Package: release.debian.org Severity: normal Tags: buster User: release.debian....@packages.debian.org Usertags: pu X-Debbugs-Cc: pkg-php-p...@lists.alioth.debian.org, t...@security.debian.org
[ Reason ] I’d like to address CVE-2022-24828 that has been tagged as no-dsa. Some people may also wish to see #989315 fixed (it was reported twice), as well as #955485, and the fixes are trivial, so I’m proposing a fix for them too. [ Impact ] The security fix is worth it, the GitHub token related fixes are useful for people using this feature. [ Tests ] Unfortunately, the testsuite had been removed upstream from the tarball, and I didn’t dig it up from the upstream Git repository in time for Bullseye (so the two new test files pulled with the security fixes are useless no-ops). Yet the fixes are identical to the Bullseye version… [ Risks ] I’ve also provided the diffoscope output, showing probably better the trival changes. [ Checklist ] [x] *all* changes are documented in the d/changelog [x] I reviewed all changes and I approve them [x] attach debdiff against the package in (old)stable [x] the issue is verified as fixed in unstable Regards Thanks in advance. David
diff --git a/debian/changelog b/debian/changelog index 3c18e45c9..cc4c1c979 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,12 @@ +composer (1.8.4-1+deb10u2) buster; urgency=medium + + * Fix code injection vulnerability [CVE-2022-24828] (Closes: #1009960) + * Update GitHub token pattern (Closes: #989315) + * Use Authorization header instead of deprecated access_token query param + (Closes: #955485) + + -- David Prévot <taf...@debian.org> Sat, 28 May 2022 18:18:24 +0200 + composer (1.8.4-1+deb10u1) buster-security; urgency=high * Use debian/buster branch diff --git a/debian/patches/0006-Merge-pull-request-from-GHSA-x7cr-6qr6-2hh6.patch b/debian/patches/0006-Merge-pull-request-from-GHSA-x7cr-6qr6-2hh6.patch new file mode 100644 index 000000000..34709659c --- /dev/null +++ b/debian/patches/0006-Merge-pull-request-from-GHSA-x7cr-6qr6-2hh6.patch @@ -0,0 +1,306 @@ +From: Stephan <glaubi...@users.noreply.github.com> +Date: Wed, 13 Apr 2022 14:54:58 +0100 +Subject: Merge pull request from GHSA-x7cr-6qr6-2hh6 + +* GitDriver: filter branch names starting with a - character + +* GitDriver: getFileContent prevent identifiers starting with a - + +* HgDriver: prevent invalid identifiers and prevent file from running commands + +* HgDriver: filter branches starting with a - character + +Origin: origin, https://github.com/composer/composer/commit/c33aafaa04114e4f20104cb4bff050f31abc6178 +Bug-Debian: https://bugs.debian.org/1009960 +Bug-Debian: https://security-tracker.debian.org/tracker/CVE-2022-24828 +--- + src/Composer/Repository/Vcs/GitDriver.php | 6 +- + src/Composer/Repository/Vcs/HgDriver.php | 10 +- + .../Composer/Test/Repository/Vcs/GitDriverTest.php | 88 +++++++++++++++ + .../Composer/Test/Repository/Vcs/HgDriverTest.php | 124 +++++++++++++++++++++ + 4 files changed, 224 insertions(+), 4 deletions(-) + create mode 100644 tests/Composer/Test/Repository/Vcs/GitDriverTest.php + create mode 100644 tests/Composer/Test/Repository/Vcs/HgDriverTest.php + +diff --git a/src/Composer/Repository/Vcs/GitDriver.php b/src/Composer/Repository/Vcs/GitDriver.php +index c97f7bc..032afc8 100644 +--- a/src/Composer/Repository/Vcs/GitDriver.php ++++ b/src/Composer/Repository/Vcs/GitDriver.php +@@ -123,6 +123,10 @@ public function getDist($identifier) + */ + public function getFileContent($file, $identifier) + { ++ if (isset($identifier[0]) && $identifier[0] === '-') { ++ throw new \RuntimeException('Invalid git identifier detected. Identifier must not start with a -, given: ' . $identifier); ++ } ++ + $resource = sprintf('%s:%s', ProcessExecutor::escape($identifier), ProcessExecutor::escape($file)); + $this->process->execute(sprintf('git show %s', $resource), $content, $this->repoDir); + +@@ -176,7 +180,7 @@ public function getBranches() + $this->process->execute('git branch --no-color --no-abbrev -v', $output, $this->repoDir); + foreach ($this->process->splitLines($output) as $branch) { + if ($branch && !preg_match('{^ *[^/]+/HEAD }', $branch)) { +- if (preg_match('{^(?:\* )? *(\S+) *([a-f0-9]+)(?: .*)?$}', $branch, $match)) { ++ if (preg_match('{^(?:\* )? *(\S+) *([a-f0-9]+)(?: .*)?$}', $branch, $match) && $match[1][0] !== '-') { + $branches[$match[1]] = $match[2]; + } + } +diff --git a/src/Composer/Repository/Vcs/HgDriver.php b/src/Composer/Repository/Vcs/HgDriver.php +index 335135f..7fb94e5 100644 +--- a/src/Composer/Repository/Vcs/HgDriver.php ++++ b/src/Composer/Repository/Vcs/HgDriver.php +@@ -116,7 +116,11 @@ public function getDist($identifier) + */ + public function getFileContent($file, $identifier) + { +- $resource = sprintf('hg cat -r %s %s', ProcessExecutor::escape($identifier), ProcessExecutor::escape($file)); ++ if (isset($identifier[0]) && $identifier[0] === '-') { ++ throw new \RuntimeException('Invalid hg identifier detected. Identifier must not start with a -, given: ' . $identifier); ++ } ++ ++ $resource = sprintf('hg cat -r %s -- %s', ProcessExecutor::escape($identifier), ProcessExecutor::escape($file)); + $this->process->execute($resource, $content, $this->repoDir); + + if (!trim($content)) { +@@ -176,14 +180,14 @@ public function getBranches() + + $this->process->execute('hg branches', $output, $this->repoDir); + foreach ($this->process->splitLines($output) as $branch) { +- if ($branch && preg_match('(^([^\s]+)\s+\d+:([a-f0-9]+))', $branch, $match)) { ++ if ($branch && preg_match('(^([^\s]+)\s+\d+:([a-f0-9]+))', $branch, $match) && $match[1][0] !