-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 23 May 2026 16:49:01 +0200
Source: spip
Architecture: source
Version: 4.4.15+dfsg-0+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: David Prévot <taffit@debian.org>
Changed-By: David Prévot <taffit@debian.org>
Changes:
 spip (4.4.15+dfsg-0+deb13u1) trixie-security; urgency=medium
 .
   [ David Prévot ]
   * Document CVE in previouss changelog entry
 .
   [ Matthieu Marcillaud ]
   * build: Ajout du polyfill PHP 8.5
   * build: update dependencies
   * build: Version 4.4.15
     + Fix remote code execution vulnerability in the private space
       [CVE-2026-8429]
     + Fix remote code execution vulnerability in the public space that is
       limited to certain nginx configurations [CVE-2026-8430]
Checksums-Sha1:
 1d8f949eedcc71d2c7e75e1e521c9cea33bcd757 1717 spip_4.4.15+dfsg-0+deb13u1.dsc
 7d1720cce2005fcf6276f2f1780ea8df855e3747 5539832 spip_4.4.15+dfsg.orig.tar.xz
 827ca6fe025a0bdd73aa26daeb88b3477142640f 88172 spip_4.4.15+dfsg-0+deb13u1.debian.tar.xz
 c63ca8c2c1435778e844f99013f040af1895e1d3 8801 spip_4.4.15+dfsg-0+deb13u1_amd64.buildinfo
Checksums-Sha256:
 b3a397972ce3b6e80ddc1c3d1f689949de0ae784d4e99b51cee4c51258bb94f1 1717 spip_4.4.15+dfsg-0+deb13u1.dsc
 fd4d63942134f81f895ffde83d3f86b89fda45309af41eb78c6b4713f7291938 5539832 spip_4.4.15+dfsg.orig.tar.xz
 4ce3035d8974827223798e1839f7cfd84d6c50f5317db3e3e5bb49443f045036 88172 spip_4.4.15+dfsg-0+deb13u1.debian.tar.xz
 c1d5772296687ccc01a9322427aeb3f822edb74b1a1e2866f613b25d037355ad 8801 spip_4.4.15+dfsg-0+deb13u1_amd64.buildinfo
Files:
 08355349ed6e757368d3f240a119481a 1717 web optional spip_4.4.15+dfsg-0+deb13u1.dsc
 9978d50ecf649de01a87cb69baf284a7 5539832 web optional spip_4.4.15+dfsg.orig.tar.xz
 63428639e2727dba14c41615cb26582a 88172 web optional spip_4.4.15+dfsg-0+deb13u1.debian.tar.xz
 4d4d1cc48d7a1c44e30591d0d14da899 8801 web optional spip_4.4.15+dfsg-0+deb13u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmoTBloSHHRhZmZpdEBk
ZWJpYW4ub3JnAAoJEAWMHPlE9r088YcH/itcitGy1MMoi+jntYcUjKqj4qfUZvwN
1WjTPsOoseGEWsxE2gdlgLp7uMS5rjtyaF7ZnoyhK6L/TBWOPUj488d7tDWzmeek
y9qWY+PmTo7HtUvOuVJ63w7VwFQNEodORxpc962ye7cRNibOSOchAnogbz5GCYwQ
NlhXPczzzWRqgVd2QbwK1KsgRYbunxCCy+FjIUDwnx6WJ/StoNGOmtRdvzdF80Jx
8O8necWQ4Um9WoXeJBrotwF3is4YmHTKlQStdc41eyzgX1sCYG5uDhy9jAtof29C
mznMOfC8nqMiZzMrFp7a1ltst+8NS5OVPtIMDm1zgXlsbjgHVtjFpaQ=
=igXk
-----END PGP SIGNATURE-----