From: Raspbian automatic forward porter <root@raspbian.org>
Date: Tue, 8 Sep 2026 06:40:00 +0000 (+0100)
Subject: Merge version 8.4.22-1+rpi1 and 8.4.24-1 to produce 8.4.24-1+rpi1
X-Git-Tag: archive/raspbian/8.4.24-1+rpi1^0
X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=d52726a634664a5003954c2824c5e39dff5fa117;p=php8.4.git

Merge version 8.4.22-1+rpi1 and 8.4.24-1 to produce 8.4.24-1+rpi1
---

d52726a634664a5003954c2824c5e39dff5fa117
diff --cc debian/changelog
index 08eb3ca5,dc7314cb..e1a96ea6
--- a/debian/changelog
+++ b/debian/changelog
@@@ -1,9 -1,17 +1,24 @@@
- php8.4 (8.4.22-1+rpi1) forky-staging; urgency=medium
++php8.4 (8.4.24-1+rpi1) forky-staging; urgency=medium
 +
 +  [changes brought forward from 8.4.11-1+rpi1 by Peter Michael Green <plugwash@raspbian.org> at Fri, 17 Oct 2025 01:23:38 +0000]
 +  * Fix fpu setting for raspbian.
 +
-  -- Raspbian forward porter <root@raspbian.org>  Sun, 21 Jun 2026 16:51:47 +0000
++ -- Raspbian forward porter <root@raspbian.org>  Tue, 08 Sep 2026 06:40:00 +0000
++
+ php8.4 (8.4.24-1) unstable; urgency=medium
+ 
+   * New upstream version 8.4.24
+    + [CVE-2026-17544]: Out-of-bounds write in bccomp()
+    + [CVE-2026-17543]: SQL injection via E'...' backslash breakout
+    + [CVE-2026-7260]: Crash via recursive symlinks
+ 
+  -- Ondřej Surý <ondrej@debian.org>  Thu, 30 Jul 2026 17:17:04 +0200
+ 
+ php8.4 (8.4.23-1) unstable; urgency=medium
+ 
+   * New upstream version 8.4.23
+ 
+  -- Ondřej Surý <ondrej@debian.org>  Thu, 02 Jul 2026 20:36:55 +0200
  
  php8.4 (8.4.22-1) unstable; urgency=medium