mcintire@webpros.com>  Thu, 05 Jun 2025 00:00:00 -0000

ea-php84-php (8.4.7-1) stable; urgency=low

  * EA-12851: Update ea-php84 from v8.4.6 to v8.4.7

 -- Cory McIntire <cory.mcintire@webpros.com>  Thu, 08 May 2025 00:00:00 -0000

ea-php84-php (8.4.6-1) stable; urgency=low

  * EA-12808: Update ea-php84 from v8.4.5 to v8.4.6

 -- Cory McIntire <cory.mcintire@webpros.com>  Thu, 10 Apr 2025 00:00:00 -0000

ea-php84-php (8.4.5-1) stable; urgency=low

  * EA-12768: Update ea-php84 from v8.4.4 to v8.4.5
  * Fixed GHSA-hgf54-96fm-v528 (Stream HTTP wrapper header check might omit basic auth header). (CVE-2025-1736)
  * Fixed GHSA-52jp-hrpf-2jff (Stream HTTP wrapper truncate redirect location to 1024 bytes). (CVE-2025-1861)
  * Fixed GHSA-pcmh-g36c-qc44 (Streams HTTP wrapper does not fail for headers without colon). (CVE-2025-1734)
  * Fixed GHSA-v8xr-gpvj-cx9g (Header parser of `http` stream wrapper does not handle folded headers). (CVE-2025-1217)
  * Fixed GHSA-p3x9-6h7p-cgfc (libxml streams use wrong `content-type` header when requesting a redirected resource). (CVE-2025-1219)
  * Fixed GHSA-rwp7-7vc6-8477 (Reference counting in php_request_shutdown causes Use-After-Free). (CVE-2024-11235)

 -- Cory McIntire <cory.mcintire@webpros.com>  Thu, 13 Mar 2025 00:00:00 -0000

ea-php84-php (8.4.4-1) stable; urgency=low

  * EA-12709: Update ea-php84 from v8.4.3 to v8.4.4

 -- Cory McIntire <cory.mcintire@webpros.com>  Thu, 13 Feb 2025 00:00:00 -0000

ea-php84-php (8.4.3-1) stable; urgency=low

  * EA-12652: Update ea-php84 from v8.4.2 to v8.4.3

 -- Cory McIntire <cory@cpanel.net>  Fri, 17 Jan 2025 00:00:00 -0000

ea-php84-php (8.4.2-1) stable; urgency=low

  * EA-12619: Update ea-php84 from v8.4.1 to v8.4.2

 -- Cory McIntire <cory@cpanel.net>  Thu, 19 Dec 2024 00:00:00 -0000

ea-php84-php (8.4.1-1) stable; urgency=low

  * EA-12579: Update ea-php84 from v8.4.0 to v8.4.1

 -- Dan Muey <daniel.muey@webpros.com>  Thu, 21 Nov 2024 00:00:00 -0000

ea-php84-php (8.4.0-1) stable; urgency=low

  * ZC-12235: First build

 -- Julian Brown <julian.brown@cpanel.net>  Fri, 04 Oct 2024 00:00:00 -0000