== '-') { + $branches[$match[1]] = $match[2]; + } + } + + $this->process->execute('hg bookmarks', $output, $this->repoDir); + foreach ($this->process->splitLines($output) as $branch) { +- if ($branch && preg_match('(^(?:[\s*]*)([^\s]+)\s+\d+:(.*)$)', $branch, $match)) { ++ if ($branch && preg_match('(^(?:[\s*]*)([^\s]+)\s+\d+:(.*)$)', $branch, $match) && $match[1][0] !== '-') { + $bookmarks[$match[1]] = $match[2]; + } + } +diff --git a/tests/Composer/Test/Repository/Vcs/GitDriverTest.php b/tests/Composer/Test/Repository/Vcs/GitDriverTest.php +new file mode 100644 +index 0000000..429dc2b +--- /dev/null ++++ b/tests/Composer/Test/Repository/Vcs/GitDriverTest.php +@@ -0,0 +1,88 @@ ++<?php ++ ++namespace Composer\Test\Repository\Vcs; ++ ++use Composer\Config; ++use Composer\Repository\Vcs\GitDriver; ++use Composer\Test\Mock\ProcessExecutorMock; ++use Composer\Test\TestCase; ++ ++class GitDriverTest extends TestCase ++{ ++ /** @var Config */ ++ private $config; ++ /** @var string */ ++ private $home; ++ ++ public function setUp() ++ { ++ $this->home = self::getUniqueTmpDirectory(); ++ $this->config = new Config(); ++ $this->config->merge(array( ++ 'config' => array( ++ 'home' => $this->home, ++ ), ++ )); ++ } ++ ++ public function testGetBranchesFilterInvalidBranchNames() ++ { ++ $process = $this->getMockBuilder('Composer\Util\ProcessExecutor')->getMock(); ++ $process->expects($this->any()) ++ ->method('execute') ++ ->will($this->returnValue(0)); ++ $io = $this->getMockBuilder('Composer\IO\IOInterface')->getMock(); ++ ++ $driver = new GitDriver(array('url' => 'https://example.org/acme.git'), $io, $this->config, $process); ++ $this->setRepoDir($driver, $this->home); ++ ++ // Branches starting with a - character are not valid git branches names ++ // Still assert that they get filtered to prevent issues later on ++ $stdout = <<<GIT ++* main 089681446ba44d6d9004350192486f2ceb4eaa06 commit ++ 2.2 12681446ba44d6d9004350192486f2ceb4eaa06 commit ++ -h 089681446ba44d6d9004350192486f2ceb4eaa06 commit ++GIT; ++ ++ $process->expects($this->at(0)) ++ ->method('execute') ++ ->with('git branch --no-color --no-abbrev -v'); ++ $process->expects($this->at(1)) ++ ->method('splitLines') ++ ->will($this->returnValue(preg_split('{\r?\n}', trim($stdout)))); ++ ++ $branches = $driver->getBranches(); ++ $this->assertSame(array( ++ 'main' => '089681446ba44d6d9004350192486f2ceb4eaa06', ++ '2.2' => '12681446ba44d6d9004350192486f2ceb4eaa06', ++ ), $branches); ++ } ++ ++ public function testFileGetContentInvalidIdentifier() ++ { ++ $this->setExpectedException('\RuntimeException'); ++ ++ $process = $this->getMockBuilder('Composer\Util\ProcessExecutor')->getMock(); ++ $process->expects($this->any()) ++ ->method('execute') ++ ->will($this->returnValue(0)); ++ $io = $this->getMockBuilder('Composer\IO\IOInterface')->getMock(); ++ $driver = new GitDriver(array('url' => 'https://example.org/acme.git'), $io, $this->config, $process); ++ ++ $this->assertNull($driver->getFileContent('file.txt', 'h')); ++ ++ $driver->getFileContent('file.txt', '-h'); ++ } ++ ++ /** ++ * @param GitDriver $driver ++ * @param string $path ++ */ ++ private function setRepoDir($driver, $path) ++ { ++ $reflectionClass = new \ReflectionClass($driver); ++ $reflectionProperty = $reflectionClass->getProperty('repoDir'); ++ $reflectionProperty->setAccessible(true); ++ $reflectionProperty->setValue($driver, $path); ++ } ++} +diff --git a/tests/Composer/Test/Repository/Vcs/HgDriverTest.php b/tests/Composer/Test/Repository/Vcs/HgDriverTest.php +new file mode 100644 +index 0000000..143f582 +--- /dev/null ++++ b/tests/Composer/Test/Repository/Vcs/HgDriverTest.php +@@ -0,0 +1,124 @@ ++<?php ++ ++/* ++ * This file is part of Composer. ++ * ++ * (c) Nils Adermann <nader...@naderman.de> ++ * Jordi Boggiano <j.boggi...@seld.be> ++ * ++ * For the full copyright and license information, please view the LICENSE ++ * file that was distributed with this source code. ++ */ ++ ++namespace Composer\Test\Repository\Vcs; ++ ++use Composer\Repository\Vcs\HgDriver; ++use Composer\Test\Mock\ProcessExecutorMock; ++use Composer\Test\TestCase; ++use Composer\Util\Filesystem; ++use Composer\Config; ++use Composer\Util\ProcessExecutor; ++ ++class HgDriverTest extends TestCase ++{ ++ /** @type \Composer\IO\IOInterface|\PHPUnit_Framework_MockObject_MockObject */ ++ private $io; ++ /** @type Config */ ++ private $config; ++ /** @type string */ ++ private $home; ++ ++ public function setUp() ++ { ++ $this->io = $this->getMockBuilder('Composer\IO\IOInterface')->getMock(); ++ $this->home = $this->getUniqueTmpDirectory(); ++ $this->config = new Config(); ++ $this->config->merge(array( ++ 'config' => array( ++ 'home' => $this->home, ++ ), ++ )); ++ } ++ ++ public function tearDown() ++ { ++ $fs = new Filesystem; ++ $fs->removeDirectory($this->home); ++ } ++ ++ /** ++ * @dataProvider supportsDataProvider ++ */ ++ public function testSupports($repositoryUrl) ++ { ++ $this->assertTrue( ++ HgDriver::supports($this->io, $this->config, $repositoryUrl) ++ ); ++ } ++ ++ public function supportsDataProvider() ++ { ++ return array( ++ array('ssh://bitbucket.org/user/repo'), ++ array('ssh://h...@bitbucket.org/user/repo'), ++ array('ssh://u...@bitbucket.org/user/repo'), ++ array('https://bitbucket.org/user/repo'), ++ array('https://u...