php-laravel-framework (6.20.14+dfsg-2+deb11u1) bullseye; urgency=high * Fix security issue: XSS vulnerability in the Blade templating engine (CVE-2021-43808, Closes: #1001333) * Fix security issue: Failure to block the upload of executable PHP content (CVE-2021-43617, Closes: #1002728) -- Robin Gustafsson Sun, 02 Jan 2022 19:58:35 +0100 php-laravel-framework (6.20.14+dfsg-2) unstable; urgency=medium * Fix security issue: SQL injection with Microsoft SQL Server (Closes: #987831) -- Robin Gustafsson Fri, 30 Apr 2021 18:23:38 +0200 php-laravel-framework (6.20.14+dfsg-1) unstable; urgency=medium * New upstream version 6.20.14+dfsg - Fix security issue: More unexpected bindings in QueryBuilder * Replace git attributes with uscan's gitexport=all -- Robin Gustafsson Fri, 22 Jan 2021 18:39:34 +0100 php-laravel-framework (6.20.11+dfsg-1) unstable; urgency=medium * Set upstream metadata fields: Security-Contact. * New upstream version 6.20.11+dfsg - Fix security issue: Unexpected bindings in QueryBuilder (CVE-2021-21263, Closes: #980095) * Bump Standards-Version -- Robin Gustafsson Fri, 15 Jan 2021 00:35:41 +0100 php-laravel-framework (6.20.6+dfsg-1) unstable; urgency=medium [ Robin Gustafsson ] * New upstream version 6.20.6+dfsg * Remove Salsa CI config [ David Prévot ] * Update generate-autoload-tpl for php-doctrine-inflector (>= 2) (Closes: #976799) -- Robin Gustafsson Sun, 06 Dec 2020 16:40:52 +0100 php-laravel-framework (6.20.5+dfsg-1) unstable; urgency=medium * Initial release (Closes: #951159) * Merge php-illuminate-* source packages (Closes: #975304, #975306, #975307, #975308) -- Robin Gustafsson Tue, 24 Nov 2020 20:32:22 +0100