-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 31 Jul 2026 07:11:11 +0200
Source: php8.4
Architecture: source
Version: 8.4.24-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Debian PHP Maintainers <team+pkg-php@tracker.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Closes: 1143153
Changes:
 php8.4 (8.4.24-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream version 8.4.24 (Closes: #1143153)
    + [CVE-2026-17544]: Out-of-bounds write in bccomp()
    + [CVE-2026-17543]: SQL injection via E'...' backslash breakout
    + [CVE-2026-7260]: Crash via recursive symlinks
Checksums-Sha1:
 41308a37c77ab36f46e38631dcd2f4260b14c3a2 5619 php8.4_8.4.24-1~deb13u1.dsc
 487710711182ab94c04c15c8254efe2cc02f77e4 13752320 php8.4_8.4.24.orig.tar.xz
 a6c16c9b3425efe80574cc0040b64f387bd9a1a9 265 php8.4_8.4.24.orig.tar.xz.asc
 d37394a090133737f2218695fa9df97656fb2956 74756 php8.4_8.4.24-1~deb13u1.debian.tar.xz
 b69b349d864f041a14fe4bf763fbe45b1e3ddcac 34422 php8.4_8.4.24-1~deb13u1_amd64.buildinfo
Checksums-Sha256:
 fd84ce153abc1af23514100a25d04acd3c728f5c4b5c30c3e1a0788ef9c780eb 5619 php8.4_8.4.24-1~deb13u1.dsc
 e127be09a8506f4327c5cfa78a614b00d210714484ec215ce0011b4a03c00731 13752320 php8.4_8.4.24.orig.tar.xz
 16643bb748cb7e38f8496989cff457bc01bdd26806aa152b4da6d69fae31068f 265 php8.4_8.4.24.orig.tar.xz.asc
 d638895a968c753cb01c28e45b1f21f03ef909f656870a1e52ff0a356d3239cb 74756 php8.4_8.4.24-1~deb13u1.debian.tar.xz
 3334a40f265f77e1ef7d7b29de32118ea7e46b3813642e3c00f8917a0b8c6b1f 34422 php8.4_8.4.24-1~deb13u1_amd64.buildinfo
Files:
 a12dbeeef697d8054cf2fcb4b51c8724 5619 php optional php8.4_8.4.24-1~deb13u1.dsc
 13cb7ced4e0b2ecee75a4a99b262680f 13752320 php optional php8.4_8.4.24.orig.tar.xz
 b52cfc5578c949da87ff0d67e4c6e31a 265 php optional php8.4_8.4.24.orig.tar.xz.asc
 5d5897023d1a5f36a87a7337bd8f76d5 74756 php optional php8.4_8.4.24-1~deb13u1.debian.tar.xz
 31a3bc96e4c4bc5963700443fa623cb5 34422 php optional php8.4_8.4.24-1~deb13u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=2zOd
-----END PGP SIGNATURE-----