Accepted php-league-commonmark 2.10.0-1 (source) into unstable

Debian FTP Masters <[email protected]>
Newsgroups gmane.linux.debian.devel.changes.unstable
Message-ID <[email protected]>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 13 Aug 2026 08:50:32 +0200
Source: php-league-commonmark
Architecture: source
Version: 2.10.0-1
Distribution: unstable
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers <[email protected]>
Changed-By: David Prévot <[email protected]>
Changes:
 php-league-commonmark (2.10.0-1) unstable; urgency=medium
 .
   [ Colin O'Dell ]
   * Fix XSS filter bypass via form feed in attribute names (GHSA-f8fg-pg57-v4j8)
   * Prevent quadratic backtracking in the fenced code start pattern
     (GHSA-j8pm-gj4c-rq4x)
   * Apply the 999-character link label limit when resolving references
     (GHSA-j8pm-gj4c-rq4x)
   * Bound the openersBottom cache key space in delimiter processors
     (GHSA-j8pm-gj4c-rq4x)
   * Append in place when merging adjacent text nodes (GHSA-jjv6-8j6v-6j52)
   * Fix quadratic attribute block and class list resolution
     (GHSA-jjv6-8j6v-6j52)
   * Optimize Cursor character scanning (#1139)
   * Stop cloning a node from mutating the node it was cloned from (#1140)
   * Optimize inline link destination parsing (#1141)
   * Fix 2.9.0 regression: restore Cursor::match() remainder semantics (#1146)
   * Publish Cursor::matchInPlace() and deprecate the anchored RegexHelper
     constants (#1147)
   * Accumulate attributes without re-merging the whole set each time
     (GHSA-8rr7-cvq3-gmfh)
 .
   [ David Prévot ]
   * Document CVE in previous changelog entry
   * Document lintian-overrides
   * Use debhelper-compat = 14
Checksums-Sha1:
 140aa97737950452719dbf8fa5f331fec3ff4d78 2147 php-league-commonmark_2.10.0-1.dsc
 5c4109958081a411237d966d0c704d620d59237c 825312 php-league-commonmark_2.10.0.orig.tar.xz
 a764969bd1157c637d2cc15ca791f1eae64b85bb 12756 php-league-commonmark_2.10.0-1.debian.tar.xz
 afd16de7fa682c64f63ce5df26b44ef843836be0 8555 php-league-commonmark_2.10.0-1_amd64.buildinfo
Checksums-Sha256:
 d251883ab6f92effc068352575837fd88d9d1fa95ba0d589f5b114a72a6a1797 2147 php-league-commonmark_2.10.0-1.dsc
 67c974d9240872bbeb6a28214e5b2831eef450edf7b8be44937c37f23c2998fe 825312 php-league-commonmark_2.10.0.orig.tar.xz
 76ba1e2bf97398b1fba94ab28f9411d11720d5c5ad577fa0dc10ea7afb6565ea 12756 php-league-commonmark_2.10.0-1.debian.tar.xz
 0b3ee7caec21f3931a37901c4e5a8188b8916c670e366b39550e0e2023e67fd0 8555 php-league-commonmark_2.10.0-1_amd64.buildinfo
Files:
 0ed9fd66277f2287ae61c56f99960ec2 2147 php optional php-league-commonmark_2.10.0-1.dsc
 745cf00b0443bf21b4fa07368077d13f 825312 php optional php-league-commonmark_2.10.0.orig.tar.xz
 7e5fcd61bc2b3a8d02260f30bd6fd95a 12756 php optional php-league-commonmark_2.10.0-1.debian.tar.xz
 900536bc20409457f3e070031282d1db 8555 php optional php-league-commonmark_2.10.0-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmp9bHISHHRhZmZpdEBk
ZWJpYW4ub3JnAAoJEAWMHPlE9r08QAIH/1Kgy/CTVagBwafSqUgdGecCPzaKK6Pm
9nRTC0EpyZfcwOaOMggG0g3/uq7Zjg51+5YenMgOX7xD7XfNnhr4lcLCseLy0n8c
jVfEBFgsOxixarx3tkNxUNbAm3Rwbrpyv9hjxzkmNwQC8JTEKH8yy95DQCdRkbQs
n+On8qsyxP/WAQZ5g7IUaC5EXX1L1tt05sGz5zAxgrnY0MFfJoejRVwYcKC67v7U
rxeclrwfJGCIJ1g6Tvrzsj6hvyAalkTiFzeqXyIl1hUHLSnVXW04njvHMQo7WHWE
+Mb99xGhcm4a1Wh72UBbVZYb8cZPK/v4rLxjPkhTsJZTZibyue1llD0=
=tUXN
-----END PGP SIGNATURE-----
signature.asc (application/pgp-signature, 228 B)
-----BEGIN PGP SIGNATURE-----

iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCan1v8AAKCRCb9qggYcy5
IREgAQCRzXq6h6IRtoCtAa12Hm83mEtS5Xln0CcG2cs6NdWOIQD/UjKc4QLxRyjN
fhReHd4UixWOnHlGGHTcSU99InBu/w4=
=F/c8
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.