-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 27 May 2026 19:56:10 +0200 Source: symfony Binary: php-symfony php-symfony-all-my-sms-notifier php-symfony-amazon-mailer php-symfony-amazon-sns-notifier php-symfony-amazon-sqs-messenger php-symfony-amqp-messenger php-symfony-asset php-symfony-asset-mapper php-symfony-bandwidth-notifier php-symfony-beanstalkd-messenger php-symfony-brevo-mailer php-symfony-brevo-notifier php-symfony-browser-kit php-symfony-cache php-symfony-chatwork-notifier php-symfony-click-send-notifier php-symfony-clickatell-notifier php-symfony-clock php-symfony-config php-symfony-console php-symfony-contact-everyone-notifier php-symfony-crowdin-translation-provider php-symfony-css-selector php-symfony-debug-bundle php-symfony-dependency-injection php-symfony-discord-notifier php-symfony-doctrine-bridge php-symfony-doctrine-messenger php-symfony-dom-crawler php-symfony-dotenv php-symfony-engagespot-notifier php-symfony-error-handler php-symfony-esendex-notifier php-symfony-event-dispatcher php-symfony-expo-notifier php-symfony-expression-language php-symfony-fake-chat-notifier php-symfony-fake-sms-notifier php-symfony-filesystem php-symfony-finder php-symfony-firebase-notifier php-symfony-form php-symfony-forty-six-elks-notifier php-symfony-framework-bundle php-symfony-free-mobile-notifier php-symfony-gateway-api-notifier php-symfony-gitter-notifier php-symfony-go-ip-notifier php-symfony-google-chat-notifier php-symfony-google-mailer php-symfony-html-sanitizer php-symfony-http-client php-symfony-http-foundation php-symfony-http-kernel php-symfony-infobip-mailer php-symfony-infobip-notifier php-symfony-intl php-symfony-iqsms-notifier php-symfony-isendpro-notifier php-symfony-kaz-info-teh-notifier php-symfony-ldap php-symfony-light-sms-notifier php-symfony-line-notify-notifier php-symfony-linked-in-notifier php-symfony-lock php-symfony-loco-translation-provider php-symfony-lokalise-translation-provider php-symfony-mail-pace-mailer php-symfony-mailchimp-mailer php-symfony-mailer php-symfony-mailer-send-mailer php-symfony-mailgun-mailer php-symfony-mailjet-mailer php-symfony-mailjet-notifier php-symfony-mastodon-notifier php-symfony-mattermost-notifier php-symfony-mercure-notifier php-symfony-message-bird-notifier php-symfony-message-media-notifier php-symfony-messenger php-symfony-microsoft-teams-notifier php-symfony-mime php-symfony-mobyt-notifier php-symfony-monolog-bridge php-symfony-notifier php-symfony-novu-notifier php-symfony-ntfy-notifier php-symfony-octopush-notifier php-symfony-oh-my-smtp-mailer php-symfony-one-signal-notifier php-symfony-options-resolver php-symfony-orange-sms-notifier php-symfony-ovh-cloud-notifier php-symfony-pager-duty-notifier php-symfony-password-hasher php-symfony-phpunit-bridge php-symfony-phrase-translation-provider php-symfony-plivo-notifier php-symfony-postmark-mailer php-symfony-process php-symfony-property-access php-symfony-property-info php-symfony-proxy-manager-bridge php-symfony-psr-http-message-bridge php-symfony-pushover-notifier php-symfony-rate-limiter php-symfony-redis-messenger php-symfony-redlink-notifier php-symfony-remote-event php-symfony-ring-central-notifier php-symfony-rocket-chat-notifier php-symfony-routing php-symfony-runtime php-symfony-scaleway-mailer php-symfony-scheduler php-symfony-security-bundle php-symfony-security-core php-symfony-security-csrf php-symfony-security-http php-symfony-semaphore php-symfony-sendberry-notifier php-symfony-sendgrid-mailer php-symfony-sendinblue-mailer php-symfony-sendinblue-notifier php-symfony-serializer php-symfony-simple-textin-notifier php-symfony-sinch-notifier php-symfony-slack-notifier php-symfony-sms-biuras-notifier php-symfony-sms-factor-notifier php-symfony-sms77-notifier php-symfony-smsapi-notifier php-symfony-smsc-notifier php-symfony-smsmode-notifier php-symfony-spot-hit-notifier php-symfony-stopwatch php-symfony-string php-symfony-telegram-notifier php-symfony-telnyx-notifier php-symfony-templating php-symfony-termii-notifier php-symfony-translation php-symfony-turbo-sms-notifier php-symfony-twig-bridge php-symfony-twig-bundle php-symfony-twilio-notifier php-symfony-twitter-notifier php-symfony-uid php-symfony-validator php-symfony-var-dumper php-symfony-var-exporter php-symfony-vonage-notifier php-symfony-web-link php-symfony-web-profiler-bundle php-symfony-webhook php-symfony-workflow php-symfony-yaml php-symfony-yunpian-notifier