-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 28 Oct 2026 20:28:35 +0100
Source: symfony
Architecture: source
Version: 6.4.49+dfsg-0+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org>
Changed-By: David Prévot <taffit@debian.org>
Changes:
symfony (6.4.49+dfsg-0+deb13u1) trixie-security; urgency=medium
.
[ Fabien Potencier ]
* Update VERSION for 6.4.49
.
[ Alexandre Daubois ]
* [Mime] Reject parameter names containing non-token characters
[CVE-2026-45070]
.
[ Nicolas Grekas ]
* [Yaml] Bound recursion depth in the inline lexer [CVE-2026-109413]
* [HttpFoundation] Remove the ambiguity that makes HeaderUtils::split()
backtrack [CVE-2026-108082]
* [HttpFoundation] Fix HeaderUtils::split() when a separator is a whitespace
character [CVE-2026-108082]
* [ExpressionLanguage] Bound the depth of the parsed node tree
[CVE-2026-109449]
* [ExpressionLanguage] Bound the nesting level of parsed expressions
[CVE-2026-109449]
.
[ lazerg ]
* [ExpressionLanguage] Fix nesting level of chained ternaries
[CVE-2026-109449]
.
[ David Prévot ]
* Refresh patches
* Additional test patches
* Update checksum
* Exclude another file for phpab
Checksums-Sha1:
7491039d1a499efc719680016f9cb17a0f3bfddb 16771 symfony_6.4.49+dfsg-0+deb13u1.dsc
1b8a3598706620c518ed4fd01aee9a71a929729f 9676888 symfony_6.4.49+dfsg.orig.tar.xz
09119858ea8983d1eb1c8a912d13aa84891ac8c7 84864 symfony_6.4.49+dfsg-0+deb13u1.debian.tar.xz
464a0c2390560b8f0f6d6050039f35afd5e163b5 71986 symfony_6.4.49+dfsg-0+deb13u1_amd64.buildinfo
Checksums-Sha256:
9577ebd2a1ab84aced6d93cb54fbfb9489d1bee74d12e148589f36b0626f79ae 16771 symfony_6.4.49+dfsg-0+deb13u1.dsc
7eda8c298a0eeb31abe9cc5911b412cb39a162b6d6389cafc4bca0b10340d18c 9676888 symfony_6.4.49+dfsg.orig.tar.xz
504bf2281fc51c58be8775d27f1a686b321ab7e1f8cb2da8e8996e4de685abc1 84864 symfony_6.4.49+dfsg-0+deb13u1.debian.tar.xz
7187de9fcd96d1d721a19aca09b8ca63fed183e458c2ed6235903aaba2b69dae 71986 symfony_6.4.49+dfsg-0+deb13u1_amd64.buildinfo
Files:
ca83b42438a234b9510e899bcc9ef1e1 16771 php optional symfony_6.4.49+dfsg-0+deb13u1.dsc
da5ef807db5f7dcd8b8ac5197ec477b0 9676888 php optional symfony_6.4.49+dfsg.orig.tar.xz
ee0c9aa16b5ae4a5531576dd057b0760 84864 php optional symfony_6.4.49+dfsg-0+deb13u1.debian.tar.xz
7222cbe8cb0b59bc78a774684442521c 71986 php optional symfony_6.4.49+dfsg-0+deb13u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmrotCcSHHRhZmZpdEBk
ZWJpYW4ub3JnAAoJEAWMHPlE9r08LVQH/ji35ArPIYeXDC2gKE287hCrQ7EpthrZ
eYdjvbpY0+bbBYpMorTLPizw2NLVLn5LYOtYAxdV9gxFMcPI53ofpKH8PChUY9mn
0Dv3TmWb9+ZWcGHfuqQnJKO2f8CSKlQ7zaKjQAMNClvm0M5oC+DN01SRKb5ws0ds
uxP1VKPRZyaK5NLvY6xtK37nZucXHAINok/L4ZsTwfD7zEpWlw/M2EftvwGkR065
+DMDTxK7TGE6s25+n/jtL+pbkIXNumFlM90FIxcoZ+AAWFYUQi3QJJlHk7vT/Ycy
Nz2CtI5G88DMzgjRYsGxmc+98qRfAODVlWNGwvtEgTgxd8mgj/F6aS8=
=rQDV
-----END PGP SIGNATURE-----
