-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 03 Feb 2026 07:59:05 -0500
Source: shaarli
Architecture: source
Version: 0.14.0+dfsg-2+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org>
Changed-By: James Valleroy <jvalleroy@mailbox.org>
Closes: 1126554
Changes:
 shaarli (0.14.0+dfsg-2+deb13u1) trixie-security; urgency=medium
 .
   * Add patch to fix stored XSS via tag suggestions (Closes: #1126554,
     CVE-2026-24476)
Checksums-Sha1:
 d53ab66cde3e2fa892a2cd60c13499cfd7ac1be6 2688 shaarli_0.14.0+dfsg-2+deb13u1.dsc
 8457d929c57ad92ab9e3d4e1708eb4c8099f00dd 886436 shaarli_0.14.0+dfsg.orig.tar.xz
 7311eba91f24a3448f57478680a998dd909a2f72 32652 shaarli_0.14.0+dfsg-2+deb13u1.debian.tar.xz
 dc5cf521ca27e8dc97c5c4934ca537abb2962631 24110 shaarli_0.14.0+dfsg-2+deb13u1_amd64.buildinfo
Checksums-Sha256:
 edc6ec2e288baac1359c336d60a70c0b3a0d8757b4f0adabc383ed83da374aac 2688 shaarli_0.14.0+dfsg-2+deb13u1.dsc
 d8daf5c14cd2edda3e45b0331f7a9043a158f6d87deb00ff674532327c0aa64f 886436 shaarli_0.14.0+dfsg.orig.tar.xz
 f09b51f6a6c7fa901bbc0dd0ef3a1c0416428f03087050b4e1445d7d250196ac 32652 shaarli_0.14.0+dfsg-2+deb13u1.debian.tar.xz
 080894ffc445fd13ff8c8d9201ec5f6d514b5073dd4cd3f7307e3ed9dd728c43 24110 shaarli_0.14.0+dfsg-2+deb13u1_amd64.buildinfo
Files:
 79bb0e4c6217df871ac3b3a7b91b35c6 2688 web optional shaarli_0.14.0+dfsg-2+deb13u1.dsc
 a68dc011ad48734e60b303ec921ed9bc 886436 web optional shaarli_0.14.0+dfsg.orig.tar.xz
 5f25d905b4e15ee7751d60be7dc15865 32652 web optional shaarli_0.14.0+dfsg-2+deb13u1.debian.tar.xz
 547fbcf92aeabaa6300a8ebe94ac81e5 24110 web optional shaarli_0.14.0+dfsg-2+deb13u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=ZoWo
-----END PGP SIGNATURE-----