-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 03 Jul 2026 14:26:56 +0200
Source: php8.4
Architecture: source
Version: 8.4.23-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Debian PHP Maintainers <team+pkg-php@tracker.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Changes:
 php8.4 (8.4.23-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream version 8.4.23
    + [CVE-2026-14355]: Memory corruption (zend_mm_heap corrupted) in
      openssl_encrypt with AES-WRAP-PAD.
Checksums-Sha1:
 5f75c63b7da84992b62f25ce89057e69712adceb 5619 php8.4_8.4.23-1~deb13u1.dsc
 cd07ecb3481a424cbf7b445f18c5f344e31d4070 13741236 php8.4_8.4.23.orig.tar.xz
 53f8fc8a148428546ff2c26daff1e6d312215682 265 php8.4_8.4.23.orig.tar.xz.asc
 c353e5f41baa0f3f6db224fba972d725b8e6f9da 74664 php8.4_8.4.23-1~deb13u1.debian.tar.xz
 6cf8fdb5e8ac4c4b3a5b77fc4bbbb3dd022b9e96 34356 php8.4_8.4.23-1~deb13u1_amd64.buildinfo
Checksums-Sha256:
 671393f8d637cf3d277cc9c654ed80b92fbbcbb88f08dcb511719b4bb25cc4cc 5619 php8.4_8.4.23-1~deb13u1.dsc
 1ab9f52008414e43bb2427ffa288eff2a4de39e1a830f957e800ba368d887a72 13741236 php8.4_8.4.23.orig.tar.xz
 43da5c7416b80c6954cd66043e2266c32ac87ee11b90b8d39b4adbe139189ea8 265 php8.4_8.4.23.orig.tar.xz.asc
 32192efe406c21e8fe2556ee0b1a099e36a2257654b9e136f1c87f51db8a0452 74664 php8.4_8.4.23-1~deb13u1.debian.tar.xz
 51a8fa3153128705ffdab4e272b3e345aa0415ef12434d205be3525543cba9b7 34356 php8.4_8.4.23-1~deb13u1_amd64.buildinfo
Files:
 b471badc31b29e95880c81de4a9c2faf 5619 php optional php8.4_8.4.23-1~deb13u1.dsc
 f95d3a481c33fa5aac47880e1cb754c3 13741236 php optional php8.4_8.4.23.orig.tar.xz
 c4795a1258920d9c3e5561741a3a0dd5 265 php optional php8.4_8.4.23.orig.tar.xz.asc
 8a1be01ea44f75117d343d4207c14454 74664 php optional php8.4_8.4.23-1~deb13u1.debian.tar.xz
 c00e5f1b425ef777742cbce356c95a6a 34356 php optional php8.4_8.4.23-1~deb13u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=S1FF
-----END PGP SIGNATURE-----