-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 10 Aug 2026 18:44:03 +0200 Source: php8.2 Architecture: source Version: 8.2.33-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: Debian PHP Maintainers <team+pkg-php@tracker.debian.org> Changed-By: Guilhem Moulin <guilhem@debian.org> Closes: 1143153 Changes: php8.2 (8.2.33-1~deb12u1) bookworm-security; urgency=high . * Non-maintainer upload by the LTS Team. * New upstream version 8.2.33: + Fix CVE-2026-7260: Stack overflow in phar with circular symlinks. (Closes: #1143153) + Fix CVE-2026-17543: SQL injection in ext-pgsql via E'...' backslash breakout. (Closes: #1143153) + Fix leak on double DatePeriod::__construct() call. * Refresh d/patches. Checksums-Sha1: a2644659731f3f45f7bc18c07b639e0a51e1f514 5596 php8.2_8.2.33-1~deb12u1.dsc 0bdf9724a7926f51f6a5fa747a28f2936d909a23 12166568 php8.2_8.2.33.orig.tar.xz 6c56144bf7ef8705ef14a20630c50c8bc7c531f1 833 php8.2_8.2.33.orig.tar.xz.asc 43c2b2444a2db0d2005234e5306516737f11c684 71312 php8.2_8.2.33-1~deb12u1.debian.tar.xz 4d4c736b11aa3b94e8cbb9c370227e9aad09c093 7508 php8.2_8.2.33-1~deb12u1_source.buildinfo Checksums-Sha256: 4e801d467c7b7233a5bd5adb71a08f758e9369412b9e3d471a0cfa301c5918c1 5596 php8.2_8.2.33-1~deb12u1.dsc fbdeace9b38220436a4c8fd79b900df92878151db145e641750743a283b514c1 12166568 php8.2_8.2.33.orig.tar.xz dca4935bd3e3fd4aee1524a09c9cb68f59cfa4eedf8cae8756315961231a5e6d 833 php8.2_8.2.33.orig.tar.xz.asc 0120e1feda20023e68a97f94320110ea20f6284e2a15cf9700992fb95a4cd948 71312 php8.2_8.2.33-1~deb12u1.debian.tar.xz 205d8706a9d8ca6a19f72a10d5481092bcc3721d7efb42a1e0268cca3283a305 7508 php8.2_8.2.33-1~deb12u1_source.buildinfo Files: 755057d3bfc8a8ae0221c24420c79e97 5596 php optional php8.2_8.2.33-1~deb12u1.dsc cbf68c7196c6ca5245fcf88534dd36a4 12166568 php optional php8.2_8.2.33.orig.tar.xz 25bf59040f5d5d6eb87a10ca7013fc43 833 php optional php8.2_8.2.33.orig.tar.xz.asc b7320971292f139c3d0f7bf3f0e865aa 71312 php optional php8.2_8.2.33-1~deb12u1.debian.tar.xz 85cb7b1915e542cbfbaec13827b03168 7508 php optional php8.2_8.2.33-1~deb12u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAmp7duYACgkQ05pJnDwh pVI4Pw/8Dtyne08kJZ8vbTwJmxFWWb+GDHqYbHvF51Rq1PPsP1JJMzLnvhytKmw2 EFCFowbwqUTexvZsh7Ebpy5/cS+gfNn2RmKXe05lvb0ahAegWWsU7D6CQCt87aRT YVY6gzU+uVKIKARM4jrRnQwhfXR34GRnB6qUkfwq64lg2lqiNcBqkMWLlyNI/pk1 I31tPc35m1W1Wx52A5XM5d/BJ04AB9tzXJNoROCXoN6q6XZdqnh3ITSAD38Af5Ih HQLD7FYGryY/ny4yTywjDiMTEbow7zLakHDuAkz2j+coPDCwiNKpvp7U0r7D4oG0 NhD+J9d3yvaEF+F0W9U0FQJEWmwLBI5asCwOWrgjV6Tw2BWofM1LBwkLy64qxm1n wwK4Zx5LA+xb85G8p0wDAekZsgMxobGL8j5Is0gI8MFvcSMrbBaYbuxiK8Zhmc6o nFsfKp1jBhPYE7gziF9cxVEnXRRE6sXZQawFyZuQIqg/3QcYVq2Fafe2/gU92Dtt /Mq6LS69vfvT8q5SAn4i4PuY12uIwQGw+kfmLsyVhWC3jbebjzGWXhYXITFZ0/Au CzbMTUfuiYsfbL9PNOwgZZ4yMQ+lCiKU9x0N23a0MQ5cYQEbqQzGOUX6/CIBPyfC kJ6NdNkCyj/liEPoyBSpS2pJPGqz4jOoE/otyFY9PmSlDpmTEl8= =glUl -----END PGP SIGNATURE-----