@bitbucket.org/user/repo'), ++ ); ++ } ++ ++ public function testGetBranchesFilterInvalidBranchNames() ++ { ++ $process = $this->getMockBuilder('Composer\Util\ProcessExecutor')->getMock(); ++ $process->expects($this->any()) ++ ->method('execute') ++ ->will($this->returnValue(0)); ++ ++ $driver = new HgDriver(array('url' => 'https://example.org/acme.git'), $this->io, $this->config, $process); ++ ++ $stdout = <<<HG_BRANCHES ++default 1:dbf6c8acb640 ++--help 1:dbf6c8acb640 ++HG_BRANCHES; ++ ++ $stdout1 = <<<HG_BOOKMARKS ++help 1:dbf6c8acb641 ++--help 1:dbf6c8acb641 ++ ++HG_BOOKMARKS; ++ ++ $process->expects($this->at(0)) ++ ->method('execute') ++ ->with('hg branches'); ++ $process->expects($this->at(1)) ++ ->method('splitLines') ++ ->will($this->returnValue(preg_split('{\r?\n}', trim($stdout)))); ++ $process->expects($this->at(2)) ++ ->method('execute') ++ ->with('hg bookmarks'); ++ $process->expects($this->at(3)) ++ ->method('splitLines') ++ ->will($this->returnValue(preg_split('{\r?\n}', trim($stdout1)))); ++ ++ $branches = $driver->getBranches(); ++ $this->assertSame(array( ++ 'help' => 'dbf6c8acb641', ++ 'default' => 'dbf6c8acb640', ++ ), $branches); ++ } ++ ++ public function testFileGetContentInvalidIdentifier() ++ { ++ $this->setExpectedException('\RuntimeException'); ++ ++ $process = $this->getMockBuilder('Composer\Util\ProcessExecutor')->getMock(); ++ $process->expects($this->any()) ++ ->method('execute') ++ ->will($this->returnValue(0)); ++ $driver = new HgDriver(array('url' => 'https://example.org/acme.git'), $this->io, $this->config, $process); ++ ++ $this->assertNull($driver->getFileContent('file.txt', 'h')); ++ ++ $driver->getFileContent('file.txt', '-h'); ++ } ++} diff --git a/debian/patches/0007-Update-GitHub-token-pattern.patch b/debian/patches/0007-Update-GitHub-token-pattern.patch new file mode 100644 index 000000000..a0e15e9ab --- /dev/null +++ b/debian/patches/0007-Update-GitHub-token-pattern.patch @@ -0,0 +1,26 @@ +From: Ayesh Karunaratne <ay...@aye.sh> +Date: Sun, 7 Mar 2021 00:40:32 +0700 +Subject: Update GitHub token pattern + +GitHub is updating the format of auth tokens from `a-z0-9` to `A-Za-z0-9` ([notice](https://github.blog/changelog/2021-03-04-authentication-token-format-updates/)). +I'm not sure why `.` is allowed, but I dare not to remove it. In this PR, the token validation regex is updated to allow `A-Za-z0-9` instead of the current all lower-case `a-z` and disallowed `_`. + +Origin: upstream, https://github.com/composer/composer/commit/dc83ba93f3d8a35629f9a387632e8cd373a144d0 +Bug-Debian: https://bugs.debian.org/989315 +--- + src/Composer/IO/BaseIO.php | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/src/Composer/IO/BaseIO.php b/src/Composer/IO/BaseIO.php +index b327f1b..8fa9686 100644 +--- a/src/Composer/IO/BaseIO.php ++++ b/src/Composer/IO/BaseIO.php +@@ -100,7 +100,7 @@ public function loadConfiguration(Config $config) + } + + foreach ($githubOauth as $domain => $token) { +- if (!preg_match('{^[.a-z0-9]+$}', $token)) { ++ if (!preg_match('{^[.A-Za-z0-9_]+$}', $token)) { + throw new \UnexpectedValueException('Your github oauth token for '.$domain.' contains invalid characters: "'.$token.'"'); + } + $this->checkAndSetAuthentication($domain, $token, 'x-oauth-basic'); diff --git a/debian/patches/0008-Use-Authorization-header-instead-of-deprecated-acces.patch b/debian/patches/0008-Use-Authorization-header-instead-of-deprecated-acces.patch new file mode 100644 index 000000000..376e8e8c8 --- /dev/null +++ b/debian/patches/0008-Use-Authorization-header-instead-of-deprecated-acces.patch @@ -0,0 +1,24 @@ +From: Jordi Boggiano <j.boggi...@seld.be> +Date: Tue, 14 Jan 2020 15:35:52 +0100 +Subject: Use Authorization header instead of deprecated access_token query + param, fixes #8454 + +Origin: upstream, https://github.com/composer/composer/commit/4b6c25d4bc33d49097320e29e6e5705b12e9d6ef +Bug-Debian: https://bugs.debian.org/955485 +--- + src/Composer/Util/RemoteFilesystem.php | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/src/Composer/Util/RemoteFilesystem.php b/src/Composer/Util/RemoteFilesystem.php +index ea18a9e..2934b35 100644 +--- a/src/Composer/Util/RemoteFilesystem.php ++++ b/src/Composer/Util/RemoteFilesystem.php +@@ -274,7 +274,7 @@ protected function get($originUrl, $fileUrl, $additionalOptions = array(), $file + if (isset($options['github-token'])) { + // only add the access_token if it is actually a github URL (in case we were redirected to S3) + if (preg_match('{^https?://([a-z0-9-]+\.)*github\.com/}', $fileUrl)) { +- $fileUrl .= (false === strpos($fileUrl, '?') ? '?' : '&') . 'access_token='.$options['github-token']; ++ $options['http']['header'][] = 'Authorization: token '.$options['github-token']; + } + unset($options['github-token']); + } diff --git a/debian/patches/series b/debian/patches/series index 429e4086a..701bbfa09 100644 --- a/debian/patches/series +++ b/debian/patches/series @@ -3,3 +3,6 @@ 0003-Mimic-distribution-path-for-tests-and-help2man.patch 0005-Pick-up-copyright-instead-of-LICENSE.patch 0005-Merge-pull-request-from-GHSA-h5h8-pc6h-jvvx.patch +0006-Merge-pull-request-from-GHSA-x7cr-6qr6-2hh6.patch +0007-Update-GitHub-token-pattern.patch +0008-Use-Authorization-header-instead-of-deprecated-acces.patch
--- ../composer_1.8.4-1+deb10u1_all.deb
+++ ../composer_1.8.4-1+deb10u2_all.deb
├── file list
│ @@ -1,3 +1,3 @@
│ --rw-r--r-- 0 0 0 4 2021-04-27 22:47:26.000000 debian-binary
│ --rw-r--r-- 0 0 0 8596 2021-04-27 22:47:26.000000 control.tar.xz
│ --rw-r--r-- 0 0 0 327980 2021-04-27 22:47:26.000000 data.tar.xz
│ +-rw-r--r-- 0 0 0 4 2022-05-28 16:18:24.000000 debian-binary
│ +-rw-r--r-- 0 0 0 8592 2022-05-28 16:18:24.000000 control.tar.xz
│ +-rw-r--r-- 0 0 0 328204 2022-05-28 16:18:24.000000 data.tar.xz
├── control.tar.xz
│ ├── control.tar
│ │ ├── file list
