-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 11 Aug 2026 02:09:31 +0200 Source: php7.4 Architecture: source Version: 7.4.33-1+deb11u12 Distribution: bullseye-security Urgency: high Maintainer: Debian PHP Maintainers <team+pkg-php@tracker.debian.org> Changed-By: Guilhem Moulin <guilhem@debian.org> Closes: 1143153 Changes: php7.4 (7.4.33-1+deb11u12) bullseye-security; urgency=high . * Non-maintainer upload by the LTS Team. * Fix CVE-2026-7260: Stack overflow in phar with circular symlinks. (Closes: #1143153) * Fix CVE-2026-17543: SQL injection in ext-pgsql via E'...' backslash breakout. (Closes: #1143153) * Fix leak on double DatePeriod::__construct() call. Checksums-Sha1: 6f2c21c0d738ea69bf6539b30f0ee4647df6e726 5702 php7.4_7.4.33-1+deb11u12.dsc 4d3152b2339332b4eef2c12931931d4a1245fdab 10420144 php7.4_7.4.33.orig.tar.xz 1701962351f13c1af1f29bde45eb9515747bc4ee 833 php7.4_7.4.33.orig.tar.xz.asc b1ed0f19036c2be9cd7edd438e18dc93ef193030 148384 php7.4_7.4.33-1+deb11u12.debian.tar.xz 8967255f444ac1955c505873f337fcdb934a9fb8 7512 php7.4_7.4.33-1+deb11u12_source.buildinfo Checksums-Sha256: ccd0e40ee96d6005f93a18dd52209a301ef9bb820bd709beb01b3f79c2e55854 5702 php7.4_7.4.33-1+deb11u12.dsc 924846abf93bc613815c55dd3f5809377813ac62a9ec4eb3778675b82a27b927 10420144 php7.4_7.4.33.orig.tar.xz 569a01c7c605a4571fdf7dfadfff4215cc4a63ea5d474c7ec92bd7b4fecfffcb 833 php7.4_7.4.33.orig.tar.xz.asc f028769316f1ee68a7f4f8c7437ccfedfaa09d3eeb7eff74165a796357a5a2c1 148384 php7.4_7.4.33-1+deb11u12.debian.tar.xz 87f193bc6483029415564b75644d148e3c2439db5aeeb89137c0e3bf341b0162 7512 php7.4_7.4.33-1+deb11u12_source.buildinfo Files: 002849be674f2c2c7a805f218912ab69 5702 php optional php7.4_7.4.33-1+deb11u12.dsc f098632163cd47f2c1ffe2bdc6ef1ff2 10420144 php optional php7.4_7.4.33.orig.tar.xz 306dca821388f20fa55324960d82f427 833 php optional php7.4_7.4.33.orig.tar.xz.asc de02e9a2c9392c852bf02688250e258d 148384 php optional php7.4_7.4.33-1+deb11u12.debian.tar.xz 28b875d9010e089fd780b2b673a8b5e3 7512 php optional php7.4_7.4.33-1+deb11u12_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAmp7dwkACgkQ05pJnDwh pVIr/A/+IUrDQl+MHLur5WWagLRc9hEU1zfPk/Fqldx3OoxlJ2uEYiTwQR9LNK3a YG61Uw83rnKjzKeB5IquYolziTKavYNd3NvxjQUI8odI39kz28pfk+rlpWQimKz+ Z+6BovJwmnzyaAIa1xOI6SIEAaihsGlxyyg3V7Ti5auEbKwfBwb0X68ZXlI0XYOd BvaxuVdQOZBjSemagLgaHWLtd6OE2YOQ6yNt4lsEM1GARao4gfuT2VtjzszjZdr5 RkuKjJW3q1nJwXu1MMZYpefB/s7+xogdXsCpuLI+NmoTI4JYpDtsbrTEZgKM/5g3 CDFOxF91Xhgg5YMZiWmHAwVvxzwdm6vBSyP5vlzQZ28RRvXXKc2AlFIccnxJ/Dpu JmIajLlVA+Cw5wxQMkf6LsRFgVDk/JH/m5YUS6T6CHXauQ0gXhXR3fqfUDN9lpsa uK4pjLcQJUYzRKXQE5BBFWFBc9wg8JN9vxp9slUpN2adZMlEH5lWjET+byyePVXE CnlxkzZQy7VDQzjNvAEEwk4OkMoHmaUArVcrIen6G8oZDvaOAzY5WEBLNuvJxMki agCp+bNuz0zgT21FUZc582KZr4T/qEY4zgSL278gqoIkgCVdK8K75qMFyi3zV/Q+ RbMUJX2nYb5bYgoGebvvGFrIJrOQZnWg0EwgOja5TMwT7Y7Q0SQ= =cyCz -----END PGP SIGNATURE-----