-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 31 Jul 2026 07:11:11 +0200
Source: php8.4
Binary: php8.4 php8.4-xsl
Architecture: all
Version: 8.4.24-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) <buildd_amd64-x86-grnet-03@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 php8.4     - server-side, HTML-embedded scripting language (metapackage)
 php8.4-xsl - XSL module for PHP (dummy)
Closes: 1143153
Changes:
 php8.4 (8.4.24-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream version 8.4.24 (Closes: #1143153)
    + [CVE-2026-17544]: Out-of-bounds write in bccomp()
    + [CVE-2026-17543]: SQL injection via E'...' backslash breakout
    + [CVE-2026-7260]: Crash via recursive symlinks
Checksums-Sha1:
 ce2f35233fef4c16f5af3ecef3514b648da94fcb 50752 php8.4-xsl_8.4.24-1~deb13u1_all.deb
 9c7d7daf70f3d21f6053ee6b67acacd77be18ba7 15233 php8.4_8.4.24-1~deb13u1_all-buildd.buildinfo
 206aea818c655d0027afc36d8052bb6fc27a3da2 51104 php8.4_8.4.24-1~deb13u1_all.deb
Checksums-Sha256:
 4b67be776f52a0159327b73973e3d12c3d4ea768c4d8196472370d90d9ba0adb 50752 php8.4-xsl_8.4.24-1~deb13u1_all.deb
 0d37d915d429e900ec90130d5f924ba9e674a58fbb01f759c0f59c1021df5e08 15233 php8.4_8.4.24-1~deb13u1_all-buildd.buildinfo
 6dbb052c1896584e4fab671a2b6add684dadf602398f2a0b922b0e9ce7e2e194 51104 php8.4_8.4.24-1~deb13u1_all.deb
Files:
 0d904a92d487ca5d1a77219ba005f261 50752 php optional php8.4-xsl_8.4.24-1~deb13u1_all.deb
 d506eea2100c2e1f1c7a7bc6b4ed0357 15233 php optional php8.4_8.4.24-1~deb13u1_all-buildd.buildinfo
 4b762826045d9cd8873b4571a08cd91d 51104 php optional php8.4_8.4.24-1~deb13u1_all.deb

-----BEGIN PGP SIGNATURE-----
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=4Z9c
-----END PGP SIGNATURE-----