-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 27 May 2026 11:18:12 +0200 Source: symfony Architecture: source Version: 8.0.13+dfsg-1 Distribution: experimental Urgency: medium Maintainer: Debian PHP PEAR Maintainers <[email protected]> Changed-By: David Prévot <[email protected]> Changes: symfony (8.0.13+dfsg-1) experimental; urgency=medium . [ Fabien Potencier ] * Update VERSION for 8.0.13 . [ Nicolas Grekas ] * [HttpClient] Block IPv6 transition forms in NoPrivateNetworkHttpClient [CVE-2026-48736] * [HttpFoundation] Block IPv6 transition forms in IpUtils::PRIVATE_SUBNETS [CVE-2026-48736] * [Mailer] Pin Mailomat webhook signature algorithm to SHA-256 [CVE-2026-48747] * [HtmlSanitizer] Reject percent-encoded BiDi marks and Unicode whitespace in URLs [CVE-2026-48760] * [HtmlSanitizer] Sanitize URL attributes on <object>, <applet>, <iframe>, <img>, and the URL inside <meta http-equiv="refresh"> content [CVE-2026-48761] * [Routing] Fix dot-segment encoding for chained "../" and "./" in generated URLs [CVE-2026-48784] * [Security] Don't honor user-supplied _failure_path on failure_forward [CVE-2026-48489] Checksums-Sha1: eec23b94ae5e34688084b6910cc703500e1c950a 19026 symfony_8.0.13+dfsg-1.dsc 5f359a9ac572980fc5af46e4c69e2c34203e9031 9215068 symfony_8.0.13+dfsg.orig.tar.xz ca0ce8798478a8e1c13c66a14944bcde61346d34 78988 symfony_8.0.13+dfsg-1.debian.tar.xz 84fca6a3fa0fbce2c61fca93eb5173f6abd740d5 74367 symfony_8.0.13+dfsg-1_amd64.buildinfo Checksums-Sha256: 8243e284ef6791c80a5b4521ef2de76c1a0b4525d8e0ae5344fb9bcdddde9f89 19026 symfony_8.0.13+dfsg-1.dsc a96b98e09fdacccbc31c9e2d460bf1877a992e5cb78e627ed79ee3fbb6f1264f 9215068 symfony_8.0.13+dfsg.orig.tar.xz acc31bcdfc747a4ea498fe9461083328a7daa937626cc92cfa5f1e3c63fd79ec 78988 symfony_8.0.13+dfsg-1.debian.tar.xz 79342fdad91b318f0328134917f2824b11fd22b9226aa9d975fe23049a6c83ba 74367 symfony_8.0.13+dfsg-1_amd64.buildinfo Files: f6519c63683fda06e7e8806fe204c85c 19026 php optional symfony_8.0.13+dfsg-1.dsc 07ab5c4d77ee0ada12673bde51565470 9215068 php optional symfony_8.0.13+dfsg.orig.tar.xz c0e5dd9055e5d3db3993401439578318 78988 php optional symfony_8.0.13+dfsg-1.debian.tar.xz 41bf6869e818c8a8020d52ac939c8190 74367 php optional symfony_8.0.13+dfsg-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE----- iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmoXWXASHHRhZmZpdEBk ZWJpYW4ub3JnAAoJEAWMHPlE9r08TU4IAKrVqehWMNE5vbpGQ4W9b+Yy+DICDE+Q yjF/703kACNdJUAzXlwxhJL+p7q1QMEdBn6/yvFOgbYbKDMQUbsGQdoNTvIsFNEw nTellrw3+p5oV5G65DWY2hqLR7IzRZYiSBCNwJScFuM/7yG3nVnyx2hAzmkBbpBB ZSmc4mnhcyqgvSwzD9jJd618XeCqS9urF8fcXkHXMWRjuZPoVDb/YZiVU+GNfpBK NCUHI0+QqO+qXlEEVXYd2PaRK7k36YTMZPuNYwK4H/OIre6exqFtV6HbC2sUCkTa fbOnwVI4d9m1knyuxNDj4BJkZHgZ2H7dBQjsrDZIgXlNl3jztduTD2s= =miQe -----END PGP SIGNATURE-----
pgpS7UT6XHrjQ.pgp
Description: PGP signature
