From: ftpmaster@ftp-master.debian.org   
      
   -----BEGIN PGP SIGNED MESSAGE-----   
   Hash: SHA512   
      
   Format: 1.8   
   Date: Tue, 30 Dec 2025 16:35:23 +0100   
   Source: composer   
   Architecture: source   
   Version: 2.8.8-1+deb13u1   
   Distribution: trixie   
   Urgency: medium   
   Maintainer: Debian PHP PEAR Maintainers    
   Changed-By: David Prévot    
   Changes:   
    composer (2.8.8-1+deb13u1) trixie; urgency=medium   
    .   
      * Backport fix from composer 2.9.3:   
        Fixed ANSI sequence injection [CVE-2025-67746]   
      * Track debian/trixie   
   Checksums-Sha1:   
    2ef2fa1892f55dbc128d2debd702fc5cd94817ae 2254 composer_2.8.8-1+deb13u1.dsc   
    21587db869a521cbbac51f3a236eaee434e19358 50240 composer_2.8.8-1   
   deb13u1.debian.tar.xz   
    8cdef62f310469f2348e618295097e1050efeaad 9866 composer_2.8.8-1+   
   eb13u1_amd64.buildinfo   
   Checksums-Sha256:   
    35bdd03ddefd156e91ad2234a27e62d89cca0b1d08dd1d531e313f2eeea7edbb 2254   
   composer_2.8.8-1+deb13u1.dsc   
    4ae19fab43e23d7383626faf0c9f4c06d66d0a4b5090c7cec665f3065349cc24 50240   
   composer_2.8.8-1+deb13u1.debian.tar.xz   
    199087e03a935844e270c2afb4e302fb1ad392a2a76227cd3b02da39f3596e7c 9866   
   composer_2.8.8-1+deb13u1_amd64.buildinfo   
   Files:   
    18a954fb09b2bcbca3dbfb48197880ef 2254 php optional composer_2.8   
   8-1+deb13u1.dsc   
    13ae61c827a81f393b006583c3adc0a8 50240 php optional composer_2.   
   .8-1+deb13u1.debian.tar.xz   
    053294fa290f1fe58e862a3950ab09d7 9866 php optional composer_2.8   
   8-1+deb13u1_amd64.buildinfo   
      
   -----BEGIN PGP SIGNATURE-----   
      
   iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmlVBIkSHHRhZmZpdEBk   
   ZWJpYW4ub3JnAAoJEAWMHPlE9r08pqwIAKSKx45S4bYy4f0fymM9NWS3JIxl23D/   
   C+ZIAwNt0VNHBEbcD13TmggHrngoaKaPxxzdPGSMyzKph3CD8DYam6IJQ2vsrFd7   
   OQ0LHjchCQYITL6c2dyQmZvL/UQ6I2DYaHZBOZBNgx/6HEuKrYRCi8e5n5L3bnsf   
   iqUSF8/kppEu07f7kczFjdB9xu2xKYxShSCymE+f3USqQVICh+fFc1PP/EGPj80Q   
   fwdpoutwNwY9uUMLebK7p3aX1Uxpk1yMuhmrW7quSfBAzGERECkXkpKlz0G8QGt9   
   Q7vQhBW9HEdX9vbdGYOgEDMp/ljJCb0YI22YDXeAIURIzqyK2uMU6dM=   
   =ontx   
   -----END PGP SIGNATURE-----   
      
      
   --==============F15973493580124724=Content-Type: application/pgp-signature   
      
   -----BEGIN PGP SIGNATURE-----   
      
   iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaVbu7AAKCRCb9qggYcy5   
   IT6LAP9ON1KK5lixRgdtUE0vx/Kr8jYWa6ZevSLD6jPCAezMhAEA7Iq5aW/z+Uul   
   kiCDVvu3LecmjMelojq/CV34OyaxYAc=iRLo   
   -----END PGP SIGNATURE-----   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)