-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 13 Nov 2019 06:24:18 -1000 Source: symfony Architecture: source Version: 4.3.8+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Debian PHP PEAR Maintainers <pkg-php-p...@lists.alioth.debian.org> Changed-By: David Prévot <taf...@debian.org> Changes: symfony (4.3.8+dfsg-1) unstable; urgency=medium . [ Christophe Coevoet ] * Use constant time comparison in UriSigner [CVE-2019-18887] . [ Nicolas Grekas ] * [Cache] forbid serializing AbstractAdapter and TagAwareAdapter instances [CVE-2019-18889] * [VarExporter] fix exporting some strings [CVE-2019-11325] * [HttpFoundation] fix guessing mime-types of files with leading dash [CVE-2019-18888] * [Mime] fix guessing mime-types of files with leading dash [CVE-2019-18888] * [Security\Core] throw AccessDeniedException when switch user fails [CVE-2019-18886] . [ Fabien Potencier ] * updated VERSION for 4.3.8 . [ David Prévot ] * Track stable version for now * Update homemade overrides * Exclude whole directory Checksums-Sha1: 954672a24d7501f270048275d7197831a58e35a3 7461 symfony_4.3.8+dfsg-1.dsc 2d5f0a564cd7722bd6e81a729d1aa21b1e91dc0b 3917028 symfony_4.3.8+dfsg.orig.tar.xz 4534d670d83ce2df96b11978ca9a04df7b320332 43212 symfony_4.3.8+dfsg-1.debian.tar.xz 0744b38ba3b12fcc97e6b25628cc29388af32192 31535 symfony_4.3.8+dfsg-1_amd64.buildinfo Checksums-Sha256: 7c2bf05833fdafb2e2865871f4380c22feccce3ff35d2d1fda2680297043bb9d 7461 symfony_4.3.8+dfsg-1.dsc e1da36ec5a4d35f29877e83f0d64059b55ede481996aada9a6419117e60dad00 3917028 symfony_4.3.8+dfsg.orig.tar.xz f14029198910893cfbfb0d779a47802b8311b9cda99bec21a65d145219e96024 43212 symfony_4.3.8+dfsg-1.debian.tar.xz 2afce610b06716ff38e2b25d6de9f727e8d22d01fb60d6bb109032adc2a91796 31535 symfony_4.3.8+dfsg-1_amd64.buildinfo Files: 28aed0088e020dbc2618b83aef06ab08 7461 php optional symfony_4.3.8+dfsg-1.dsc 3cca78ea50f5850a6d26bdf18be03219 3917028 php optional symfony_4.3.8+dfsg.orig.tar.xz 24fd4b1c744f938cf73c114d5d77d259 43212 php optional symfony_4.3.8+dfsg-1.debian.tar.xz 5e192c3fea91a21bf4f6d266b0a2bf5a 31535 php optional symfony_4.3.8+dfsg-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE----- iQFGBAEBCAAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAl3MXEkSHHRhZmZpdEBk ZWJpYW4ub3JnAAoJEAWMHPlE9r080B0IAK/5ugBDGOCzmTWtP25jUMILZp+4YN1r dOYAQMsdaakD6fdm1FRW6sVQolq470ncfZZ2FyAS6nV3dXOF71gye6kP77O96piZ B0jtjIs+fq7NOfI+nILCBlqOS2BAyEIHbsDWBH9inbqlp3EQEae5VDQ568iQJ+Hr 3JDSdzreR8poL2fXv6DpKUVUGkHoviT4F9Oy59x8hEHFzTabThjvc/i8YOvj8IXK 6ItChyo5sBEvbR4IPS8ywyqL483UxA1GbfrodAS7VxgAogr4GsSKNxme774bmmtN 3Zf4SsdZPWITcd9k+S2NhROMthWJ7OeWjCWi/tUijZUK6OdHn3b3D4o= =Jw9A -----END PGP SIGNATURE-----