-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 27 Apr 2021 18:00:29 -0400
Source: composer
Architecture: source
Version: 2.0.13-1
Distribution: experimental
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org>
Changed-By: David Prévot <taffit@debian.org>
Changes:
composer (2.0.13-1) experimental; urgency=medium
.
[ Jordi Boggiano ]
* Switch to composer/metadata-minifier, fixes #9727
* Release 2.0.13
* Security: Fixed command injection vulnerability in HgDriver/HgDownloader
and hardened other VCS drivers and downloaders (GHSA-h5h8-pc6h-jvvx)
[CVE-2021-29472]
.
[ David Prévot ]
* New php-composer-metadata-minifier (build-)dependency
Checksums-Sha1:
66d2200e7bf77845769f75a09a748143bd4b0209 2145 composer_2.0.13-1.dsc
098f96a6347157d591edcce9c54f935305d55992 818348 composer_2.0.13.orig.tar.xz
9b3a0a98190159f010fb5195e1b90d02026a7b2d 16096 composer_2.0.13-1.debian.tar.xz
8e896f0423cbdc95d2203c202ab153daaf390d1e 9215 composer_2.0.13-1_amd64.buildinfo
Checksums-Sha256:
c4adc263261351f1fbb970892823bf4f0dfeea2c00eca4bb22cee20b160f1d26 2145 composer_2.0.13-1.dsc
73a342ed0123acf9b21263b6f2018ce49bdf21a180fe3ff3b2796504bb303183 818348 composer_2.0.13.orig.tar.xz
9118da6c2a17b0694a9c230f36aeae680f5faa4b937127b47b19255cc1b49c19 16096 composer_2.0.13-1.debian.tar.xz
24c531d3c2b2cb788172ba6f4c2a6d432aa589422d7f9fb90874923324c86a8d 9215 composer_2.0.13-1_amd64.buildinfo
Files:
e8948325737708444c00d6c8b708853e 2145 php optional composer_2.0.13-1.dsc
79870860eeed57e72096fdd099ea8126 818348 php optional composer_2.0.13.orig.tar.xz
9966ce49b98c1721e05e8e837b075098 16096 php optional composer_2.0.13-1.debian.tar.xz
772ceb6bfd29b933405121b3dca447c5 9215 php optional composer_2.0.13-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQFGBAEBCAAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmCIjmgSHHRhZmZpdEBk
ZWJpYW4ub3JnAAoJEAWMHPlE9r08ycgH/2Fhr2DuAUuOuWgdV9WC2AmUeBc3iHRq
swZR5SE5DlBVe0VwuGCExoOthAddEOWB10Gibu4AKCtKUDFggZ8jkWkPWwaAs0b0
MjeqIDVNOinP0Z/80zuve/QxbQ8KoUnYkQqcxSQWTRmKVuTZoBudFpH4zuuE3ebg
B7qe4qm7f4FINTBdsyIBuFW7CZKlqcnB7tsxFSB9pctQPpRcvxffUlq3yxox5S8p
sCggxPjnwAlEFbQ4NW/GsFfqUlYZ8aBMxYwYZyP+8d6hMHCYvMYukaZ0Cc9VOrc1
lMqmu9b5WaABR0PKpkOVTanq0B3uJXUtUA5BgEY4ilOqFomIjoqWXF4=
=+Fk4
-----END PGP SIGNATURE-----
