-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 26 Mar 2026 08:15:50 +0100
Source: php-league-commonmark
Architecture: source
Version: 2.3.9-1+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org>
Changed-By: David Prévot <taffit@debian.org>
Changes:
 php-league-commonmark (2.3.9-1+deb12u1) bookworm; urgency=medium
 .
   * Track Bookworm branch
   * Fix XSS in AttributesExtension [CVE-2025-46734]
   * Fix DisallowedRawHtml bypass via newline/tab in tag names [CVE-2026-30838]
   * Fix DomainFilteringAdapter hostname boundary bypass [CVE-2026-33347]
Checksums-Sha1:
 ef14711032c5e9052fa76d8ca747baa468c9fbf5 2187 php-league-commonmark_2.3.9-1+deb12u1.dsc
 09370204492b4cd64504d6f4b31bbbd677689e5a 13540 php-league-commonmark_2.3.9-1+deb12u1.debian.tar.xz
 c5267591495f56550d8484f3675e67b0ce2f550a 9400 php-league-commonmark_2.3.9-1+deb12u1_amd64.buildinfo
Checksums-Sha256:
 0efa9d6a19215fba7bcafcd847a8ce74569d0b33164dec0efb7904ea936f01c8 2187 php-league-commonmark_2.3.9-1+deb12u1.dsc
 5d1c7448628df4db39154393e20dbd5faf08ddeddd3420bcaf4e11e20d8750e2 13540 php-league-commonmark_2.3.9-1+deb12u1.debian.tar.xz
 8557e34a615b1a2ace00d334420da39402330a4bea9ade6d3aa3db69b84fe73a 9400 php-league-commonmark_2.3.9-1+deb12u1_amd64.buildinfo
Files:
 4be0c854078e4f12bb2a9714aa42e424 2187 php optional php-league-commonmark_2.3.9-1+deb12u1.dsc
 af2b23bff74984d8a43ced2f41ce20d0 13540 php optional php-league-commonmark_2.3.9-1+deb12u1.debian.tar.xz
 9450149f4af225f80a45935a0d0b57f0 9400 php optional php-league-commonmark_2.3.9-1+deb12u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmnQz+YSHHRhZmZpdEBk
ZWJpYW4ub3JnAAoJEAWMHPlE9r08MKEH/13XmAFfGkB1jyLsmcmBwy94rp9gmgof
mLoJ8F4B0CLj/PYh0jXEc246C7bsWksAoZUhD93GJnGL6OAyPVNzrgP4OdHIocQu
uUGda+b6Qofart0Z4dB36VgsIyERqKZlSVS8SLn0z2m3cr4sXP/DXViKGfi4u0p+
oIMjI3kiE4YGQ1sqFDOM7HlGfLivr97Mk1WZCQgFMlYGhA4duqJXlTJAM9z5GP1L
5mOP8A9B7vw92176FzgB13+AsPsHwtWxd+X7o/7xRRHR0oYmPtWg6o3UmY/+GR8o
Q6K6el6VAo2x48cyknhg74afDTMf0MsCoEpwCR/qELeDNGJSbwI3s/k=
=SD5y
-----END PGP SIGNATURE-----