php8.4 (8.4.24-1~deb13u1) trixie-security; urgency=high
* New upstream version 8.4.24 (Closes: #
1143153)
+ [CVE-2026-17544]: Out-of-bounds write in bccomp()
+ [CVE-2026-17543]: SQL injection via E'...' backslash breakout
+ [CVE-2026-7260]: Crash via recursive symlinks
[dgit import unpatched php8.4 8.4.24-1~deb13u1]