-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 03 Jul 2026 14:26:56 +0200
Source: php8.4
Binary: php8.4 php8.4-xsl
Architecture: all
Version: 8.4.23-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 php8.4     - server-side, HTML-embedded scripting language (metapackage)
 php8.4-xsl - XSL module for PHP (dummy)
Changes:
 php8.4 (8.4.23-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream version 8.4.23
    + [CVE-2026-14355]: Memory corruption (zend_mm_heap corrupted) in
      openssl_encrypt with AES-WRAP-PAD.
Checksums-Sha1:
 805af90bf36112f55472799da306f07352fd7ee8 48832 php8.4-xsl_8.4.23-1~deb13u1_all.deb
 29efcc87a5e06738384baa78920d75d865f04e8d 15167 php8.4_8.4.23-1~deb13u1_all-buildd.buildinfo
 dc57516d693e9080cd6b5a0eda144e1d4d84bb43 49156 php8.4_8.4.23-1~deb13u1_all.deb
Checksums-Sha256:
 8084295416292aff8fd6ae9a54808e7813b96037e521a19297f419874882e7f0 48832 php8.4-xsl_8.4.23-1~deb13u1_all.deb
 036ae12b2ab4f49fd61b064fa6235a85ee7edf670f61fd64f2de3b8bb414565f 15167 php8.4_8.4.23-1~deb13u1_all-buildd.buildinfo
 63086c0187cb62220491f5599c4b868b5bfe50d001cfc860e25eab05556c5b1a 49156 php8.4_8.4.23-1~deb13u1_all.deb
Files:
 529e19c502944e14d15d5e1c438bac92 48832 php optional php8.4-xsl_8.4.23-1~deb13u1_all.deb
 7f63e5a6ae8f27ca41e7ae4b93cf11f5 15167 php optional php8.4_8.4.23-1~deb13u1_all-buildd.buildinfo
 5e615d42217555d8a5a9b05e4565136b 49156 php optional php8.4_8.4.23-1~deb13u1_all.deb

-----BEGIN PGP SIGNATURE-----
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=dPL6
-----END PGP SIGNATURE-----