-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 18 Dec 2025 22:19:25 +0100
Source: php8.4
Binary: php8.4 php8.4-xsl
Architecture: all
Version: 8.4.16-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 php8.4     - server-side, HTML-embedded scripting language (metapackage)
 php8.4-xsl - XSL module for PHP (dummy)
Changes:
 php8.4 (8.4.16-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream version 8.4.16
    + [CVE-2025-14180]: Fixed GHSA-8xr5-qppj-gvwj (PDO quoting result null
      deref).
    + [CVE-2025-14178]: Fixed GHSA-h96m-rvf9-jgm2 (Heap buffer overflow in
      array_merge()).
    + [CVE-2025-14177]: Fixed GHSA-3237-qqm7-mfv7 (Information Leak of
      Memory in getimagesize).
Checksums-Sha1:
 f73882f88039aca648b5c4118e0d687056b78c34 42400 php8.4-xsl_8.4.16-1~deb13u1_all.deb
 4069cae2aa0435032c95d03479fc6bdfedec9ebf 14678 php8.4_8.4.16-1~deb13u1_all-buildd.buildinfo
 0b0cffe1bc9c1d9887d232594f035096af9a100f 42732 php8.4_8.4.16-1~deb13u1_all.deb
Checksums-Sha256:
 657e168a68ea6d855931362aac815f15171db89ad1416bb70f28dca751767188 42400 php8.4-xsl_8.4.16-1~deb13u1_all.deb
 6223555865adb811180c9b97f6958bc5dccd38cad024963b6bd6f246ce6ba391 14678 php8.4_8.4.16-1~deb13u1_all-buildd.buildinfo
 9daa5b33526942dd63ae4e5b648289e6ce62730f2c950aa4f0fc03b47cca6947 42732 php8.4_8.4.16-1~deb13u1_all.deb
Files:
 15b0648b70acc1b99182ac981b5dc775 42400 php optional php8.4-xsl_8.4.16-1~deb13u1_all.deb
 6376f9da0e057faf2e9c2c743837ae31 14678 php optional php8.4_8.4.16-1~deb13u1_all-buildd.buildinfo
 c6fb637595464bc87cf7f30bff741bc8 42732 php optional php8.4_8.4.16-1~deb13u1_all.deb

-----BEGIN PGP SIGNATURE-----
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=X6qU
-----END PGP SIGNATURE-----