# Allow-list over deb.sury.org's debian/patches/series, at the Salsa commit in DEB_PATCHES
# (eol/<version>/*/Dockerfile). Every patch of that series appears here in its order; the
# commented-out ones are left out:
# - packaging: Debian paths, defaults and packaging;
# - build: build-system changes for other libraries or toolchains than our bases';
# - behaviour: changed defaults or new features;
# - tests: test-only changes that need a left-out patch;
# - telemetry: deb.sury.org's DNS version check, which reports the PHP version to its server.
# packaging: 0001-libtool_fixes.patch
# packaging: 0002-debian_quirks.patch
# packaging: 0003-php-5.4.9-phpinfo.patch
# packaging: 0004-extension_api.patch
# packaging: 0005-proc_open.patch
# packaging: 0006-php.ini_securitynotes.patch
# packaging: 0007-php-5.4.7-libdb.patch
# packaging: 0008-Add-support-for-use-of-the-system-timezone-database.patch
# packaging: 0009-strcmp_null-OnUpdateErrorLog.patch
# packaging: 0010-qdbm-is-usr_include_qdbm.patch
# packaging: 0011-session_save_path.patch
# packaging: 0012-php-fpm-man-section-and-cleanup.patch
# packaging: 0013-fpm-config.patch
# packaging: 0014-php-fpm-sysconfdir.patch
# packaging: 0015-lp564920-fix-big-files.patch
# packaging: 0016-temporary-path-fixes-for-multiarch.patch
# packaging: 0017-hurd-noptrace.patch
# packaging: 0018-php-5.3.9-mysqlnd.patch
# packaging: 0019-php-5.3.9-gnusrc.patch
# packaging: 0020-php-5.3.3-macropen.patch
# packaging: 0021-php-5.2.4-embed.patch
# packaging: 0022-php-fpm-m68k.patch
# packaging: 0023-expose_all_built_and_installed_apis.patch
# packaging: 0024-Use-system-timezone.patch
# packaging: 0025-zlib-largefile-function-renaming.patch
# packaging: 0026-php-fpm-do-reload-on-SIGHUP.patch
# packaging: 0027-php-5.4.8-ldap_r.patch
# packaging: 0028-php-5.4.9-fixheader.patch
# packaging: 0029-php-5.6.0-noNO.patch
# packaging: 0030-php-5.6.0-oldpcre.patch
# packaging: 0031-hack-phpdbg-to-explicitly-link-with-libedit.patch
# packaging: 0032-Fix-ZEND_MM_ALIGNMENT-on-m64k.patch
# packaging: 0033-Add-patch-to-install-php7-module-directly-to-APXS_LI.patch
# packaging: 0034-Remove-W3C-validation-icon-to-not-expose-the-reader-.patch
# packaging: 0035-Don-t-put-INSTALL_ROOT-into-phar.phar-exec-stanza.patch
# packaging: 0036-XMLRPC-EPI-library-has-to-be-linked-as-lxmlrpc-epi.patch
# packaging: 0037-Really-expand-libdir-datadir-into-EXPANDED_LIBDIR-DA.patch
# packaging: 0038-Fix-ext-date-lib-parse_tz-PATH_MAX-HURD-FTBFS.patch
# build: 0039-remove-deprecated-call-and-deprecate-function-to-be-.patch
# build: 0040-Use-libenchant-2-when-available.patch
# packaging: 0041-libtool2.2.patch
# build: 0042-Include-all-libtool-files-from-phpize.m4.patch
# build: 0043-In-phpize-also-copy-config.guess-config.sub-ltmain.s.patch
# packaging: 0044-Don-t-use-hrtimers-on-GNU-Hurd.patch
# packaging: 0045-Show-packaging-credits.patch
# packaging: 0046-Allow-printing-credits-buffer-larger-than-4k.patch
# packaging: 0047-Don-t-close-the-credits-buffer-file-descriptor-too-e.patch
# build: 0048-Add-minimal-OpenSSL-3.0-patch.patch
# build: 0049-Use-true-false-instead-of-TRUE-FALSE-in-intl.patch
# build: 0050-ax_gcc_func_attribute-Revise-the-detection-of-unknow.patch
0051-Fix-bug-79589-ssl3_read_n-unexpected-eof-while-readi.patch
