-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 27 May 2026 11:18:12 +0200
Source: symfony
Architecture: source
Version: 8.0.13+dfsg-1
Distribution: experimental
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org>
Changed-By: David Prévot <taffit@debian.org>
Changes:
symfony (8.0.13+dfsg-1) experimental; urgency=medium
.
[ Fabien Potencier ]
* Update VERSION for 8.0.13
.
[ Nicolas Grekas ]
* [HttpClient] Block IPv6 transition forms in NoPrivateNetworkHttpClient
[CVE-2026-48736]
* [HttpFoundation] Block IPv6 transition forms in IpUtils::PRIVATE_SUBNETS
[CVE-2026-48736]
* [Mailer] Pin Mailomat webhook signature algorithm to SHA-256
[CVE-2026-48747]
* [HtmlSanitizer] Reject percent-encoded BiDi marks and Unicode whitespace
in URLs [CVE-2026-48760]
* [HtmlSanitizer] Sanitize URL attributes on <object>, <applet>, <iframe>,
<img>, and the URL inside <meta http-equiv="refresh"> content
[CVE-2026-48761]
* [Routing] Fix dot-segment encoding for chained "../" and "./" in generated
URLs [CVE-2026-48784]
* [Security] Don't honor user-supplied _failure_path on failure_forward
[CVE-2026-48489]
Checksums-Sha1:
eec23b94ae5e34688084b6910cc703500e1c950a 19026 symfony_8.0.13+dfsg-1.dsc
5f359a9ac572980fc5af46e4c69e2c34203e9031 9215068 symfony_8.0.13+dfsg.orig.tar.xz
ca0ce8798478a8e1c13c66a14944bcde61346d34 78988 symfony_8.0.13+dfsg-1.debian.tar.xz
84fca6a3fa0fbce2c61fca93eb5173f6abd740d5 74367 symfony_8.0.13+dfsg-1_amd64.buildinfo
Checksums-Sha256:
8243e284ef6791c80a5b4521ef2de76c1a0b4525d8e0ae5344fb9bcdddde9f89 19026 symfony_8.0.13+dfsg-1.dsc
a96b98e09fdacccbc31c9e2d460bf1877a992e5cb78e627ed79ee3fbb6f1264f 9215068 symfony_8.0.13+dfsg.orig.tar.xz
acc31bcdfc747a4ea498fe9461083328a7daa937626cc92cfa5f1e3c63fd79ec 78988 symfony_8.0.13+dfsg-1.debian.tar.xz
79342fdad91b318f0328134917f2824b11fd22b9226aa9d975fe23049a6c83ba 74367 symfony_8.0.13+dfsg-1_amd64.buildinfo
Files:
f6519c63683fda06e7e8806fe204c85c 19026 php optional symfony_8.0.13+dfsg-1.dsc
07ab5c4d77ee0ada12673bde51565470 9215068 php optional symfony_8.0.13+dfsg.orig.tar.xz
c0e5dd9055e5d3db3993401439578318 78988 php optional symfony_8.0.13+dfsg-1.debian.tar.xz
41bf6869e818c8a8020d52ac939c8190 74367 php optional symfony_8.0.13+dfsg-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmoXWXASHHRhZmZpdEBk
ZWJpYW4ub3JnAAoJEAWMHPlE9r08TU4IAKrVqehWMNE5vbpGQ4W9b+Yy+DICDE+Q
yjF/703kACNdJUAzXlwxhJL+p7q1QMEdBn6/yvFOgbYbKDMQUbsGQdoNTvIsFNEw
nTellrw3+p5oV5G65DWY2hqLR7IzRZYiSBCNwJScFuM/7yG3nVnyx2hAzmkBbpBB
ZSmc4mnhcyqgvSwzD9jJd618XeCqS9urF8fcXkHXMWRjuZPoVDb/YZiVU+GNfpBK
NCUHI0+QqO+qXlEEVXYd2PaRK7k36YTMZPuNYwK4H/OIre6exqFtV6HbC2sUCkTa
fbOnwVI4d9m1knyuxNDj4BJkZHgZ2H7dBQjsrDZIgXlNl3jztduTD2s=
=miQe
-----END PGP SIGNATURE-----
