-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 28 Oct 2026 20:28:35 +0100
Source: symfony
Architecture: source
Version: 6.4.49+dfsg-0+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org>
Changed-By: David Prévot <taffit@debian.org>
Changes:
 symfony (6.4.49+dfsg-0+deb13u1) trixie-security; urgency=medium
 .
   [ Fabien Potencier ]
   * Update VERSION for 6.4.49
 .
   [ Alexandre Daubois ]
   * [Mime] Reject parameter names containing non-token characters
     [CVE-2026-45070]
 .
   [ Nicolas Grekas ]
   * [Yaml] Bound recursion depth in the inline lexer [CVE-2026-109413]
   * [HttpFoundation] Remove the ambiguity that makes HeaderUtils::split()
     backtrack [CVE-2026-108082]
   * [HttpFoundation] Fix HeaderUtils::split() when a separator is a whitespace
     character [CVE-2026-108082]
   * [ExpressionLanguage] Bound the depth of the parsed node tree
     [CVE-2026-109449]
   * [ExpressionLanguage] Bound the nesting level of parsed expressions
     [CVE-2026-109449]
 .
   [ lazerg ]
   * [ExpressionLanguage] Fix nesting level of chained ternaries
     [CVE-2026-109449]
 .
   [ David Prévot ]
   * Refresh patches
   * Additional test patches
   * Update checksum
   * Exclude another file for phpab
Checksums-Sha1:
 7491039d1a499efc719680016f9cb17a0f3bfddb 16771 symfony_6.4.49+dfsg-0+deb13u1.dsc
 1b8a3598706620c518ed4fd01aee9a71a929729f 9676888 symfony_6.4.49+dfsg.orig.tar.xz
 09119858ea8983d1eb1c8a912d13aa84891ac8c7 84864 symfony_6.4.49+dfsg-0+deb13u1.debian.tar.xz
 464a0c2390560b8f0f6d6050039f35afd5e163b5 71986 symfony_6.4.49+dfsg-0+deb13u1_amd64.buildinfo
Checksums-Sha256:
 9577ebd2a1ab84aced6d93cb54fbfb9489d1bee74d12e148589f36b0626f79ae 16771 symfony_6.4.49+dfsg-0+deb13u1.dsc
 7eda8c298a0eeb31abe9cc5911b412cb39a162b6d6389cafc4bca0b10340d18c 9676888 symfony_6.4.49+dfsg.orig.tar.xz
 504bf2281fc51c58be8775d27f1a686b321ab7e1f8cb2da8e8996e4de685abc1 84864 symfony_6.4.49+dfsg-0+deb13u1.debian.tar.xz
 7187de9fcd96d1d721a19aca09b8ca63fed183e458c2ed6235903aaba2b69dae 71986 symfony_6.4.49+dfsg-0+deb13u1_amd64.buildinfo
Files:
 ca83b42438a234b9510e899bcc9ef1e1 16771 php optional symfony_6.4.49+dfsg-0+deb13u1.dsc
 da5ef807db5f7dcd8b8ac5197ec477b0 9676888 php optional symfony_6.4.49+dfsg.orig.tar.xz
 ee0c9aa16b5ae4a5531576dd057b0760 84864 php optional symfony_6.4.49+dfsg-0+deb13u1.debian.tar.xz
 7222cbe8cb0b59bc78a774684442521c 71986 php optional symfony_6.4.49+dfsg-0+deb13u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmrotCcSHHRhZmZpdEBk
ZWJpYW4ub3JnAAoJEAWMHPlE9r08LVQH/ji35ArPIYeXDC2gKE287hCrQ7EpthrZ
eYdjvbpY0+bbBYpMorTLPizw2NLVLn5LYOtYAxdV9gxFMcPI53ofpKH8PChUY9mn
0Dv3TmWb9+ZWcGHfuqQnJKO2f8CSKlQ7zaKjQAMNClvm0M5oC+DN01SRKb5ws0ds
uxP1VKPRZyaK5NLvY6xtK37nZucXHAINok/L4ZsTwfD7zEpWlw/M2EftvwGkR065
+DMDTxK7TGE6s25+n/jtL+pbkIXNumFlM90FIxcoZ+AAWFYUQi3QJJlHk7vT/Ycy
Nz2CtI5G88DMzgjRYsGxmc+98qRfAODVlWNGwvtEgTgxd8mgj/F6aS8=
=rQDV
-----END PGP SIGNATURE-----