# packaging: 0052-adapted-README.md.patch
# packaging: 0053-add-information-about-binary-distributions.patch
0054-Fix-81740-PDO-quote-may-return-unquoted-string.patch
0055-NEWS.patch
0056-Fix-GH-10187-Segfault-in-stripslashes-with-arm64.patch
0057-crypt-Fix-validation-of-malformed-BCrypt-hashes.patch
0058-crypt-Fix-possible-buffer-overread-in-php_crypt.patch
0059-Fix-array-overrun-when-appending-slash-to-paths.patch
0060-NEWS.patch
0061-Fix-repeated-warning-for-file-uploads-limit-exceedin.patch
0062-Introduce-max_multipart_body_parts-INI.patch
0063-NEWS.patch
0064-fix-NEWS-not-FPM-specific.patch
0065-Fix-missing-randomness-check-and-insufficient-random.patch
0066-Fix-GH-11382-add-missing-hash-header-for-bin2hex.patch
0067-add-cve.patch
0068-Fix-buffer-mismanagement-in-phar_dir_read.patch
0069-Sanitize-libxml2-globals-before-parsing.patch
0070-NEWS.patch
0071-backport-zend_test-changes-zend_test_override_libxml.patch
0072-Support-libzip_a.lib-for-VS16-libzip_a.lib-for-VS16-.patch
# packaging: 0073-Add-missing-header-includes.patch
0074-Fix-GHSA-wpj3-hf5j-x4v4-__Host-__Secure-cookie-bypas.patch
0075-NEWS.patch
0076-Fix-bug-GHSA-q6x7-frmf-grcw-password_verify-can-erro.patch
0077-NEWS.patch
0078-Add-proc_open-escaping-for-cmd-file-execution-Backpo.patch
0079-NEWS.patch
0080-Fix-GHSA-w8qr-v226-r27w.patch
0081-NEWS.patch
0082-Fix-GHSA-9fcc-425m-g385-bypass-CVE-2024-1874.patch
0083-Fix-GHSA-3qgc-jrrr-25jv.patch
0084-Mark-CVE-2024-5585-backport-tests-for-PHP-7.4-as-EXP.patch
0085-NEWS-Add-backports-from-8.1.29.patch
0086-Fix-GHSA-9pqp-7h25-4f32.patch
0087-Fix-GHSA-p99j-rfp4-xqvq.patch
0088-Fix-GHSA-94p6-54jq-9mwp.patch
0089-Fix-GHSA-865w-9rf3-2wh5-FPM-Logs-from-childrens-may-.patch
0090-Skip-GHSA-9pqp-7h25-4f32-test-on-Windows.patch
0091-NEWS-for-8.1.30-backports.patch
0092-adapt-GHSA-865w-9rf3-2wh5-test-for-7.x.patch
0093-adapt-GHSA-9pqp-7h25-4f32-test-for-7.x.patch
0094-Fix-GHSA-5hqh-c84r-qjcv-Integer-overflow-in-the-dbli.patch
0095-Fix-GHSA-5hqh-c84r-qjcv-Integer-overflow-in-the-fire.patch
0096-Fix-GHSA-c5f2-jwm7-mmq2-stream-HTTP-fulluri-CRLF-inj.patch
0097-Fix-GHSA-g665-fm4p-vhff-OOB-access-in-ldap_escape.patch
0098-Fix-GHSA-r977-prxv-hc43.patch
0099-Fix-GHSA-4w77-75f9-2c8w.patch
0100-NEWS-for-8.1.31-backports.patch
0101-Fix-GHSA-h35g-vwh6-m678-Mysqlnd-various-heap-buffer-.patch
0102-Fix-MySQLnd-possible-buffer-over-read-in-auth_protoc.patch
0103-Avoid-using-uninitialised-struct.patch
0104-Change-port-for-mysqli-fake-server-auth-message-test.patch
0105-Increase-MySQLi-fake-server-read-timeout-for-ASAN-jo.patch
0106-adapt-test-NEWS.patch
0107-Fix-GHSA-ghsa-v8xr-gpvj-cx9g-http-header-folding.patch
0108-Fix-GHSA-pcmh-g36c-qc44-http-headers-without-colon.patch
0109-Fix-GHSA-52jp-hrpf-2jff-http-redirect-location-trunc.patch