│ │ │ @@ -1,3 +1,3 @@
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./
│ │ │ --rw-r--r-- 0 root (0) root (0) 1048 2021-04-27 22:47:26.000000 ./control
│ │ │ --rw-r--r-- 0 root (0) root (0) 25631 2021-04-27 22:47:26.000000 ./md5sums
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./
│ │ │ +-rw-r--r-- 0 root (0) root (0) 1048 2022-05-28 16:18:24.000000 ./control
│ │ │ +-rw-r--r-- 0 root (0) root (0) 25631 2022-05-28 16:18:24.000000 ./md5sums
│ │ ├── ./control
│ │ │ @@ -1,9 +1,9 @@
│ │ │ Package: composer
│ │ │ -Version: 1.8.4-1+deb10u1
│ │ │ +Version: 1.8.4-1+deb10u2
│ │ │ Architecture: all
│ │ │ Maintainer: Debian PHP PEAR Maintainers <pkg-php-p...@lists.alioth.debian.org>
│ │ │ Installed-Size: 1883
│ │ │ Depends: php-cli, php-common, php-composer-ca-bundle (>= 1.0), php-composer-ca-bundle (<< 2~~), php-composer-semver (>= 1.0), php-composer-semver (<< 2~~), php-composer-spdx-licenses (>= 1.2), php-composer-spdx-licenses (<< 2~~), php-composer-xdebug-handler (>= 1.1), php-composer-xdebug-handler (<< 2~~), php-json-schema, php-psr-log (>= 1.0), php-psr-log (<< 2~~), jsonlint (>= 1.4), jsonlint (<< 2~~), php-symfony-console, php-symfony-filesystem, php-symfony-finder, php-symfony-process
│ │ │ Recommends: git, unzip
│ │ │ Suggests: fossil, mercurial, subversion, php-zip
│ │ │ Breaks: php-symfony-console (= 2.8.38)
│ │ ├── ./md5sums
│ │ │ ├── ./md5sums
│ │ │ │┄ Files differ
├── data.tar.xz
│ ├── data.tar
│ │ ├── file list
│ │ │ @@ -1,75 +1,75 @@
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/bin/
│ │ │ --rwxr-xr-x 0 root (0) root (0) 1555 2021-04-27 22:47:26.000000 ./usr/bin/composer
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/doc/
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/doc/composer/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/bin/
│ │ │ +-rwxr-xr-x 0 root (0) root (0) 1555 2022-05-28 16:18:24.000000 ./usr/bin/composer
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/doc/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/doc/composer/
│ │ │ -rw-r--r-- 0 root (0) root (0) 2392 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/00-intro.md.gz
│ │ │ -rw-r--r-- 0 root (0) root (0) 4547 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/01-basic-usage.md.gz
│ │ │ -rw-r--r-- 0 root (0) root (0) 2311 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/02-libraries.md.gz
│ │ │ -rw-r--r-- 0 root (0) root (0) 10889 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/03-cli.md.gz
│ │ │ -rw-r--r-- 0 root (0) root (0) 9626 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/04-schema.md.gz
│ │ │ -rw-r--r-- 0 root (0) root (0) 8213 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/05-repositories.md.gz
│ │ │ -rw-r--r-- 0 root (0) root (0) 3891 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/06-config.md.gz
│ │ │ -rw-r--r-- 0 root (0) root (0) 1321 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/07-community.md
│ │ │ -rw-r--r-- 0 root (0) root (0) 2185 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/README.md
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/doc/composer/articles/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/doc/composer/articles/
│ │ │ -rw-r--r-- 0 root (0) root (0) 3882 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/articles/aliases.md
│ │ │ -rw-r--r-- 0 root (0) root (0) 1750 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/articles/autoloader-optimization.md.gz
│ │ │ -rw-r--r-- 0 root (0) root (0) 2423 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/articles/custom-installers.md.gz
│ │ │ -rw-r--r-- 0 root (0) root (0) 4600 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/articles/handling-private-packages-with-satis.md.gz
│ │ │ -rw-r--r-- 0 root (0) root (0) 1875 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/articles/http-basic-authentication.md
│ │ │ -rw-r--r-- 0 root (0) root (0) 2999 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/articles/plugins.md.gz
│ │ │ -rw-r--r-- 0 root (0) root (0) 3303 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/articles/scripts.md.gz
│ │ │ -rw-r--r-- 0 root (0) root (0) 5348 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/articles/troubleshooting.md.gz
│ │ │ -rw-r--r-- 0 root (0) root (0) 3401 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/articles/vendor-binaries.md
│ │ │ -rw-r--r-- 0 root (0) root (0) 4144 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/articles/versions.md.gz
│ │ │ --rw-r--r-- 0 root (0) root (0) 3280 2021-04-27 22:47:26.000000 ./usr/share/doc/composer/changelog.Debian.gz
│ │ │ +-rw-r--r-- 0 root (0) root (0) 3390 2022-05-28 16:18:24.000000 ./usr/share/doc/composer/changelog.Debian.gz
│ │ │ -rw-r--r-- 0 root (0) root (0) 15823 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/changelog.gz
│ │ │ --rw-r--r-- 0 root (0) root (0) 2919 2021-04-27 22:47:26.000000 ./usr/share/doc/composer/copyright
│ │ │ +-rw-r--r-- 0 root (0) root (0) 2919 2022-05-28 15:10:54.000000 ./usr/share/doc/composer/copyright
│ │ │ drwxr-xr-x 0 root (0) root (0) 0 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/dev/
│ │ │ -rw-r--r-- 0 root (0) root (0) 1280 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/dev/DefaultPolicy.md
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/doc/composer/faqs/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/doc/composer/faqs/
│ │ │ -rw-r--r-- 0 root (0) root (0) 1836 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/faqs/how-do-i-install-a-package-to-a-custom-path-for-my-framework.md