php-symfony-zendesk-notifier php-symfony-zulip-notifier Architecture: all Version: 6.4.41+dfsg-0+deb13u1 Distribution: trixie-security Urgency: medium Maintainer: all Build Daemon (x86-grnet-02) Changed-By: David Prévot Description: php-symfony - set of reusable components and framework for web projects php-symfony-all-my-sms-notifier - php-symfony-amazon-mailer - php-symfony-amazon-sns-notifier - Symfony Amazon SNS Notifier Bridge php-symfony-amazon-sqs-messenger - php-symfony-amqp-messenger - php-symfony-asset - manage asset URLs php-symfony-asset-mapper - maps directories of asset and makes them available in a public di php-symfony-bandwidth-notifier - php-symfony-beanstalkd-messenger - php-symfony-brevo-mailer - php-symfony-brevo-notifier - php-symfony-browser-kit - simulate the behavior of a web browser php-symfony-cache - provides extended PSR-6, PSR-16 (and tags) implementations php-symfony-chatwork-notifier - php-symfony-click-send-notifier - php-symfony-clickatell-notifier - php-symfony-clock - php-symfony-config - load configurations from different data sources php-symfony-console - run tasks from the command line php-symfony-contact-everyone-notifier - php-symfony-crowdin-translation-provider - php-symfony-css-selector - convert CSS selectors to XPath expressions php-symfony-debug-bundle - debugging tools for the Symfony framework php-symfony-dependency-injection - standardize and centralize construction of objects php-symfony-discord-notifier - php-symfony-doctrine-bridge - integration for Doctrine with Symfony Components php-symfony-doctrine-messenger - php-symfony-dom-crawler - ease DOM navigation for HTML and XML documents php-symfony-dotenv - .env files parser to make environment variables accessible php-symfony-engagespot-notifier - php-symfony-error-handler - manage errors and ease debugging php-symfony-esendex-notifier - php-symfony-event-dispatcher - dispatch events and listen to them php-symfony-expo-notifier - php-symfony-expression-language - compile and evaluate expressions php-symfony-fake-chat-notifier - php-symfony-fake-sms-notifier - php-symfony-filesystem - basic filesystem utilities php-symfony-finder - find files and directories php-symfony-firebase-notifier - php-symfony-form - create HTML forms and process request data php-symfony-forty-six-elks-notifier - php-symfony-framework-bundle - basic, robust and flexible MVC framework php-symfony-free-mobile-notifier - php-symfony-gateway-api-notifier - php-symfony-gitter-notifier - php-symfony-go-ip-notifier - php-symfony-google-chat-notifier - php-symfony-google-mailer - php-symfony-html-sanitizer - php-symfony-http-client - methods to fetch HTTP resources synchronously or asynchronously php-symfony-http-foundation - object-oriented layer for the HTTP specification php-symfony-http-kernel - building blocks for flexible and fast HTTP-based frameworks php-symfony-infobip-mailer - php-symfony-infobip-notifier - php-symfony-intl - limited replacement layer for the PHP extension intl php-symfony-iqsms-notifier - php-symfony-isendpro-notifier - php-symfony-kaz-info-teh-notifier - php-symfony-ldap - abstraction layer for the PHP LDAP module php-symfony-light-sms-notifier - php-symfony-line-notify-notifier - php-symfony-linked-in-notifier - php-symfony-lock - create and manage locks php-symfony-loco-translation-provider - php-symfony-lokalise-translation-provider - php-symfony-mail-pace-mailer - php-symfony-mailchimp-mailer - php-symfony-mailer - help sending emails php-symfony-mailer-send-mailer - php-symfony-mailgun-mailer - php-symfony-mailjet-mailer - php-symfony-mailjet-notifier - php-symfony-mastodon-notifier - php-symfony-mattermost-notifier - php-symfony-mercure-notifier - php-symfony-message-bird-notifier - php-symfony-message-media-notifier - php-symfony-messenger - send and receive messages php-symfony-microsoft-teams-notifier - php-symfony-mime - library to manipulate MIME messages php-symfony-mobyt-notifier - php-symfony-monolog-bridge - integration for Monolog with Symfony Components php-symfony-notifier - php-symfony-novu-notifier - php-symfony-ntfy-notifier - php-symfony-octopush-notifier - php-symfony-oh-my-smtp-mailer - php-symfony-one-signal-notifier - php-symfony-options-resolver - configure objects with option arrays php-symfony-orange-sms-notifier - php-symfony-ovh-cloud-notifier - php-symfony-pager-duty-notifier - php-symfony-password-hasher - password