php8.2 (8.2.33-1~deb12u1) bookworm-security; urgency=high
* Non-maintainer upload by the LTS Team.
* New upstream version 8.2.33:
+ Fix CVE-2026-7260: Stack overflow in phar with circular symlinks.
(Closes: #
1143153)
+ Fix CVE-2026-17543: SQL injection in ext-pgsql via E'...' backslash
breakout. (Closes: #
1143153)
+ Fix leak on double DatePeriod::__construct() call.
* Refresh d/patches.
[dgit import unpatched php8.2 8.2.33-1~deb12u1]