PHP 8.2.35 packages for MultiPortal servers (CVE-2026-109618, CVE-2026-109619)

These are the official packages, unchanged: Ubuntu from the ondrej/php
Launchpad PPA, Debian from packages.sury.org. Each folder's SHA256SUMS matches
the repository's signed package index (checked on 22 October 2026 against
"Launchpad PPA for Ondrej Sury" and "DEB.SURY.ORG Automatic Signing Key").

Use these only if apt cannot download from the repository. Pick the folder
for the server's release (lsb_release -cs shows it).

  ubuntu-22.04-jammy    Ubuntu 22.04
  ubuntu-24.04-noble    Ubuntu 24.04
  debian-12-bookworm    Debian 12
  debian-13-trixie      Debian 13

On Debian without sudo, run the commands as root and leave sudo off.

1. Copy the folder to the server, then check the files:

     cd ubuntu-24.04-noble
     sha256sum -c SHA256SUMS

   Every line must end in OK.

2. Install all of them together:

     sudo apt install ./*.deb

3. Restart and confirm:

     sudo systemctl restart php8.2-fpm 'multiportal-queue@*'
     php8.2 -v

   It should show PHP 8.2.35 and "with the ionCube PHP Loader".

These cover the 13 PHP 8.2 packages a standard MultiPortal install uses.
If dpkg -l 'php8.2*' shows another php8.2 extension, that package is needed
too: Ubuntu from https://launchpad.net/~ondrej/+archive/ubuntu/php/+packages,
Debian from https://packages.sury.org/php/