│ │ │ -rw-r--r-- 0 root (0) root (0) 1425 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/faqs/how-to-install-composer-programmatically.md
│ │ │ -rw-r--r-- 0 root (0) root (0) 938 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/faqs/how-to-install-untrusted-packages-safely.md
│ │ │ -rw-r--r-- 0 root (0) root (0) 1704 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/faqs/should-i-commit-the-dependencies-in-my-vendor-directory.md
│ │ │ -rw-r--r-- 0 root (0) root (0) 153 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/faqs/which-version-numbering-system-does-composer-itself-use.md
│ │ │ -rw-r--r-- 0 root (0) root (0) 1087 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/faqs/why-are-unbound-version-constraints-a-bad-idea.md
│ │ │ -rw-r--r-- 0 root (0) root (0) 993 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/faqs/why-are-version-constraints-combining-comparisons-and-wildcards-a-bad-idea.md
│ │ │ -rw-r--r-- 0 root (0) root (0) 2111 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/faqs/why-can't-composer-load-repositories-recursively.md
│ │ │ drwxr-xr-x 0 root (0) root (0) 0 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/fixtures/
│ │ │ -rw-r--r-- 0 root (0) root (0) 982 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/fixtures/fixtures.md
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/doc/composer/fixtures/repo-composer-plain/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/doc/composer/fixtures/repo-composer-plain/
│ │ │ -rw-r--r-- 0 root (0) root (0) 582 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/fixtures/repo-composer-plain/packages.json.gz
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/doc/composer/fixtures/repo-composer-with-providers/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/doc/composer/fixtures/repo-composer-with-providers/
│ │ │ drwxr-xr-x 0 root (0) root (0) 0 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/fixtures/repo-composer-with-providers/p/
│ │ │ drwxr-xr-x 0 root (0) root (0) 0 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/fixtures/repo-composer-with-providers/p/bar/
│ │ │ -rw-r--r-- 0 root (0) root (0) 1656 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/fixtures/repo-composer-with-providers/p/bar/baz$923363b3c22e73abb2e3fd891c8156dd4d0821a97fd3e428bc910833e3e46dbe.json
│ │ │ drwxr-xr-x 0 root (0) root (0) 0 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/fixtures/repo-composer-with-providers/p/foo/
│ │ │ -rw-r--r-- 0 root (0) root (0) 2607 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/fixtures/repo-composer-with-providers/p/foo/bar$4baabb3303afa3e34a4d3af18fb138e5f3b79029c1f8d9ab5b477ea15776ba0a.json
│ │ │ drwxr-xr-x 0 root (0) root (0) 0 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/fixtures/repo-composer-with-providers/p/gar/
│ │ │ -rw-r--r-- 0 root (0) root (0) 1614 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/fixtures/repo-composer-with-providers/p/gar/nix$5d210670cb46c8364c8e3fb449967b9bea558b971e5b082f330ae4f1d484c321.json
│ │ │ -rw-r--r-- 0 root (0) root (0) 516 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/fixtures/repo-composer-with-providers/p/provider-active$1893a061e579543822389ecd12d791c612db0c05e22d90e9286e233cacd86ed8.json
│ │ │ drwxr-xr-x 0 root (0) root (0) 0 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/fixtures/repo-composer-with-providers/p/qux/
│ │ │ -rw-r--r-- 0 root (0) root (0) 632 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/fixtures/repo-composer-with-providers/p/qux/quux$c142d1a07ca354be46b613f59f1d601923a5a00ccc5fcce50a77ecdd461eb72d.json
│ │ │ -rw-r--r-- 0 root (0) root (0) 308 2019-02-11 09:52:10.000000 ./usr/share/doc/composer/fixtures/repo-composer-with-providers/packages.json
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/man/
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/man/man1/
│ │ │ --rw-r--r-- 0 root (0) root (0) 1307 2021-04-27 22:47:26.000000 ./usr/share/man/man1/composer.1.gz
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/php/
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/Autoload/
│ │ │ --rw-r--r-- 0 root (0) root (0) 35980 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/Autoload/AutoloadGenerator.php
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/man/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/man/man1/
│ │ │ +-rw-r--r-- 0 root (0) root (0) 1306 2022-05-28 16:18:24.000000 ./usr/share/man/man1/composer.1.gz
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/php/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/Autoload/
│ │ │ +-rw-r--r-- 0 root (0) root (0) 35980 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/Autoload/AutoloadGenerator.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 13459 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Autoload/ClassLoader.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 8823 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Autoload/ClassMapGenerator.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 7640 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Cache.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/Command/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/Command/
