-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 30 Dec 2025 17:01:22 +0100
Source: composer
Architecture: source
Version: 2.5.5-1+deb12u3
Distribution: bookworm
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org>
Changed-By: David Prévot <taffit@debian.org>
Changes:
composer (2.5.5-1+deb12u3) bookworm; urgency=medium
.
* Backport fix from composer 2.2.26:
Fixed ANSI sequence injection [CVE-2025-67746]
Checksums-Sha1:
70e6bf5f931938ee0ec93c6ca7c185d907f2f31b 2391 composer_2.5.5-1+deb12u3.dsc
fed1d519cfaf64244aeb2159a71991485db0d74c 21332 composer_2.5.5-1+deb12u3.debian.tar.xz
401db53ebd226479fb775e60eece4190890fb711 10263 composer_2.5.5-1+deb12u3_amd64.buildinfo
Checksums-Sha256:
d11268d9bb2c9145fcb51c2e04d1e1b53b5ddd121d278a809ee28bf1a595a670 2391 composer_2.5.5-1+deb12u3.dsc
5903f2f480a46bbbc7d54265231db2c7de0b18431a3f1dbe7d8b8ea637a6a259 21332 composer_2.5.5-1+deb12u3.debian.tar.xz
0801264c6a767134688ecc9551c1faf73b2c712fa4d84aae5953f2bb78bb3715 10263 composer_2.5.5-1+deb12u3_amd64.buildinfo
Files:
fc782568712cf6428ff9157a33d7fd57 2391 php optional composer_2.5.5-1+deb12u3.dsc
76629b5d0cd2d793edf8c3d836dfef0b 21332 php optional composer_2.5.5-1+deb12u3.debian.tar.xz
2e59f1794ba4c144395c0b9018ef7a68 10263 php optional composer_2.5.5-1+deb12u3_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmlVBIoSHHRhZmZpdEBk
ZWJpYW4ub3JnAAoJEAWMHPlE9r08O/IH/jXRipOO+FiASkaEoTS+edOFz1XxmcER
Rpw9ZY1eBiOBKP44sHL+EAv1YXQ5psf0CXfjCAGy2gRWnZB/FyeqgIVhxUMBhtvK
5Ls2kv3Ezpo5m1Ni8ksOG7qAVJByNXNixRg0VK0vpY9dI6uSa2Bpq2Rv77bAgbqr
X0U2gXU7ALcTpLk1n+o8aXz74BguJYmYWyucVLMbXIXQArqxibOwiQ9dHo6mQ7kf
bJLL7yy4meidMz4Sp66bR414vR7e6QYnwBc2jQDseO3FiM0bT1nk6Hi3DcG0vs6f
qWQMwvfkTKJMBNh9u1q1Ng9iN9YCT+chXN7e/4avc57BJryDMuCVmHw=
=OrFl
-----END PGP SIGNATURE-----
