-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 23 May 2026 16:49:01 +0200 Source: spip Binary: spip Architecture: all Version: 4.4.15+dfsg-0+deb13u1 Distribution: trixie-security Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) Changed-By: David Prévot Description: spip - website engine for publishing Changes: spip (4.4.15+dfsg-0+deb13u1) trixie-security; urgency=medium . [ David Prévot ] * Document CVE in previouss changelog entry . [ Matthieu Marcillaud ] * build: Ajout du polyfill PHP 8.5 * build: update dependencies * build: Version 4.4.15 + Fix remote code execution vulnerability in the private space [CVE-2026-8429] + Fix remote code execution vulnerability in the public space that is limited to certain nginx configurations [CVE-2026-8430] Checksums-Sha1: 9fa2b5d852edd11af6dd71f38cac512afbb68315 8865 spip_4.4.15+dfsg-0+deb13u1_all-buildd.buildinfo 3fe3ebba1301613fdd0167296d0e27a7625c56d9 4499940 spip_4.4.15+dfsg-0+deb13u1_all.deb Checksums-Sha256: a90fc803d4b445f1044757a41697cc92002e6aaa0fc44a3924d9831c235bb4de 8865 spip_4.4.15+dfsg-0+deb13u1_all-buildd.buildinfo 9a31606235c586d480bfc945da806097739f63edaa83aca019bccc10c9aa435c 4499940 spip_4.4.15+dfsg-0+deb13u1_all.deb Files: ee05d99daa1a2745e2ffcf55a9677df3 8865 web optional spip_4.4.15+dfsg-0+deb13u1_all-buildd.buildinfo 12f2f4cb71ac91c4f1e7e65140dd510d 4499940 web optional spip_4.4.15+dfsg-0+deb13u1_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE5ZI1lXv5WjhHIVjsN8Ugyu9dQiQFAmoTDXkACgkQN8Ugyu9d QiQbtw//ZuyjQlrK7Lmrojp4wIeN8XTZmPFQb9deXrsQQkQ7/LE0Jd9sTna1ef4x 7vm+QtHWx5SU3GfkQ2bbkhrXpp6H74hpbJR1/qtXXlVu3TXks3+aCfGQJhLfdCLd 62Ih+gaZm+3Eb60Izvv7kncbHgdrXQbHqoESUrutQHTnE3DWTjh8jJ7afWOsi5hE K/YYryNieZ01ni+Y2j9MmmnQdb5Y4yERwzj6pFQeC27rwiJuM3V5kXgbyJrnKmGo qWKkinPti93wRTFnznR3uBNT+YZk9Z1kBFcUiKUGiB4PwXPLyzmzgg5nGgzcQbtx o5HYQ2aDQNSX+SylK2FrS2vPSHiPVscoNm0GGfGj7OsQQIfzKBU8zwGpffUm1CcC Sxthss2LUMzd93TYYmkrt/5lcp8LKtppYWUd3qigBH4NWS6SG7XCLbiO69TcDXRe GMadThBozwwCt9DYRzp7BnmjDxFRN7QywpZ6n7TAkZ1f8no8qCQxoOoD9V4ezTEC e1rKIo4auheOIfhfQWJ7tmnOi3Ty09Mc0ShvQpTNMV7TIycxziBqS99hP5vaeWT7 ufpId23BImANHKawevrtgo2fAi2Bpz/cnYRjUaUfxWHB6nLyW4lKN9nMATHV2UAp hbeNEl54xXZ5ozO0k/3U3frK9vW4PHHSjo36NiEqhsq9zUFUC3s= =B/xY -----END PGP SIGNATURE-----