│ │ │ -rw-r--r-- 0 root (0) root (0) 1153 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Command/AboutCommand.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 6622 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Command/ArchiveCommand.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 5317 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Command/BaseCommand.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 10029 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Command/BaseDependencyCommand.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 5419 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Command/CheckPlatformReqsCommand.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2056 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Command/ClearCacheCommand.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 27313 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Command/ConfigCommand.php
│ │ │ @@ -93,26 +93,26 @@
│ │ │ -rw-r--r-- 0 root (0) root (0) 17030 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Command/SelfUpdateCommand.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 43045 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Command/ShowCommand.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 8340 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Command/StatusCommand.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 5242 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Command/SuggestsCommand.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 11100 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Command/UpdateCommand.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 7162 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Command/ValidateCommand.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 4975 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Composer.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/Config/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/Config/
│ │ │ -rw-r--r-- 0 root (0) root (0) 1977 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Config/ConfigSourceInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 8231 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Config/JsonConfigSource.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 15824 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Config.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/Console/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/Console/
│ │ │ -rw-r--r-- 0 root (0) root (0) 19470 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Console/Application.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2561 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Console/HtmlOutputFormatter.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/DependencyResolver/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/DependencyResolver/
│ │ │ -rw-r--r-- 0 root (0) root (0) 5517 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/DependencyResolver/Decisions.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 9337 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/DependencyResolver/DefaultPolicy.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2170 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/DependencyResolver/GenericRule.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/DependencyResolver/Operation/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/DependencyResolver/Operation/
│ │ │ -rw-r--r-- 0 root (0) root (0) 1355 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/DependencyResolver/Operation/InstallOperation.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1521 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/DependencyResolver/Operation/MarkAliasInstalledOperation.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1527 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/DependencyResolver/Operation/MarkAliasUninstalledOperation.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 803 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/DependencyResolver/Operation/OperationInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1020 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/DependencyResolver/Operation/SolverOperation.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1363 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/DependencyResolver/Operation/UninstallOperation.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1838 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/DependencyResolver/Operation/UpdateOperation.php
│ │ │ @@ -128,53 +128,53 @@
│ │ │ -rw-r--r-- 0 root (0) root (0) 1402 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/DependencyResolver/RuleWatchChain.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 5349 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/DependencyResolver/RuleWatchGraph.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2780 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/DependencyResolver/RuleWatchNode.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 27538 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/DependencyResolver/Solver.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 766 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/DependencyResolver/SolverBugException.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2757 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/DependencyResolver/SolverProblemsException.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 7725 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/DependencyResolver/Transaction.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/Downloader/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/Downloader/
