-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 14 May 2026 10:37:40 +0200
Source: composer
Architecture: source
Version: 2.8.8-1+deb13u3
Distribution: trixie
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org>
Changed-By: David Prévot <taffit@debian.org>
Changes:
 composer (2.8.8-1+deb13u3) trixie; urgency=medium
 .
   * Fix regexp to support new GitHub installation tokens format
     (GHSA-f9f8-rm49-7jv2) [CVE-2026-45793]
Checksums-Sha1:
 2c4fae813910626628410b54b51f57599cdb62a3 2254 composer_2.8.8-1+deb13u3.dsc
 6e0e7cca34a614dfa7447fdcaf4a13ad1476576d 54744 composer_2.8.8-1+deb13u3.debian.tar.xz
 82738c08ac3a675c9baefe5a215001c16d9efce6 9984 composer_2.8.8-1+deb13u3_amd64.buildinfo
Checksums-Sha256:
 87dd72d354575a43f89a9ad0824ef1c6d2786a5c031bd789db4a8905fada7e63 2254 composer_2.8.8-1+deb13u3.dsc
 7c706d6cdecbbdc71563a5fbbf24b75e075d861ab534fd9493a3de2d4dea5a71 54744 composer_2.8.8-1+deb13u3.debian.tar.xz
 38082070414fee447f9d1457b10b2aff3b20d36053ded729ec3a7849c1915e42 9984 composer_2.8.8-1+deb13u3_amd64.buildinfo
Files:
 80ca14078c35349c48daef7f76a1794e 2254 php optional composer_2.8.8-1+deb13u3.dsc
 24ec1f1624ecee740bda0a5b471b20f8 54744 php optional composer_2.8.8-1+deb13u3.debian.tar.xz
 3d1b118dcf916a4fcf4e9804efcc62a6 9984 php optional composer_2.8.8-1+deb13u3_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmoS0TMSHHRhZmZpdEBk
ZWJpYW4ub3JnAAoJEAWMHPlE9r08CUQH/RPmaHhJiJtK7RCSkp8ENyAa56KFFE2b
TQF+eaQn1F87W3YbBBgUxJO9ZLbbwU92AFwqBQlocwBw5F1wmhkAgdxcMHCRoMJa
TE8RPICjlgruoJfD30V/966LAn3e8LhcZxV+YopaAGO2rExPrd5wq0PtOSZ9Evo7
RiSrqlArwXQlYlK6+B7zk4MSE5NvLJQzZt4TC/WnKEJ0c8xhFT02ZVN2dpbVOKpe
q61blvA5AFZ/KWina2/gqV45pnhoajhzwEstWEfYUH6mACok9CdZIZq7InR+QfZH
niKQKjriYK/mGjCuI4Ec9Lvh02WatE61sbifzIAuJePl0DtMB14nsDM=
=+OO5
-----END PGP SIGNATURE-----