-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 14 May 2026 11:28:34 +0200
Source: composer
Binary: composer
Architecture: all
Version: 2.5.5-1+deb12u5
Distribution: bookworm
Urgency: medium
Maintainer: all Build Daemon (x86-csail-02) <buildd_all-x86-csail-02@buildd.debian.org>
Changed-By: David Prévot <taffit@debian.org>
Description:
 composer   - dependency manager for PHP
Changes:
 composer (2.5.5-1+deb12u5) bookworm; urgency=medium
 .
   * Fix regexp to support new GitHub installation tokens format
     (GHSA-f9f8-rm49-7jv2) [CVE-2026-45793]
Checksums-Sha1:
 dee7521e26146b80626b5f9f366d0332a26cc6e5 10188 composer_2.5.5-1+deb12u5_all-buildd.buildinfo
 53025aea8af36b397399fdfe270f2fe9e5fa1365 493124 composer_2.5.5-1+deb12u5_all.deb
Checksums-Sha256:
 914fe99ff37194af444ccc1f284c770268a274243bfe3ea590492e57fe6fbfef 10188 composer_2.5.5-1+deb12u5_all-buildd.buildinfo
 02540f1cb8a6ab8e829e5a56d2920497d98d9d482217854b84e01fdfb5e08b9f 493124 composer_2.5.5-1+deb12u5_all.deb
Files:
 d16f464d8658e3bade2f1d20496207dc 10188 php optional composer_2.5.5-1+deb12u5_all-buildd.buildinfo
 853651307e1a070cd4c2d46dbfb6501f 493124 php optional composer_2.5.5-1+deb12u5_all.deb

-----BEGIN PGP SIGNATURE-----
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=DTlw
-----END PGP SIGNATURE-----