[pkg-php-pear] composer_2.0.13-1_source.changes ACCEPTED into experimental

Tue Apr 27 23:33:33 BST 2021

Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Tue, 27 Apr 2021 18:00:29 -0400
Source: composer
Architecture: source
Version: 2.0.13-1
Distribution: experimental
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear at lists.alioth.debian.org>
Changed-By: David Prévot <taffit at debian.org>
Changes:
 composer (2.0.13-1) experimental; urgency=medium
 .
   [ Jordi Boggiano ]
   * Switch to composer/metadata-minifier, fixes #9727
   * Release 2.0.13
   * Security: Fixed command injection vulnerability in HgDriver/HgDownloader
     and hardened other VCS drivers and downloaders (GHSA-h5h8-pc6h-jvvx)
     [CVE-2021-29472]
 .
   [ David Prévot ]
   * New php-composer-metadata-minifier (build-)dependency
Checksums-Sha1:
 66d2200e7bf77845769f75a09a748143bd4b0209 2145 composer_2.0.13-1.dsc
 098f96a6347157d591edcce9c54f935305d55992 818348 composer_2.0.13.orig.tar.xz
 9b3a0a98190159f010fb5195e1b90d02026a7b2d 16096 composer_2.0.13-1.debian.tar.xz
 8e896f0423cbdc95d2203c202ab153daaf390d1e 9215 composer_2.0.13-1_amd64.buildinfo
Checksums-Sha256:
 c4adc263261351f1fbb970892823bf4f0dfeea2c00eca4bb22cee20b160f1d26 2145 composer_2.0.13-1.dsc
 73a342ed0123acf9b21263b6f2018ce49bdf21a180fe3ff3b2796504bb303183 818348 composer_2.0.13.orig.tar.xz
 9118da6c2a17b0694a9c230f36aeae680f5faa4b937127b47b19255cc1b49c19 16096 composer_2.0.13-1.debian.tar.xz
 24c531d3c2b2cb788172ba6f4c2a6d432aa589422d7f9fb90874923324c86a8d 9215 composer_2.0.13-1_amd64.buildinfo
Files:
 e8948325737708444c00d6c8b708853e 2145 php optional composer_2.0.13-1.dsc
 79870860eeed57e72096fdd099ea8126 818348 php optional composer_2.0.13.orig.tar.xz
 9966ce49b98c1721e05e8e837b075098 16096 php optional composer_2.0.13-1.debian.tar.xz
 772ceb6bfd29b933405121b3dca447c5 9215 php optional composer_2.0.13-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQFGBAEBCAAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmCIjmgSHHRhZmZpdEBk
ZWJpYW4ub3JnAAoJEAWMHPlE9r08ycgH/2Fhr2DuAUuOuWgdV9WC2AmUeBc3iHRq
swZR5SE5DlBVe0VwuGCExoOthAddEOWB10Gibu4AKCtKUDFggZ8jkWkPWwaAs0b0
MjeqIDVNOinP0Z/80zuve/QxbQ8KoUnYkQqcxSQWTRmKVuTZoBudFpH4zuuE3ebg
B7qe4qm7f4FINTBdsyIBuFW7CZKlqcnB7tsxFSB9pctQPpRcvxffUlq3yxox5S8p
sCggxPjnwAlEFbQ4NW/GsFfqUlYZ8aBMxYwYZyP+8d6hMHCYvMYukaZ0Cc9VOrc1
lMqmu9b5WaABR0PKpkOVTanq0B3uJXUtUA5BgEY4ilOqFomIjoqWXF4=
=+Fk4
-----END PGP SIGNATURE-----

Thank you for your contribution to Debian.