hashing utilities - Symfony Component php-symfony-phpunit-bridge - integration for PHPUnit with Symfony Components php-symfony-phrase-translation-provider - php-symfony-plivo-notifier - php-symfony-postmark-mailer - php-symfony-process - execute commands in sub-processes php-symfony-property-access - read from and write to an object or array php-symfony-property-info - extract information about properties of PHP classes php-symfony-proxy-manager-bridge - integration for ProxyManager with Symfony Components php-symfony-psr-http-message-bridge - integration for PSR HTTP message with Symfony Components php-symfony-pushover-notifier - php-symfony-rate-limiter - rate limit input and output in applications php-symfony-redis-messenger - php-symfony-redlink-notifier - php-symfony-remote-event - php-symfony-ring-central-notifier - php-symfony-rocket-chat-notifier - php-symfony-routing - associate a request with code that generates a response php-symfony-runtime - decouple PHP applications from global state php-symfony-scaleway-mailer - php-symfony-scheduler - php-symfony-security-bundle - configurable security system for the Symfony framework php-symfony-security-core - infrastructure for authorization systems - common features php-symfony-security-csrf - infrastructure for authorization systems - CSRF protection php-symfony-security-http - infrastructure for authorization systems - HTTP integration php-symfony-semaphore - provide exclusive access to a shared resource php-symfony-sendberry-notifier - php-symfony-sendgrid-mailer - php-symfony-sendinblue-mailer - php-symfony-sendinblue-notifier - php-symfony-serializer - convert PHP objects into specific formats and vice versa php-symfony-simple-textin-notifier - php-symfony-sinch-notifier - php-symfony-slack-notifier - php-symfony-sms-biuras-notifier - php-symfony-sms-factor-notifier - php-symfony-sms77-notifier - php-symfony-smsapi-notifier - php-symfony-smsc-notifier - php-symfony-smsmode-notifier - php-symfony-spot-hit-notifier - php-symfony-stopwatch - profile PHP code php-symfony-string - object-oriented API to work with strings php-symfony-telegram-notifier - php-symfony-telnyx-notifier - php-symfony-templating - tools needed to build a template system php-symfony-termii-notifier - php-symfony-translation - tools to internationalize an application php-symfony-turbo-sms-notifier - php-symfony-twig-bridge - integration for Twig with Symfony Components php-symfony-twig-bundle - configurable integration of Twig with the Symfony framework php-symfony-twilio-notifier - php-symfony-twitter-notifier - php-symfony-uid - object-oriented API to generate and represent UIDs php-symfony-validator - tools to validate values php-symfony-var-dumper - mechanisms for walking through any arbitrary PHP variable php-symfony-var-exporter - export serializable PHP data structure to plain PHP code php-symfony-vonage-notifier - php-symfony-web-link - manage links between resources php-symfony-web-profiler-bundle - collect requests information for analysis and debugging php-symfony-webhook - php-symfony-workflow - manage a workflow or finite state machine php-symfony-yaml - convert YAML to PHP arrays and the other way around php-symfony-yunpian-notifier - php-symfony-zendesk-notifier - php-symfony-zulip-notifier - Changes: symfony (6.4.41+dfsg-0+deb13u1) trixie-security; urgency=medium . [ Fabien Potencier ] * Update VERSION for 6.4.41 . [ Nicolas Grekas ] * [HtmlSanitizer] Reject BiDi override characters and percent-encode spaces in URLs [CVE-2026-45064] * [MonologBridge] Bind server:log to localhost by default [CVE-2026-45077] * [Yaml] Bound recursion depth in the parser [CVE-2026-45133] * [TwigBridge] Fix XSS issue in CodeExtension::fileExcerpt() [CVE-2026-45072] * [Cache] Validate the prefix given to AbstractAdapter::clear() [CVE-2026-45073] * [Yaml] Bound collection-alias resolution in the parser [CVE-2026-45304] * [Yaml] Harden the Parser::cleanup() regexes against catastrophic backtracking [CVE-2026-45305] * [Runtime] Fix CVE-2024-50340 patch bypass by gating argv on $_SERVER['QUERY_STRING'] [CVE-2026-46626] * [HttpClient] Block IPv6 transition forms in NoPrivateNetworkHttpClient [CVE-2026-48736] * [HttpFoundation] Block IPv6 transition forms in IpUtils::PRIVATE_SUBNETS [CVE-2026-48736] * [HtmlSanitizer] Reject percent-encoded BiDi marks and Unicode whitespace in URLs [CVE-2026-48760] * [HtmlSanitizer] Sanitize URL attributes on , ,