-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 06 Feb 2026 01:44:54 +0530
Source: phpunit
Built-For-Profiles: noudeb
Architecture: source
Version: 9.5.2-1+deb11u1
Distribution: bullseye-security
Urgency: high
Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org>
Changed-By: Utkarsh Gupta <utkarsh@debian.org>
Changes:
phpunit (9.5.2-1+deb11u1) bullseye-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Add patch to not run PHPT test when its temporary file for
code coverage information exists. (Fixes: CVE-2026-24765).
* Also, restrict allowed classes in unserialize().
* Dynamically create .coverage during the test run to fix
the test of the CVE patch.
* Skip PHAR extension tests that require binary PHAR files
to fix the autopkgtests that were already broken.
Checksums-Sha1:
5dcd476ead75d8356320c1e41949d78eb07ff357 2546 phpunit_9.5.2-1+deb11u1.dsc
168f0da00ce833172efd50d30d8a1ea4a110f0f4 5324328 phpunit_9.5.2.orig.tar.xz
a38bec3b7d1cc30251063d0ee8c6e0528b8572cf 64648 phpunit_9.5.2-1+deb11u1.debian.tar.xz
8bef6dec4de0b5363742d3191428381c93b982b8 8203 phpunit_9.5.2-1+deb11u1_source.buildinfo
Checksums-Sha256:
c7ba24957d9f41deb791cfcd289d27944c8a1bd18058940055770ad7cf1f0c4c 2546 phpunit_9.5.2-1+deb11u1.dsc
d98b88d89670fa8da40c90d850b29331786747b06978c2edc297dbc607d311a8 5324328 phpunit_9.5.2.orig.tar.xz
18abe7e2865767cb6a083d90d0a62e1b4b0b39fd08e1f1e320a212bdfdca88b7 64648 phpunit_9.5.2-1+deb11u1.debian.tar.xz
20c18e0a2017103327b72dbb634b2c62c67de0a0e83413893bc1d1d02ad3681b 8203 phpunit_9.5.2-1+deb11u1_source.buildinfo
Files:
53311705798f329165654784c5223480 2546 php optional phpunit_9.5.2-1+deb11u1.dsc
9a108bc6275af725cf711e9e87c91e5b 5324328 php optional phpunit_9.5.2.orig.tar.xz
d427125dbdeeba8f7c6a7a92630b9bea 64648 php optional phpunit_9.5.2-1+deb11u1.debian.tar.xz
84c0852eeffb0c001694151a62f26fe3 8203 php optional phpunit_9.5.2-1+deb11u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=4YNC
-----END PGP SIGNATURE-----
