From: ftpmaster@ftp-master.debian.org   
      
   -----BEGIN PGP SIGNED MESSAGE-----   
   Hash: SHA512   
      
   Format: 1.8   
   Date: Tue, 03 Feb 2026 07:59:05 -0500   
   Source: shaarli   
   Architecture: source   
   Version: 0.14.0+dfsg-2+deb13u1   
   Distribution: trixie-security   
   Urgency: medium   
   Maintainer: Debian PHP PEAR Maintainers    
   Changed-By: James Valleroy    
   Closes: 1126554   
   Changes:   
    shaarli (0.14.0+dfsg-2+deb13u1) trixie-security; urgency=medium   
    .   
      * Add patch to fix stored XSS via tag suggestions (Closes: #1126554,   
        CVE-2026-24476)   
   Checksums-Sha1:   
    d53ab66cde3e2fa892a2cd60c13499cfd7ac1be6 2688 shaarli_0.14.0+df   
   g-2+deb13u1.dsc   
    8457d929c57ad92ab9e3d4e1708eb4c8099f00dd 886436 shaarli_0.14.0+   
   fsg.orig.tar.xz   
    7311eba91f24a3448f57478680a998dd909a2f72 32652 shaarli_0.14.0+d   
   sg-2+deb13u1.debian.tar.xz   
    dc5cf521ca27e8dc97c5c4934ca537abb2962631 24110 shaarli_0.14.0+d   
   sg-2+deb13u1_amd64.buildinfo   
   Checksums-Sha256:   
    edc6ec2e288baac1359c336d60a70c0b3a0d8757b4f0adabc383ed83da374aac 2688   
   shaarli_0.14.0+dfsg-2+deb13u1.dsc   
    d8daf5c14cd2edda3e45b0331f7a9043a158f6d87deb00ff674532327c0aa64f 886436   
   shaarli_0.14.0+dfsg.orig.tar.xz   
    f09b51f6a6c7fa901bbc0dd0ef3a1c0416428f03087050b4e1445d7d250196ac 32652   
   shaarli_0.14.0+dfsg-2+deb13u1.debian.tar.xz   
    080894ffc445fd13ff8c8d9201ec5f6d514b5073dd4cd3f7307e3ed9dd728c43 24110   
   shaarli_0.14.0+dfsg-2+deb13u1_amd64.buildinfo   
   Files:   
    79bb0e4c6217df871ac3b3a7b91b35c6 2688 web optional shaarli_0.14   
   0+dfsg-2+deb13u1.dsc   
    a68dc011ad48734e60b303ec921ed9bc 886436 web optional shaarli_0.   
   4.0+dfsg.orig.tar.xz   
    5f25d905b4e15ee7751d60be7dc15865 32652 web optional shaarli_0.1   
   .0+dfsg-2+deb13u1.debian.tar.xz   
    547fbcf92aeabaa6300a8ebe94ac81e5 24110 web optional shaarli_0.1   
   .0+dfsg-2+deb13u1_amd64.buildinfo   
      
   -----BEGIN PGP SIGNATURE-----   
      
   iQJKBAEBCgA0FiEEfWrbdQ+RCFWJSEvmd8DHXntlCAgFAmmD6JQWHGp2YWxsZXJv   
   eUBtYWlsYm94Lm9yZwAKCRB3wMdee2UICOrOD/9Rbrz8sFJ+4O4S+hia/M94RvBU   
   FIYMHEs9bbBrSWETKEEtDBUbhwTB9UwC1WvLMrKXHmR0rEKFQ/mXzI87bkVMfpjL   
   NlIdVZNMUP/nQRbjMwLJnh03yI0SDrOO6DvV//oHMaBNh8/HxEZVfUIBTqax1Sto   
   m+Xp4uweX6qjcpjaf6BtiI8eDcRnwaj3JQ+MYJHTnJeXhIEpRMPq4rOAyndq4gbh   
   +XYFwwVwtMXvnlFvz/L62SJVP8Ys2pCOFq8tvwfAHKEnTWLS30qAvYVNYvHkuxzQ   
   r03m5wu2kaONi6sxwEBPoJKzPC13ppNj/hWVqzo4zo2FjLuuayM/d5NBxb5YgD7t   
   TazsDf+rXET0ELWZ3cPWcIpKoCq2G/7AbF6JDSutWF77DZcBEvEjsJXkkxbg7Tpx   
   fCZtQYe0fOGu1CJRsTdvdh5EGwPhxUDKZB0aCOVyuLX8P39ZFmITlYAirbC6Ibvj   
   usK+Ed/9ClnVwJMRDlrM9lRYcIZ1fxYghyw/pjY/vn8iZfTiHmiViKgnaiNdmYaS   
   kmQjc+Z2NgRyYyTulQ+STAarMuW/LkkkgjZOsbD//f6whPgNGcVWhx7AMlKbww7q   
   KPFgaH/DhXgqiHvOKRzK0G3+qzwS5Cu5/EdhRj4VeRQE9NqkiV9QNbA+NOWLiP4u   
   lgbcYFS3vkPF/8OGEw==   
   =ZoWo   
   -----END PGP SIGNATURE-----   
      
      
   --==============265916075628337611=Content-Type: application/pgp-signature   
      
   -----BEGIN PGP SIGNATURE-----   
      
   iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaZeXGgAKCRCb9qggYcy5   
   IWjgAPsF13vWwplhk2kTfKKVVo5WxV/t708H4zm/4dPSCmCuaAD+K3i57ua3L3g1   
   npxr5T4YnSu6Ezdj8mhGCF1zLjiybQA=3uaL   
   -----END PGP SIGNATURE-----   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)