# Allow-list over deb.sury.org's debian/patches/series, at the Salsa commit in DEB_PATCHES
# (eol/<version>/*/Dockerfile). Every patch of that series appears here in its order; the
# commented-out ones are left out:
# - packaging: Debian paths, defaults and packaging;
# - build: build-system changes for other libraries or toolchains than our bases';
# - behaviour: changed defaults or new features;
# - tests: test-only changes that need a left-out patch;
# - telemetry: deb.sury.org's DNS version check, which reports the PHP version to its server.
# packaging: 0001-libtool_fixes.patch
# packaging: 0002-static_openssl.patch
# packaging: 0003-debian_quirks.patch
# packaging: 0004-libtool2.2.patch
# packaging: 0005-we_WANT_libtool.patch
# packaging: 0006-php-5.4.9-phpinfo.patch
# packaging: 0007-extension_api.patch
# packaging: 0008-no_apache_installed.patch
# packaging: 0009-recode_is_shared.patch
# packaging: 0010-proc_open.patch
# packaging: 0011-php.ini_securitynotes.patch
# packaging: 0012-php-5.4.7-libdb.patch
# packaging: 0013-Add-support-for-use-of-the-system-timezone-database.patch
# packaging: 0014-force_libmysqlclient_r.patch
# packaging: 0015-strcmp_null-OnUpdateErrorLog.patch
# packaging: 0016-dont-gitclean-in-build.patch
# packaging: 0017-qdbm-is-usr_include_qdbm.patch
# packaging: 0018-session_save_path.patch
# packaging: 0019-php-fpm-man-section-and-cleanup.patch
# packaging: 0020-fpm-config.patch
# packaging: 0021-php-fpm-sysconfdir.patch
# packaging: 0022-lp564920-fix-big-files.patch
# packaging: 0023-temporary-path-fixes-for-multiarch.patch
# packaging: 0024-hurd-noptrace.patch
# packaging: 0025-php-5.3.9-mysqlnd.patch
# packaging: 0026-php-5.3.9-gnusrc.patch
# packaging: 0027-php-5.3.3-macropen.patch
# packaging: 0028-php-5.2.4-norpath.patch
# packaging: 0029-php-5.2.4-embed.patch
# packaging: 0030-php-fpm-m68k.patch
# packaging: 0031-expose_all_built_and_installed_apis.patch
# packaging: 0032-Use-system-timezone.patch
# packaging: 0033-zlib-largefile-function-renaming.patch
# packaging: 0034-php-fpm-do-reload-on-SIGHUP.patch
# packaging: 0035-php-5.4.8-ldap_r.patch
# packaging: 0036-php-5.4.9-fixheader.patch
# packaging: 0037-php-5.6.0-noNO.patch
# packaging: 0038-php-5.6.0-oldpcre.patch
# packaging: 0039-hack-phpdbg-to-explicitly-link-with-libedit.patch
# packaging: 0040-Fix-ZEND_MM_ALIGNMENT-on-m64k.patch
# packaging: 0041-Add-patch-to-install-php7-module-directly-to-APXS_LI.patch
# packaging: 0042-Remove-W3C-validation-icon-to-not-expose-the-reader-.patch
# packaging: 0043-Don-t-put-INSTALL_ROOT-into-phar.phar-exec-stanza.patch
# packaging: 0044-XMLRPC-EPI-library-has-to-be-linked-as-lxmlrpc-epi.patch
# packaging: 0045-Really-expand-libdir-datadir-into-EXPANDED_LIBDIR-DA.patch
# packaging: 0046-Fix-ext-date-lib-parse_tz-PATH_MAX-HURD-FTBFS.patch
# build: 0047-Adjust-tidy-extension-for-tidy-html5.patch
# build: 0048-Use-pkg-config-for-FreeType2-detection.patch
# packaging: 0049-Use-SOURCE_DATE_EPOCH-as-PHP_BUILD_DATE-if-available.patch
0050-CVE-2019-9020.patch
