-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 13 Aug 2026 08:50:32 +0200
Source: php-league-commonmark
Architecture: source
Version: 2.10.0-1
Distribution: unstable
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org>
Changed-By: David Prévot <taffit@debian.org>
Changes:
php-league-commonmark (2.10.0-1) unstable; urgency=medium
.
[ Colin O'Dell ]
* Fix XSS filter bypass via form feed in attribute names (GHSA-f8fg-pg57-v4j8)
* Prevent quadratic backtracking in the fenced code start pattern
(GHSA-j8pm-gj4c-rq4x)
* Apply the 999-character link label limit when resolving references
(GHSA-j8pm-gj4c-rq4x)
* Bound the openersBottom cache key space in delimiter processors
(GHSA-j8pm-gj4c-rq4x)
* Append in place when merging adjacent text nodes (GHSA-jjv6-8j6v-6j52)
* Fix quadratic attribute block and class list resolution
(GHSA-jjv6-8j6v-6j52)
* Optimize Cursor character scanning (#1139)
* Stop cloning a node from mutating the node it was cloned from (#1140)
* Optimize inline link destination parsing (#1141)
* Fix 2.9.0 regression: restore Cursor::match() remainder semantics (#1146)
* Publish Cursor::matchInPlace() and deprecate the anchored RegexHelper
constants (#1147)
* Accumulate attributes without re-merging the whole set each time
(GHSA-8rr7-cvq3-gmfh)
.
[ David Prévot ]
* Document CVE in previous changelog entry
* Document lintian-overrides
* Use debhelper-compat = 14
Checksums-Sha1:
140aa97737950452719dbf8fa5f331fec3ff4d78 2147 php-league-commonmark_2.10.0-1.dsc
5c4109958081a411237d966d0c704d620d59237c 825312 php-league-commonmark_2.10.0.orig.tar.xz
a764969bd1157c637d2cc15ca791f1eae64b85bb 12756 php-league-commonmark_2.10.0-1.debian.tar.xz
afd16de7fa682c64f63ce5df26b44ef843836be0 8555 php-league-commonmark_2.10.0-1_amd64.buildinfo
Checksums-Sha256:
d251883ab6f92effc068352575837fd88d9d1fa95ba0d589f5b114a72a6a1797 2147 php-league-commonmark_2.10.0-1.dsc
67c974d9240872bbeb6a28214e5b2831eef450edf7b8be44937c37f23c2998fe 825312 php-league-commonmark_2.10.0.orig.tar.xz
76ba1e2bf97398b1fba94ab28f9411d11720d5c5ad577fa0dc10ea7afb6565ea 12756 php-league-commonmark_2.10.0-1.debian.tar.xz
0b3ee7caec21f3931a37901c4e5a8188b8916c670e366b39550e0e2023e67fd0 8555 php-league-commonmark_2.10.0-1_amd64.buildinfo
Files:
0ed9fd66277f2287ae61c56f99960ec2 2147 php optional php-league-commonmark_2.10.0-1.dsc
745cf00b0443bf21b4fa07368077d13f 825312 php optional php-league-commonmark_2.10.0.orig.tar.xz
7e5fcd61bc2b3a8d02260f30bd6fd95a 12756 php optional php-league-commonmark_2.10.0-1.debian.tar.xz
900536bc20409457f3e070031282d1db 8555 php optional php-league-commonmark_2.10.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmp9bHISHHRhZmZpdEBk
ZWJpYW4ub3JnAAoJEAWMHPlE9r08QAIH/1Kgy/CTVagBwafSqUgdGecCPzaKK6Pm
9nRTC0EpyZfcwOaOMggG0g3/uq7Zjg51+5YenMgOX7xD7XfNnhr4lcLCseLy0n8c
jVfEBFgsOxixarx3tkNxUNbAm3Rwbrpyv9hjxzkmNwQC8JTEKH8yy95DQCdRkbQs
n+On8qsyxP/WAQZ5g7IUaC5EXX1L1tt05sGz5zAxgrnY0MFfJoejRVwYcKC67v7U
rxeclrwfJGCIJ1g6Tvrzsj6hvyAalkTiFzeqXyIl1hUHLSnVXW04njvHMQo7WHWE
+Mb99xGhcm4a1Wh72UBbVZYb8cZPK/v4rLxjPkhTsJZTZibyue1llD0=
=tUXN
-----END PGP SIGNATURE-----
