-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 26 Mar 2026 07:55:35 +0100
Source: php-league-commonmark
Architecture: source
Version: 2.7.0-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org>
Changed-By: David Prévot <taffit@debian.org>
Changes:
 php-league-commonmark (2.7.0-1+deb13u1) trixie; urgency=medium
 .
   * Track debian/trixie
   * Fix DisallowedRawHtml bypass via newline/tab in tag names [CVE-2026-30838]
   * Fix DomainFilteringAdapter hostname boundary bypass [CVE-2026-33347]
   * Document CVE fixed in previous changelog entry
Checksums-Sha1:
 1533e5c315bae2f2e1d7e23f47be2a72c1d213f8 2134 php-league-commonmark_2.7.0-1+deb13u1.dsc
 171faa8de15314c4b7036af08d71bc4984ba18a9 22024 php-league-commonmark_2.7.0-1+deb13u1.debian.tar.xz
 148f5f1e6d5b2667c9568f8b95750964e1c5d18a 9117 php-league-commonmark_2.7.0-1+deb13u1_amd64.buildinfo
Checksums-Sha256:
 7bc0be0202358ccf662411313d34615afe5c4ef348dada74f11264f9cc10d482 2134 php-league-commonmark_2.7.0-1+deb13u1.dsc
 b809a97a7a4f3b08db38338b8eed09ebcf0bf9f3ac56363d6797c37ea8a4aa04 22024 php-league-commonmark_2.7.0-1+deb13u1.debian.tar.xz
 89058d9383e9156ef42135a63f3eb8b41ee1213d1d636f761bac8f62306e0593 9117 php-league-commonmark_2.7.0-1+deb13u1_amd64.buildinfo
Files:
 5a8937e13da1a14dcfff280a08139a31 2134 php optional php-league-commonmark_2.7.0-1+deb13u1.dsc
 27349d33f2863dbf9bfedac71c01eaf5 22024 php optional php-league-commonmark_2.7.0-1+deb13u1.debian.tar.xz
 4e04d8aeb48a9e1a841938faf1c2ccf1 9117 php optional php-league-commonmark_2.7.0-1+deb13u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmnQz+cSHHRhZmZpdEBk
ZWJpYW4ub3JnAAoJEAWMHPlE9r08uZ4IAJFexuv3eTJTiGi9ygYbhudroCoOCKGy
Vc+JjgfLpvX8K8ozWVB4nQUl0QDNKpWdE816TNjkbKvFjnV/Hgbvaj0y/SLE+RTI
rrlbZ7lFGCbcGTfrbjoHA3DjdJL+Yy8i0kRPrOXgUiGsythk1Pe9k1NmH9g0EF2j
ucGRIMUg19BnJ2MN6BuKOsag5APsz/+yA4DY447EGnBSmoHNdiunk5TM2uHQFvHZ
KUgV9XFOL2uEQS/5BXN0JvU40XI/DUXCO/pQC3NevdyM7avk+1vl+7sFNFJB00OY
S0k8WUT/POij6INU8SZhDYztzfU+MCbo2+6oH+YR6YUkw6Smk6Jek34=
=hKJl
-----END PGP SIGNATURE-----