0051-CVE-2019-9021.patch
0052-CVE-2019-9022-caa.patch
0053-CVE-2019-9022.patch
0054-CVE-2019-9023-1.patch
0055-CVE-2019-9023-2.patch
0056-CVE-2019-9023-3.patch
0057-CVE-2019-9023-4.patch
0058-CVE-2019-9024.patch
0059-Fix-bug-77396-Null-Pointer-Dereference-in-phar_creat.patch
0060-Fix-77431-SplFileInfo-__construct-accepts-NUL-bytes.patch
0061-Fix-integer-overflows-on-32-bits.patch
0062-Fix-bug-77540-Invalid-Read-on-exif_process_SOFn.patch
0063-Fix-bug-77563-Uninitialized-read-in-exif_process_IFD.patch
0064-Fix-test-error-message.patch
0065-Fix-bug-77586-phar_tar_writeheaders_int-buffer-overf.patch
0066-Fix-bug-77630-safer-rename-procedure.patch
0067-Fix-test-portability.patch
0068-Update-NEWS.patch
# build: 0069-Use-pkg-config-for-ICU-as-the-old-icu-config-has-bee.patch
# build: 0070-Fix-C-11-and-up-compatibility-for-zend_finite-and-mo.patch
# build: 0071-ext-intl-Use-C-namespaces-for-ICU-63.1.patch
# build: 0072-Fix-rl_completion_matches-compilation-with-newer-lib.patch
0073-SQLite3-add-DEFENSIVE-config-for-SQLite-3.26.0-as-a-.patch
0074-Fix-bug-77753-Heap-buffer-overflow-in-php_ifd_get32s.patch
0075-Fixed-bug-77831-Heap-buffer-overflow-in-exif_iif_add.patch
0076-Pointer-arithmetic-on-void-pointers-is-illegal.patch
0077-Fix-tests-wrt.-internationalization.patch
0078-Fix-bug-77950-Heap-buffer-overflow-in-_estrndup-via-.patch
0079-Fix-77821-Potential-heap-corruption-in-TSendMail.patch
0080-Fix-77973-Uninitialized-read-in-gdImageCreateFromXbm.patch
0081-Fix-bug-78069-Out-of-bounds-read-in-iconv.c-_php_ico.patch
0082-fix-test-output.patch
0083-Fix-bug-77988-heap-buffer-overflow-on-php_jpg_get16.patch
0084-Fix-bug-77967-Bypassing-open_basedir-restrictions-vi.patch
0085-Fixes-3-Updated-tests-to-have-less-fails-due-to-the-.patch
0086-Upgrade-to-SQLite-3.28.0.patch
0087-Fix-bug-78222-heap-buffer-overflow-on-exif_scan_thum.patch
0088-Fix-bug-78256-heap-buffer-overflow-on-exif_process_u.patch
0089-Fix-77919-Potential-UAF-in-Phar-RSHUTDOWN.patch
0090-CS.patch
0091-Fix-CVE-2019-13224-don-t-allow-different-encodings-f.patch
0092-Fix-75457-heap-use-after-free-in-php7.0.25.patch
0093-NEWS.patch
0094-relax-test-offset-may-be-different-on-various-system.patch
0095-Fix-Opcache-test-fails-regarding-to-AppVeyor-image-u.patch
0096-Fixed-test-on-32-bit-systems.patch
0097-Remove-unstable-dns-tests.patch
0098-Prevent-test-case-failure.patch
0099-Fix-module-name-in-test-cases.patch
0100-Fix-test-expectations-to-match-the-implementation.patch
0101-Fix-bug-78599-env_path_info-underflow-can-lead-to-RC.patch
0102-add-NEWS-entry.patch
0103-Fix-78878-Buffer-underflow-in-bc_shift_addsub.patch
0104-Fix-78862-link-silently-truncates-after-a-null-byte-.patch
0105-Fix-78863-DirectoryIterator-class-silently-truncates.patch
0106-Fix-bug-78793.patch
0107-Fixed-bug-78910.patch
0108-Fix-tests.patch
0109-Fix-79099-OOB-read-in-php_strip_tags_ex.patch
