-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 06 Feb 2026 10:19:00 -0500
Source: shaarli
Architecture: source
Version: 0.12.1+dfsg-8+deb12u2
Distribution: bookworm-security
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org>
Changed-By: James Valleroy <jvalleroy@mailbox.org>
Closes: 1126554
Changes:
 shaarli (0.12.1+dfsg-8+deb12u2) bookworm-security; urgency=medium
 .
   * Add patch to fix stored XSS via tag suggestions
     (Closes: #1126554, CVE-2026-24476)
Checksums-Sha1:
 e2210ce9ff4ab8123426ec5e2b35981bc1b34215 2610 shaarli_0.12.1+dfsg-8+deb12u2.dsc
 2e5ef84c6fd2ba10e1cddf678db8b1ae9f20d467 1336723 shaarli_0.12.1+dfsg.orig.tar.gz
 2e0ca0b2353c1dce63da8368700760df91954425 26964 shaarli_0.12.1+dfsg-8+deb12u2.debian.tar.xz
 244eafd09d3857b7d418bab9cde73e4bbc7141cc 23848 shaarli_0.12.1+dfsg-8+deb12u2_amd64.buildinfo
Checksums-Sha256:
 ae4831c43be3719f41a2b8e8d89f61fdd76378f0da3ae21cc86f184f2c61c252 2610 shaarli_0.12.1+dfsg-8+deb12u2.dsc
 75b077614e52f276001481c17e62d8bc0b76d75b9e285fc72d5f1d56f08ffd6b 1336723 shaarli_0.12.1+dfsg.orig.tar.gz
 14a6f08d9767ba1c2ee45a093ec47036eb8492ec9ef43fa8e42d72d8549c8a28 26964 shaarli_0.12.1+dfsg-8+deb12u2.debian.tar.xz
 2ec09d142cc5c6b2e88a383a9765f4c90cfa3345568ec418317f1ab7d22c90e3 23848 shaarli_0.12.1+dfsg-8+deb12u2_amd64.buildinfo
Files:
 51d9959d598cc589b708298d6d8c2da8 2610 web optional shaarli_0.12.1+dfsg-8+deb12u2.dsc
 375c701d861e72a9478d79e9ed83c193 1336723 web optional shaarli_0.12.1+dfsg.orig.tar.gz
 5d610257f551a67d8b9f24a0db50cc7e 26964 web optional shaarli_0.12.1+dfsg-8+deb12u2.debian.tar.xz
 0d33cb6ebdd85956995077aeef3aee5d 23848 web optional shaarli_0.12.1+dfsg-8+deb12u2_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=JEKM
-----END PGP SIGNATURE-----