-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 30 Jul 2026 17:17:04 +0200
Source: php8.4
Architecture: source
Version: 8.4.24-1
Distribution: unstable
Urgency: medium
Maintainer: Debian PHP Maintainers <team+pkg-php@tracker.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Changes:
php8.4 (8.4.24-1) unstable; urgency=medium
.
* New upstream version 8.4.24
+ [CVE-2026-17544]: Out-of-bounds write in bccomp()
+ [CVE-2026-17543]: SQL injection via E'...' backslash breakout
+ [CVE-2026-7260]: Crash via recursive symlinks
Checksums-Sha1:
ba0ab7fc7bdec82c45df3a69cf5d9de977a3e7c5 5661 php8.4_8.4.24-1.dsc
487710711182ab94c04c15c8254efe2cc02f77e4 13752320 php8.4_8.4.24.orig.tar.xz
a6c16c9b3425efe80574cc0040b64f387bd9a1a9 265 php8.4_8.4.24.orig.tar.xz.asc
5d569a74e6bf0543fec71ae291c94e0281f67960 80408 php8.4_8.4.24-1.debian.tar.xz
8f0a86d3a14712ff26b8e60472c60ceca9c629d5 32952 php8.4_8.4.24-1_amd64.buildinfo
Checksums-Sha256:
40d69130ce7e30cb9946b46f6e9f1a6f4720f3b9d76d5b17fd58b5404cadd9d0 5661 php8.4_8.4.24-1.dsc
e127be09a8506f4327c5cfa78a614b00d210714484ec215ce0011b4a03c00731 13752320 php8.4_8.4.24.orig.tar.xz
16643bb748cb7e38f8496989cff457bc01bdd26806aa152b4da6d69fae31068f 265 php8.4_8.4.24.orig.tar.xz.asc
6b2265704c3b58c26a8e3cb184ac1bc129dcd1f340c942b9180e9543d9c74ae8 80408 php8.4_8.4.24-1.debian.tar.xz
e971fb3453ae2815363c1da0c8a49d76fe5239ec4c4d55f600ecd71554ca4669 32952 php8.4_8.4.24-1_amd64.buildinfo
Files:
abc3a527b0274a428e99ee693cfc1be4 5661 php optional php8.4_8.4.24-1.dsc
13cb7ced4e0b2ecee75a4a99b262680f 13752320 php optional php8.4_8.4.24.orig.tar.xz
b52cfc5578c949da87ff0d67e4c6e31a 265 php optional php8.4_8.4.24.orig.tar.xz.asc
66f8328370cafcbd2def98ee4ce40a8c 80408 php optional php8.4_8.4.24-1.debian.tar.xz
c2e376fc28e3f2cd94804758aa48e4c3 32952 php optional php8.4_8.4.24-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=j5Se
-----END PGP SIGNATURE-----