0110-Fix-GHSA-hgf5-96fm-v528-http-user-header-check-of-cr.patch
0111-Fix-GH-11160-Few-tests-failed-building-with-new-libx.patch
# build: 0112-Backport-0a39890c-Fix-libxml2-2.12-build-due-to-API-.patch
# build: 0113-Backport-4fe82131-Backport-libxml2-2.13.2-fixes-1481.patch
0114-Fix-GHSA-p3x9-6h7p-cgfc-libxml-streams-wrong-content.patch
0115-Fix-GHSA-wg4p-4hqh-c3g9.patch
# build: 0116-Fix-GH-12702-libxml2-2.12.0-issue-building-from-src.patch
0117-NEWS.patch
0118-Fix-GHSA-453j-q27h-5p8x.patch
0119-Fix-GHSA-3cr5-j632-f35r-Null-byte-in-hostnames.patch
0120-Fix-GHSA-hrwm-9436-5mv3-pgsql-escaping-no-error-chec.patch
0121-NEWS.patch
0122-Fix-GH-20584-Information-Leak-of-Memory.patch
0123-Only-test-from-code-is-not-affected.patch
0124-Fix-GHSA-h96m-rvf9-jgm2.patch
0125-Fix-GHSA-www2-q4fc-65wf.patch
0126-NEWS-from-8.1.34.patch
0127-Fix-missing-include-in-litespeed-build.patch
# telemetry: 0128-Add-minimal-privacy-preserving-secure-DNS-telemetry-.patch
0129-GHSA-85c2-q967-79q5-soap-Fix-stale-SOAP_GLOBAL-ref_m.patch
0130-GHSA-m33r-qmcv-p97q-soap-Fix-use-after-free-after-he.patch
0131-GHSA-hmxp-6pc4-f3vv-soap-Fix-broken-Apache-map-value.patch
0132-GHSA-7qg2-v9fj-4mwv-fpm-XSS-within-status-endpoint.patch
0133-Only-test-for-GHSA-wm6j-2649-pv75-mbstring-Fix-null-.patch
0134-GHSA-96wq-48vp-hh57-metaphone-Fix-signed-integer-ove.patch
0135-Adjust-credits-for-GHSA-96wq-48vp-hh57.phpt.patch
0136-GHSA-m8rr-4c36-8gq4-Consistently-pass-unsigned-char-.patch
0137-NEWS-from-8.2.31.patch
0138-ext-openssl-openssl_encrypt-zend-mm-heap-overflow-on.patch
0139-Fix-heap-buffer-overflow-in-convert-stream-filters-w.patch
0140-libgd-patch-for-CVE-2026-9672.patch
0141-Fix-GHSA-62xp-839h-2637-FastCGI-allowed_clients-comp.patch
0142-Fix-SQL-injection-in-ext-pgsql-via-E-.-backslash-bre.patch
0143-Fix-GHSA-vc5h-9ppw-p5f3-phar-circular-symlink-crash.patch
0144-logtool-changes-from-8.2.patch
0145-Fix-GHSA-vvx9-73fr-5jjx-do-not-fall-back-to-CN-if-th.patch
0146-Fix-leak-on-double-DatePeriod-__construct-call.patch
0147-Fix-GHSA-xr7j-rvgx-xq5p-OOB-read-in-php_openssl_matc.patch
0148-NEWS-from-8.2.33.patch
0149-Partial-Fix-GHSA-r6x9-5r99-36j7-Various-packet-overr.patch
0150-re-add-new-tests-as-XFAIL-because-of-partial-fix.patch
0151-fix-new-tests-expectations-warnings-raised-instead-o.patch
0152-Fix-GH-11274-POST-PATCH-request-via-file_get_content.patch
0153-Fix-GHSA-fpwc-w8rq-cr92-strip-credentials-from-user-.patch
0154-Fix-GHSA-rgrp-mwpx-f6rm-unbounded-recursion-in-ext-s.patch
0155-Fix-GHSA-cj93-vc83-wgqv.patch
0156-Fix-GHSA-j3wh-g957-2m85-phar-tar-entry-injection.patch
0157-Fix-GHSA-9f67-6fw4-hpfp.patch
0158-Fix-GHSA-ch8v-r6jh-4vvr-encode-0xFF-in-FILTER_SANITI.patch
0159-ext-soap-make-GHSA-cj93-vc83-wgqv-test-lean-and-reli.patch
0160-Add-NEWS-entries-from-8.2.34.patch
0161-fix-skipif-section.patch
0162-Fix-out-of-bounds-read-on-empty-Location-header.patch
0163-ext-standard-Fix-1-char-relative-Location-redirects-.patch
0164-Avoid-state-corruption-via-bailout.patch