-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 26 Mar 2026 07:55:35 +0100 Source: php-league-commonmark Binary: php-league-commonmark Architecture: all Version: 2.7.0-1+deb13u1 Distribution: trixie Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) Changed-By: David Prévot Description: php-league-commonmark - Markdown parser based on the CommonMark JS reference implementati Changes: php-league-commonmark (2.7.0-1+deb13u1) trixie; urgency=medium . * Track debian/trixie * Fix DisallowedRawHtml bypass via newline/tab in tag names [CVE-2026-30838] * Fix DomainFilteringAdapter hostname boundary bypass [CVE-2026-33347] * Document CVE fixed in previous changelog entry Checksums-Sha1: 0323180f071c5e4b0880d6038681f7fe7ce16edc 9092 php-league-commonmark_2.7.0-1+deb13u1_all-buildd.buildinfo e4d8d6765255b8b4b9818a9828579a882929fa95 122716 php-league-commonmark_2.7.0-1+deb13u1_all.deb Checksums-Sha256: 20f27ae37d0470cc35f3e0cae076ff110f8a39550eb59e547bb610d3d6449189 9092 php-league-commonmark_2.7.0-1+deb13u1_all-buildd.buildinfo 46e8fbcebd33f79dd19ba2d976385581d88dbdf847f9d358be3fe9a76389f7fc 122716 php-league-commonmark_2.7.0-1+deb13u1_all.deb Files: c3aec17d87ffdc9141202461c526277a 9092 php optional php-league-commonmark_2.7.0-1+deb13u1_all-buildd.buildinfo 658f03b7863569ca9e36e32af0c74e1b 122716 php optional php-league-commonmark_2.7.0-1+deb13u1_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE5ZI1lXv5WjhHIVjsN8Ugyu9dQiQFAmnUHr4ACgkQN8Ugyu9d QiTgpA/+IpFN7KY9G9I6BUmw7dfk4qidpLnzQtO17wnfooa+bCaCui9yBz5ft4pv sj+xvc6x15N4afgEpWoTAUPLrdcH2ZSgRd9bYWm/wgZqdEYM17VhKCRJJjQqxC/S H6ZMFrytI619goKLVCfmqiF/+RmZmm2R62kyDNo5i1MNPvQYJ3a6imIkS+6STM71 A7VblgR5OulnVeOuDbJozKGZWlRkNvBtt9ajE5+pJwuxSFdPslASUoPeABYtkkRC 3Ut4Z1D/F44R4fAMeaMcvxxKr9v+T4sRnW1UwxIJMiB5780I8+lCjQaq6af90+eg fOypEVSHaqfiM1360I97+xycprcu8QAeqeJ2iMeLp94om8iY6lDmMIWJkCg9P9H1 VvV+s7E8DfxEW1zJCv6CLwzRmv9UjoHYmytboQ0TLNdVbHXH91Af20d8rrYO7nFN tTNHsPr9Whfqke7qSReTuOxQYkt4N4cL1l8x2i7ZNgvPgMJdcLuS9Vtsi2XqhA0L 1IOoB5FpgmyD7Xngox53rKjbU0uX5y04lBj240sRNQoudBsDtgfnZem382GTcUEd y9JaJLSNDsFjmp8UddOiANSfL9vShJnIJK23eHyadwTRiXuGDpjRIWmW8+uZQrjw elTpW8ZBr/bQdK1zfW/e6bHSBU8R1u2kigkwz+aKphSjPlltWgg= =yH0+ -----END PGP SIGNATURE-----