│ │ │ -rw-r--r-- 0 root (0) root (0) 4644 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Downloader/ArchiveDownloader.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 766 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Downloader/ChangeReportInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 10584 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Downloader/DownloadManager.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1781 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Downloader/DownloaderInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 782 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Downloader/DvcsDownloaderInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 11415 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Downloader/FileDownloader.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 672 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Downloader/FilesystemException.php
│ │ │ --rw-r--r-- 0 root (0) root (0) 4019 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/Downloader/FossilDownloader.php
│ │ │ --rw-r--r-- 0 root (0) root (0) 19949 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/Downloader/GitDownloader.php
│ │ │ --rw-r--r-- 0 root (0) root (0) 2605 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/Downloader/GzipDownloader.php
│ │ │ --rw-r--r-- 0 root (0) root (0) 3012 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/Downloader/HgDownloader.php
│ │ │ +-rw-r--r-- 0 root (0) root (0) 4019 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/Downloader/FossilDownloader.php
│ │ │ +-rw-r--r-- 0 root (0) root (0) 19949 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/Downloader/GitDownloader.php
│ │ │ +-rw-r--r-- 0 root (0) root (0) 2605 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/Downloader/GzipDownloader.php
│ │ │ +-rw-r--r-- 0 root (0) root (0) 3012 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/Downloader/HgDownloader.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 7156 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Downloader/PathDownloader.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 11666 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Downloader/PearPackageExtractor.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2852 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Downloader/PerforceDownloader.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 937 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Downloader/PharDownloader.php
│ │ │ --rw-r--r-- 0 root (0) root (0) 2857 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/Downloader/RarDownloader.php
│ │ │ --rw-r--r-- 0 root (0) root (0) 7871 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/Downloader/SvnDownloader.php
│ │ │ +-rw-r--r-- 0 root (0) root (0) 2857 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/Downloader/RarDownloader.php
│ │ │ +-rw-r--r-- 0 root (0) root (0) 7871 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/Downloader/SvnDownloader.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 697 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Downloader/TarDownloader.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1009 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Downloader/TransportException.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 795 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Downloader/VcsCapableDownloaderInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 10640 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Downloader/VcsDownloader.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1715 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Downloader/XzDownloader.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 8639 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Downloader/ZipDownloader.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/EventDispatcher/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/EventDispatcher/
│ │ │ -rw-r--r-- 0 root (0) root (0) 2150 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/EventDispatcher/Event.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 21748 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/EventDispatcher/EventDispatcher.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1553 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/EventDispatcher/EventSubscriberInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 422 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/EventDispatcher/ScriptExecutionException.php
│ │ │ drwxr-xr-x 0 root (0) root (0) 0 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Exception/
│ │ │ -rw-r--r-- 0 root (0) root (0) 406 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Exception/NoSslException.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 24432 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Factory.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/IO/
│ │ │ --rw-r--r-- 0 root (0) root (0) 7571 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/IO/BaseIO.php
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/IO/
│ │ │ +-rw-r--r-- 0 root (0) root (0) 7575 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/IO/BaseIO.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1811 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/IO/BufferIO.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 10047 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/IO/ConsoleIO.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 6708 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/IO/IOInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2311 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/IO/NullIO.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/Installer/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/Installer/
