-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 18 Apr 2019 21:14:25 +0900 Source: symfony Architecture: source Version: 3.4.22+dfsg-2 Distribution: unstable Urgency: medium Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org> Changed-By: David Prévot <taffit@debian.org> Closes: 926883 Changes: symfony (3.4.22+dfsg-2) unstable; urgency=medium . * Drop incorrect and useless overrides * Fix global autoload * Backport security fixes from 3.4.25 - Escape validation messages in the PHP templating engine [CVE-2019-10909] - Check service IDs are valid [CVE-2019-10910] - Add a separator in the remember me cookie hash [CVE-2019-10911] - Prevent destructors with side-effects from being unserialized [CVE-2019-10912] - Reject invalid HTTP method overrides [CVE-2019-10913] * Workaround PHP bug causing the testsuite to fail (Closes: #926883) Checksums-Sha1: b5be7166fd93e778c40c3e48d19517723440857c 6549 symfony_3.4.22+dfsg-2.dsc 415a0bdafcc847dcf2a060a868deade27b66fb0f 48740 symfony_3.4.22+dfsg-2.debian.tar.xz 4c2dc72fb1ffdbec6e7933e9e4bb04020d2b1770 27297 symfony_3.4.22+dfsg-2_amd64.buildinfo Checksums-Sha256: c56028d2aad30faed0dacd8d6bc11d23543688fc633a953e00a0e11fad48502b 6549 symfony_3.4.22+dfsg-2.dsc d4181b8af388a2e3adce1232ec25021842216a359165279fe0f0ac2fa772a041 48740 symfony_3.4.22+dfsg-2.debian.tar.xz 0319d955dc19aaf6883336fe1695034cc37aaaf406ae4b1f1feb861f8cf8a649 27297 symfony_3.4.22+dfsg-2_amd64.buildinfo Files: ede76a0d5b49262c777f7e1509bf0199 6549 php optional symfony_3.4.22+dfsg-2.dsc 164ba5a8342c6145941e0a97b515fb87 48740 php optional symfony_3.4.22+dfsg-2.debian.tar.xz 8bbb4e1fb00507599a820180a6f6b8c5 27297 php optional symfony_3.4.22+dfsg-2_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQFGBAEBCAAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAly4ey4SHHRhZmZpdEBk ZWJpYW4ub3JnAAoJEAWMHPlE9r08cpQH/jkNQ1/P7XTUpf4VkdoWM4Pmeer8htA0 hccbjIuR/plTWlBTcCdOY1TDJqgMkWcolA9KIS5mPyQtu3B7DleJ6mDwU5XY3dIp HiAH8RCwWFBjXxL1+H56BRMmwD/iDHYx69F6up+FR7hrnBtnFPfcgPB/LqBYASSr cmBKlNi9D0Q//V/bKB8qhvyveLTf6k9D55z+IuKfPwj54dUEB5y2zac07nydRa2r /9SWTfireshCcTopwUhEbRG2Pw72ERQbSaG0j5pPfYzi+QDfGwNeBn3tTP2Wb8nS lubgmlszcM9m4D3FzFyT0oK/ZeTaQfjAXFEAGi6yeyq2tNDYmp8HunQ= =UTKe -----END PGP SIGNATURE-----