-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 30 Dec 2025 16:35:23 +0100
Source: composer
Architecture: source
Version: 2.8.8-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org>
Changed-By: David Prévot <taffit@debian.org>
Changes:
 composer (2.8.8-1+deb13u1) trixie; urgency=medium
 .
   * Backport fix from composer 2.9.3:
     Fixed ANSI sequence injection [CVE-2025-67746]
   * Track debian/trixie
Checksums-Sha1:
 2ef2fa1892f55dbc128d2debd702fc5cd94817ae 2254 composer_2.8.8-1+deb13u1.dsc
 21587db869a521cbbac51f3a236eaee434e19358 50240 composer_2.8.8-1+deb13u1.debian.tar.xz
 8cdef62f310469f2348e618295097e1050efeaad 9866 composer_2.8.8-1+deb13u1_amd64.buildinfo
Checksums-Sha256:
 35bdd03ddefd156e91ad2234a27e62d89cca0b1d08dd1d531e313f2eeea7edbb 2254 composer_2.8.8-1+deb13u1.dsc
 4ae19fab43e23d7383626faf0c9f4c06d66d0a4b5090c7cec665f3065349cc24 50240 composer_2.8.8-1+deb13u1.debian.tar.xz
 199087e03a935844e270c2afb4e302fb1ad392a2a76227cd3b02da39f3596e7c 9866 composer_2.8.8-1+deb13u1_amd64.buildinfo
Files:
 18a954fb09b2bcbca3dbfb48197880ef 2254 php optional composer_2.8.8-1+deb13u1.dsc
 13ae61c827a81f393b006583c3adc0a8 50240 php optional composer_2.8.8-1+deb13u1.debian.tar.xz
 053294fa290f1fe58e862a3950ab09d7 9866 php optional composer_2.8.8-1+deb13u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmlVBIkSHHRhZmZpdEBk
ZWJpYW4ub3JnAAoJEAWMHPlE9r08pqwIAKSKx45S4bYy4f0fymM9NWS3JIxl23D/
C+ZIAwNt0VNHBEbcD13TmggHrngoaKaPxxzdPGSMyzKph3CD8DYam6IJQ2vsrFd7
OQ0LHjchCQYITL6c2dyQmZvL/UQ6I2DYaHZBOZBNgx/6HEuKrYRCi8e5n5L3bnsf
iqUSF8/kppEu07f7kczFjdB9xu2xKYxShSCymE+f3USqQVICh+fFc1PP/EGPj80Q
fwdpoutwNwY9uUMLebK7p3aX1Uxpk1yMuhmrW7quSfBAzGERECkXkpKlz0G8QGt9
Q7vQhBW9HEdX9vbdGYOgEDMp/ljJCb0YI22YDXeAIURIzqyK2uMU6dM=
=ontx
-----END PGP SIGNATURE-----