-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 21 Oct 2026 09:53:46 +0200
Source: php8.4
Architecture: source
Version: 8.4.27-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Debian PHP Maintainers <team+pkg-php@tracker.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Changes:
php8.4 (8.4.27-1~deb13u1) trixie-security; urgency=high
.
* New upstream version 8.4.27
+ (CVE-2026-109618, CVE-2026-109619): Avoid state corruption via
bailout.
Checksums-Sha1:
e3d056e552052e5e86cb44458160d4443f5d0c04 5375 php8.4_8.4.27-1~deb13u1.dsc
80ee7824846300c6ec172c79047eb7626660217c 13862944 php8.4_8.4.27.orig.tar.xz
dc41ecd59b6402d95f2a94a15712587e0459a3d0 75156 php8.4_8.4.27-1~deb13u1.debian.tar.xz
ef729fa0e14f5c970dce103dffe3e80b2b9f2603 34740 php8.4_8.4.27-1~deb13u1_amd64.buildinfo
Checksums-Sha256:
e9e17ff65f1c41306514a6efd61b2b0ffbbd681e1502f86ccd520003e3852503 5375 php8.4_8.4.27-1~deb13u1.dsc
dcf93923b0e38e0d5252b25b796520b5a47761a08b3488b6d0b5d1115764d3f0 13862944 php8.4_8.4.27.orig.tar.xz
c11b65920c16d7c8c60d6409ad1c566350b40bd44cac5190c7be82347409f8b8 75156 php8.4_8.4.27-1~deb13u1.debian.tar.xz
a28b6f37ba96e4ad56755a33e92c7f9407d585b0497979abac8ad305618115c1 34740 php8.4_8.4.27-1~deb13u1_amd64.buildinfo
Files:
08488ac9602c53fb69dcbfbc51bdbcfa 5375 php optional php8.4_8.4.27-1~deb13u1.dsc
98ff3d42f46ec8fbda4f051bdc70f319 13862944 php optional php8.4_8.4.27.orig.tar.xz
d3a616df273a8bc724afdda029baf953 75156 php optional php8.4_8.4.27-1~deb13u1.debian.tar.xz
593c7b1c274784744e9a479d91d656bf 34740 php optional php8.4_8.4.27-1~deb13u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=wUGZ
-----END PGP SIGNATURE-----
