-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 25 Sep 2026 18:51:36 +0200
Source: php-getid3
Architecture: source
Version: 1.9.27+dfsg-1
Distribution: unstable
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org>
Changed-By: David Prévot <taffit@debian.org>
Changes:
php-getid3 (1.9.27+dfsg-1) unstable; urgency=medium
.
[ Ikram Shaik ]
* Fix #505: Remove @ suppressors from libxml_disable_entity_loader()
and add LIBXML_NOENT (GHSA-3hf9-j62w-m548) [CVE-2026-94108]
.
[ James Heinrich ]
* don't convert Picture binary data
* remove LIBXML_NOENT (GHSA-j649-xr34-mmmh)
* changelog v1.9.27-202609221015
.
[ Iain ]
* Cap ID3v2 frame decompression to prevent memory exhaustion
* Default decompression cap to 32MB when memory_limit is unknown
(GHSA-c2xw-vp6w-gpph)
.
[ David Prévot ]
* Revert "Use GitHub template in watch file instead of explicit
Source/Matching-Pattern"
Checksums-Sha1:
3e8e4427eb09ede4985aadb013b38c88ca712bfb 1734 php-getid3_1.9.27+dfsg-1.dsc
dcc023bb5a7c08e9bac06f3ae359903543973155 388988 php-getid3_1.9.27+dfsg.orig.tar.xz
ebb475cdac5feb9b5959fee70edfbb60e01c3a3b 6040 php-getid3_1.9.27+dfsg-1.debian.tar.xz
b97679c2123353f3fbf7af4a4dd52f1821d8d663 5854 php-getid3_1.9.27+dfsg-1_amd64.buildinfo
Checksums-Sha256:
482b91173d365484eb6688e0649c7aab222d44cf1a89d4479851033bbc8814bd 1734 php-getid3_1.9.27+dfsg-1.dsc
7b99a46205f7a4439357664f9133c5faeed0a28c72f6e57fd146a981851d4c07 388988 php-getid3_1.9.27+dfsg.orig.tar.xz
57848bd718e793d07334ff0dfbd1d4fadd8716d9aff862bb9dcf89732200caac 6040 php-getid3_1.9.27+dfsg-1.debian.tar.xz
5728c6b83b7a6dbfcf32e642fe6f367b7b417a28d8cd9190a347e44b657412ff 5854 php-getid3_1.9.27+dfsg-1_amd64.buildinfo
Files:
cdc2729e602e79bf69dd9559ee952d36 1734 php optional php-getid3_1.9.27+dfsg-1.dsc
2f7b32af36e4c5c9ca7af725cc087c15 388988 php optional php-getid3_1.9.27+dfsg.orig.tar.xz
11dd148bc17363103ffe9ceca7ca8ce3 6040 php optional php-getid3_1.9.27+dfsg-1.debian.tar.xz
c3cca5a155d991086ef73eef56fb131f 5854 php optional php-getid3_1.9.27+dfsg-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmq3fpESHHRhZmZpdEBk
ZWJpYW4ub3JnAAoJEAWMHPlE9r08S7cH/jQmvOsKErJ3C14r65LxQ8/a+sZxbLlD
yms1j+bgqrOSPgDn+PrQjzmA3uo7Lz8Ylc54UJ2drwQfV/ToZjh9eDHXQxH2RCN6
hgPqDV1FfEKngNJ99PFEKZJPXGNQt0nl11FlWz932WNpjA4TY3FnQAlVjbrZfJwQ
DzwxmG08F8Va1Mzl6n3nnU1iRiWsQFOUiAOkkiRghlTFgm8e1Hzfzbb7mVZBErwM
zJ9D8ql+m978TOwg1vmppdxnbgqIYbfNEj+gHupNpZ+Bv93NgXJ50pmjhhR38f2t
RQamRrVv8vg0Mge3Ikx3WvUqrQTLxEIZosg3fMRNYp4jq2HLDKYs/mY=
=3i+K
-----END PGP SIGNATURE-----
