[pkg-php-pear] symfony_3.4.22+dfsg-2_source.changes ACCEPTED into unstable

Thu Apr 18 14:34:02 BST 2019

Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Thu, 18 Apr 2019 21:14:25 +0900
Source: symfony
Architecture: source
Version: 3.4.22+dfsg-2
Distribution: unstable
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear at lists.alioth.debian.org>
Changed-By: David Prévot <taffit at debian.org>
Closes: 926883
Changes:
 symfony (3.4.22+dfsg-2) unstable; urgency=medium
 .
   * Drop incorrect and useless overrides
   * Fix global autoload
   * Backport security fixes from 3.4.25
     - Escape validation messages in the PHP templating engine [CVE-2019-10909]
     - Check service IDs are valid [CVE-2019-10910]
     - Add a separator in the remember me cookie hash [CVE-2019-10911]
     - Prevent destructors with side-effects from being unserialized
       [CVE-2019-10912]
     - Reject invalid HTTP method overrides [CVE-2019-10913]
   * Workaround PHP bug causing the testsuite to fail (Closes: #926883)
Checksums-Sha1:
 b5be7166fd93e778c40c3e48d19517723440857c 6549 symfony_3.4.22+dfsg-2.dsc
 415a0bdafcc847dcf2a060a868deade27b66fb0f 48740 symfony_3.4.22+dfsg-2.debian.tar.xz
 4c2dc72fb1ffdbec6e7933e9e4bb04020d2b1770 27297 symfony_3.4.22+dfsg-2_amd64.buildinfo
Checksums-Sha256:
 c56028d2aad30faed0dacd8d6bc11d23543688fc633a953e00a0e11fad48502b 6549 symfony_3.4.22+dfsg-2.dsc
 d4181b8af388a2e3adce1232ec25021842216a359165279fe0f0ac2fa772a041 48740 symfony_3.4.22+dfsg-2.debian.tar.xz
 0319d955dc19aaf6883336fe1695034cc37aaaf406ae4b1f1feb861f8cf8a649 27297 symfony_3.4.22+dfsg-2_amd64.buildinfo
Files:
 ede76a0d5b49262c777f7e1509bf0199 6549 php optional symfony_3.4.22+dfsg-2.dsc
 164ba5a8342c6145941e0a97b515fb87 48740 php optional symfony_3.4.22+dfsg-2.debian.tar.xz
 8bbb4e1fb00507599a820180a6f6b8c5 27297 php optional symfony_3.4.22+dfsg-2_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQFGBAEBCAAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAly4ey4SHHRhZmZpdEBk
ZWJpYW4ub3JnAAoJEAWMHPlE9r08cpQH/jkNQ1/P7XTUpf4VkdoWM4Pmeer8htA0
hccbjIuR/plTWlBTcCdOY1TDJqgMkWcolA9KIS5mPyQtu3B7DleJ6mDwU5XY3dIp
HiAH8RCwWFBjXxL1+H56BRMmwD/iDHYx69F6up+FR7hrnBtnFPfcgPB/LqBYASSr
cmBKlNi9D0Q//V/bKB8qhvyveLTf6k9D55z+IuKfPwj54dUEB5y2zac07nydRa2r
/9SWTfireshCcTopwUhEbRG2Pw72ERQbSaG0j5pPfYzi+QDfGwNeBn3tTP2Wb8nS
lubgmlszcM9m4D3FzFyT0oK/ZeTaQfjAXFEAGi6yeyq2tNDYmp8HunQ=
=UTKe
-----END PGP SIGNATURE-----

Thank you for your contribution to Debian.