0110-Fix-bug-79037-global-buffer-overflow-in-mbfl_filt_co.patch
0111-update-NEWS.patch
0112-More-checks-for-php_strip_tags_ex.patch
0113-Fix-77569-Write-Acess-Violation-in-DomImplementation.patch
0114-Fix-typo-in-recent-bugfix.patch
0115-Fix-bug-79221-Null-Pointer-Dereference-in-PHP-Sessio.patch
0116-Fix-bug-79082-Files-added-to-tar-with-Phar-buildFrom.patch
0117-NEWS.patch
0118-renew-certs-for-openssl-tests.patch
# build: 0119-Use-pkg-config-for-PHP_SETUP_LIBXML.patch
0120-Fixed-bug-79282.patch
0121-Fix-test.patch
0122-fix-test.patch
0123-Fix-bug-79329-get_headers-should-not-accept-0.patch
0124-Update-NEWS.patch
0125-Fix-bug-79330-make-all-execution-modes-consistent-in.patch
0126-Fix-bug-79465-use-unsigneds-as-indexes.patch
0127-NEWS.patch
0128-Fix-bug-76895.patch
0129-Fix-Bug-79296-ZipArchive-open-fails-on-empty-file.patch
0130-Fix-78875-Long-filenames-cause-OOM-and-temp-files-ar.patch
0131-Fix-78876-Long-variables-cause-OOM-and-temp-files-ar.patch
0132-Update-NEWS.patch
# behaviour: 0133-Allow-numeric-UG-ID-in-FPM-listen.-owner-group.patch
0134-Fix-79797-Use-of-freed-hash-key-in-the-phar_parse_zi.patch
0135-Fix-79877-getimagesize-function-silently-truncates-a.patch
0136-Do-not-decode-cookie-names-anymore.patch
0137-NEWS.patch
# build: 0138-Add-pkg-config-m4-files-to-phpize-script.patch
# build: 0139-In-phpize-also-copy-config.guess-config.sub-ltmain.s.patch
0140-Fix-77423-parse_url-will-deliver-a-wrong-host-to-use.patch
0141-NEWS.patch
0142-Alternative-fix-for-bug-77423.patch
0143-Fix-bug-80672-Null-Dereference-in-SoapClient.patch
0144-Fix-build.patch
# build: 0145-Use-libenchant-2-when-available.patch
# build: 0146-remove-deprecated-call-and-deprecate-function-to-be-.patch
# packaging: 0147-Show-packaging-credits.patch
# packaging: 0148-Allow-printing-credits-buffer-larger-than-4k.patch
0149-Fix-80710-imap_mail_compose-header-injection.patch
0150-Add-missing-NEWS-entry-for-80710.patch
# packaging: 0151-Don-t-close-the-credits-buffer-file-descriptor-too-e.patch
0152-Fixed-bug-73512-Fails-to-find-firebird-headers.patch
0153-Fix-81122-SSRF-bypass-in-FILTER_VALIDATE_URL.patch
0154-Fix-warning.patch
0155-Fix-bug-76488-Memory-leak-when-fetching-a-BLOB-field.patch
0156-Fix-76452-Crash-while-parsing-blob-data-in-firebird_.patch
0157-Fix-76450-SIGSEGV-in-firebird_stmt_execute.patch
0158-Fix-76449-SIGSEGV-in-firebird_handle_doer.patch
0159-Fix-76448-Stack-buffer-overflow-in-firebird_info_cb.patch
0160-Update-NEWS.patch
0161-Fix-81211-Symlinks-are-followed-when-creating-PHAR-a.patch
0162-Fix-test.patch
0163-NEWS.patch
0164-Fix-bug-81026-PHP-FPM-oob-R-W-in-root-process-leadin.patch
0165-NEWS.patch
0166-Fix-81420-ZipArchive-extractTo-extracts-outside-of-d.patch
0167-NEWS.patch
0168-Fix-79971-special-character-is-breaking-the-path-in-.patch
0169-NEWS.patch
0170-fix-new-tests.patch
# build: 0171-Add-minimal-OpenSSL-3.0-patch.patch
# build: 0172-Use-true-false-instead-of-TRUE-FALSE-in-intl.patch
# build: 0173-Change-UBool-to-bool-for-equality-operators-in-ICU-7.patch
0174-Fix-81720-Uninitialized-array-in-pg_query_params-lea.patch
