Accepted twig 2.6.2-2+deb10u1 (source all) into oldstable
- To: dispatch@tracker.debian.org, debian-lts-changes@lists.debian.org
- Subject: Accepted twig 2.6.2-2+deb10u1 (source all) into oldstable
- From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
- Date: Tue, 11 Oct 2022 15:20:23 +0000
- Debian: DAK
- Debian-architecture: source all
- Debian-archive-action: accept
- Debian-changes: twig_2.6.2-2+deb10u1_amd64.changes
- Debian-source: twig
- Debian-suite: oldstable
- Debian-version: 2.6.2-2+deb10u1
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.seger; h=Date:Message-Id: Content-Transfer-Encoding:Content-Type:Subject:MIME-Version:To:Reply-To:From: Cc:Content-ID:Content-Description:In-Reply-To:References; bh=ITJ9RxawwObl7SG/l7+ui4rsqcrHpMnQpZVtEgdRpSY=; b=kouI9fgEThF3DxKK405K2LcPzT AA+Idnn0Ygdx5MH+NoCVrHXHEubAch6yfUojN8UvwI07nmW0tEwF3HAkpZANJ8EnQZKbPsZWv5P78 AiIJA22ciyTXbcyy5YNjPYQRqw7U7c6VF+4j5mPQTxQ2qlSr1LnoW6zvctQcZ0x9mge4tcGG0rLWh yjofAdIGNEHGucThp2YDSQictR8EdM1L1Ih375QVz7wSAET9zFN2N1yTMxo5rJNC0vW+Tt3DLKbW0 GKpLeN0AlJ1euJTMjNmRZFzyNL9bHgxg4Qew04TLR1CRtdHPKonu7H6drSIKeZMtd77VvLEEsfekn nnfSskgw==;
- Mail-followup-to: debian-lts@lists.debian.org
- Message-id: <E1oiH3P-00ACKS-Te@seger.debian.org>
- Reply-to: debian-lts@lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 11 Oct 2022 08:03:36 -0700
Source: twig
Binary: php-twig php-twig-doc
Architecture: source all
Version: 2.6.2-2+deb10u1
Distribution: buster-security
Urgency: high
Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org>
Changed-By: Chris Lamb <lamby@debian.org>
Description:
php-twig - Flexible, fast, and secure template engine for PHP
php-twig-doc - Twig template engine documentation
Closes: 1020991
Changes:
twig (2.6.2-2+deb10u1) buster-security; urgency=high
.
* Non-maintainer upload by the LTS security team.
* CVE-2022-39261: Prevent an arbitrary file read vulnerability that was
caused by insufficient validation of template names in 'source' and
'include' statements. (Closes: #1020991)
* Add debian/.gitlab-ci.yml
Checksums-Sha1:
96d3cc5783253f1001edaccb58b4167d75bc7ef1 2223 twig_2.6.2-2+deb10u1.dsc
c1e2aafac4f22bd547e443eb781d4dda0d8421f9 230864 twig_2.6.2.orig.tar.gz
73fe9da1d513e1f558d2c4f569110297d50bfb72 9920 twig_2.6.2-2+deb10u1.debian.tar.xz
605f6e476ca3f61e614a14c1d00d882324c6208d 141516 php-twig-doc_2.6.2-2+deb10u1_all.deb
d515cbb81d2b512b8272e3a1e344041ef4d0de92 101632 php-twig_2.6.2-2+deb10u1_all.deb
e393b5a314a2a8a9a6641c4279c9f9c06b524092 9259 twig_2.6.2-2+deb10u1_amd64.buildinfo
Checksums-Sha256:
d8764543e98742e9bb7f4e39cdf3fc1e0b7ff0a301d4942d2ef1ffc807fa531c 2223 twig_2.6.2-2+deb10u1.dsc
afb6eb4d100e26bb32db0f788adffb4f563318199a0d180dbdf90ae7791134ae 230864 twig_2.6.2.orig.tar.gz
0313a1677ec05909e86e0913405c4ab392a166af5394405d067f84d6c86fdee1 9920 twig_2.6.2-2+deb10u1.debian.tar.xz
243b5351ff3635b3b740d1873d4273fa6a7462a3db4d61968f1968e3f6380517 141516 php-twig-doc_2.6.2-2+deb10u1_all.deb
94bc5c0f38e82f20aabf0a99e78ab0297d7cb99fcfbb24d57abc99b97924d550 101632 php-twig_2.6.2-2+deb10u1_all.deb
0c47b2eb5214e4cf5d531cdb0f2ee2a7803549d939032209ec2707715ba42602 9259 twig_2.6.2-2+deb10u1_amd64.buildinfo
Files:
600e51d86fcf978cc36a245fdd688e01 2223 php optional twig_2.6.2-2+deb10u1.dsc
1e456af78f787053a108bdc237c912ec 230864 php optional twig_2.6.2.orig.tar.gz
4f142c8c86155937ae117de626576ae3 9920 php optional twig_2.6.2-2+deb10u1.debian.tar.xz
3f593106762e223c229ebb3486dc0e21 141516 doc optional php-twig-doc_2.6.2-2+deb10u1_all.deb
4171391e2b04beca494d56a125148955 101632 php optional php-twig_2.6.2-2+deb10u1_all.deb
ce49ae3d940b87257fa4bd147e897d21 9259 php optional twig_2.6.2-2+deb10u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=AaPh
-----END PGP SIGNATURE-----