-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 14 May 2026 11:28:34 +0200
Source: composer
Architecture: source
Version: 2.5.5-1+deb12u5
Distribution: bookworm
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org>
Changed-By: David Prévot <taffit@debian.org>
Changes:
 composer (2.5.5-1+deb12u5) bookworm; urgency=medium
 .
   * Fix regexp to support new GitHub installation tokens format
     (GHSA-f9f8-rm49-7jv2) [CVE-2026-45793]
Checksums-Sha1:
 e171f24366e22e561ea152598320011e8f57c2cd 2391 composer_2.5.5-1+deb12u5.dsc
 6cd99baf0379914cd68ed97a51316e4596d251dd 26004 composer_2.5.5-1+deb12u5.debian.tar.xz
 6f6b734628eea2e9551f8996287a7e0c368b9e59 10275 composer_2.5.5-1+deb12u5_amd64.buildinfo
Checksums-Sha256:
 639d96d7311966400f271e59063a23c147fb99b11b970d29852ab4f33ab1c7fa 2391 composer_2.5.5-1+deb12u5.dsc
 3e34c20eef3bd19d8acbe8c8d1f0f01bf5f2d38bc0c87b3ef0eaf48f5fa4d91c 26004 composer_2.5.5-1+deb12u5.debian.tar.xz
 88c489b3daf487604035b6d2d4d4a46926435550e1e76648668f376fe3fba846 10275 composer_2.5.5-1+deb12u5_amd64.buildinfo
Files:
 0729e1884295e5ad3194ef88fd89231b 2391 php optional composer_2.5.5-1+deb12u5.dsc
 fdd275c8f8abf7cf833d94dbdb9323a8 26004 php optional composer_2.5.5-1+deb12u5.debian.tar.xz
 6b0c98cdeea3e004452056abe84e81b4 10275 php optional composer_2.5.5-1+deb12u5_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmoS0TISHHRhZmZpdEBk
ZWJpYW4ub3JnAAoJEAWMHPlE9r08JzoH+QEMs14GeomqxxXjW9HRPFaykoJcfgKl
F6m33lygjPv3kfcrFjqy3aO4v1jCSdqJTqTc0KTkWrIcC9E9NK309jBDYOVtZLui
iEmZqr9cZyTL/1XAWyKr5yDMT3fYAVvNUMGr53/thuPkol5graibtAMtGq0TTz4A
yfNiqqecfEtx6Iy2UfLWKVHPFC83txhvcrL0mJOfLbHkSNz+fN87qmI2XkuYuvfQ
pH0AI8cvDpRxafFMmE/XoICdKbuQCS63z9KBhZbhuASZ6yfGfGEoggbp5FnxSlMF
9wc43yY0b3GmvTRbGbGwrbakVp6al7Bm7AWt7VsUOGEq/DC6GsisSNo=
=C1q7
-----END PGP SIGNATURE-----