0175-Fix-bug-81719-mysqlnd-pdo-password-buffer-overflow.patch
0176-NEWS.patch
0177-Fix-bug-79589-ssl3_read_n-unexpected-eof-while-readi.patch
0178-Fix-81727-Don-t-mangle-HTTP-variable-names-that-clas.patch
0179-Fix-81726-phar-wrapper-DOS-when-using-quine-gzip-fil.patch
0180-Fix-regression-introduced-by-fixing-bug-81726.patch
0181-fix-NEWS.patch
0182-Fix-81740-PDO-quote-may-return-unquoted-string.patch
0183-NEWS.patch
0184-crypt-Fix-validation-of-malformed-BCrypt-hashes.patch
0185-crypt-Fix-possible-buffer-overread-in-php_crypt.patch
0186-Fix-array-overrun-when-appending-slash-to-paths.patch
0187-NEWS.patch
0188-Fix-missing-randomness-check-and-insufficient-random.patch
0189-Fix-GH-11382-add-missing-hash-header-for-bin2hex.patch
0190-add-cve.patch
0191-Fix-buffer-mismanagement-in-phar_dir_read.patch
0192-Sanitize-libxml2-globals-before-parsing.patch
0193-NEWS.patch
# packaging: 0194-Add-missing-header-includes.patch
0195-Fix-GHSA-wpj3-hf5j-x4v4-__Host-__Secure-cookie-bypas.patch
0196-NEWS.patch
0197-Fix-bug-GHSA-q6x7-frmf-grcw-password_verify-can-erro.patch
0198-NEWS.patch
0199-Fix-GHSA-w8qr-v226-r27w.patch
0200-NEWS.patch
0201-Fix-GHSA-3qgc-jrrr-25jv.patch
0202-NEWS-Add-backport-from-8.1.29.patch
0203-Fix-GHSA-9pqp-7h25-4f32.patch
0204-Fix-GHSA-p99j-rfp4-xqvq.patch
0205-Fix-GHSA-94p6-54jq-9mwp.patch
0206-Skip-GHSA-9pqp-7h25-4f32-test-on-Windows.patch
0207-NEWS-for-8.1.30-backports.patch
0208-adapt-GHSA-9pqp-7h25-4f32-test-for-7.x.patch
0209-Fix-GHSA-5hqh-c84r-qjcv-Integer-overflow-in-the-dbli.patch
0210-Fix-GHSA-5hqh-c84r-qjcv-Integer-overflow-in-the-fire.patch
0211-backport-ZSTR_MAX_LEN.patch
0212-Fix-GHSA-c5f2-jwm7-mmq2-stream-HTTP-fulluri-CRLF-inj.patch
0213-Fix-GHSA-g665-fm4p-vhff-OOB-access-in-ldap_escape.patch
0214-Fix-GHSA-r977-prxv-hc43.patch
0215-Fix-74267-segfault-with-streams-and-invalid-data.patch
0216-Fix-GHSA-4w77-75f9-2c8w.patch
0217-NEWS-for-8.1.31-backports.patch
# build: 0218-Force-POSIX-readdir_r-semantics.patch
# build: 0219-Add-ifdef-guards-to-main-php_config.h.in.patch
0220-Fix-missing-include-in-litespeed-build.patch
# telemetry: 0221-Add-minimal-privacy-preserving-secure-DNS-telemetry-.patch
# build: 0222-Use-ZEND_ATTRIBUTE_UNUSED-instead-of-ATTRIBUTE_UNUSE.patch
0223-GHSA-85c2-q967-79q5-soap-Fix-stale-SOAP_GLOBAL-ref_m.patch
0224-GHSA-m33r-qmcv-p97q-soap-Fix-use-after-free-after-he.patch
0225-GHSA-hmxp-6pc4-f3vv-soap-Fix-broken-Apache-map-value.patch
0226-GHSA-96wq-48vp-hh57-metaphone-Fix-signed-integer-ove.patch
0227-GHSA-7qg2-v9fj-4mwv-fpm-XSS-within-status-endpoint.patch
0228-NEWS-from-8.2.31.patch
0229-ext-openssl-openssl_encrypt-zend-mm-heap-overflow-on.patch
0230-Avoid-state-corruption-via-bailout.patch
0231-Fix-repeated-warning-for-file-uploads-limit-exceedin.patch
0232-Introduce-max_multipart_body_parts-INI.patch
0233-Add-CVE-2023-0662-to-NEWS.patch