│ │ │ -rw-r--r-- 0 root (0) root (0) 7014 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Installer/BinaryInstaller.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 731 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Installer/BinaryPresenceInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 10767 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Installer/InstallationManager.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 3220 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Installer/InstallerEvent.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1039 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Installer/InstallerEvents.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2457 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Installer/InstallerInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 7590 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Installer/LibraryInstaller.php
│ │ │ @@ -184,22 +184,22 @@
│ │ │ -rw-r--r-- 0 root (0) root (0) 2020 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Installer/PackageEvents.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 4948 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Installer/PearBinaryInstaller.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2870 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Installer/PearInstaller.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2561 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Installer/PluginInstaller.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2607 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Installer/ProjectInstaller.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 4031 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Installer/SuggestedPackagesReporter.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 69941 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Installer.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/Json/
│ │ │ --rw-r--r-- 0 root (0) root (0) 9499 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/Json/JsonFile.php
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/Json/
│ │ │ +-rw-r--r-- 0 root (0) root (0) 9499 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/Json/JsonFile.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 4505 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Json/JsonFormatter.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 19398 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Json/JsonManipulator.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 704 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Json/JsonValidationException.php
│ │ │ drwxr-xr-x 0 root (0) root (0) 0 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/
│ │ │ -rw-r--r-- 0 root (0) root (0) 9095 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/AliasPackage.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/Package/Archiver/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/Package/Archiver/
│ │ │ -rw-r--r-- 0 root (0) root (0) 990 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/Archiver/ArchivableFilesFilter.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2891 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/Archiver/ArchivableFilesFinder.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 6204 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/Archiver/ArchiveManager.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1271 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/Archiver/ArchiverInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 3991 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/Archiver/BaseExcludeFilter.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 858 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/Archiver/ComposerExcludeFilter.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2105 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/Archiver/GitExcludeFilter.php
│ │ │ @@ -210,65 +210,65 @@
│ │ │ drwxr-xr-x 0 root (0) root (0) 0 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/Comparer/
│ │ │ -rw-r--r-- 0 root (0) root (0) 3636 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/Comparer/Comparer.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 3642 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/CompletePackage.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2019 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/CompletePackageInterface.php
│ │ │ drwxr-xr-x 0 root (0) root (0) 0 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/Dumper/
│ │ │ -rw-r--r-- 0 root (0) root (0) 4696 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/Dumper/ArrayDumper.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 3013 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/Link.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/Package/LinkConstraint/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/Package/LinkConstraint/
│ │ │ -rw-r--r-- 0 root (0) root (0) 713 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/LinkConstraint/EmptyConstraint.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 687 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/LinkConstraint/LinkConstraintInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 713 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/LinkConstraint/MultiConstraint.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 691 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/LinkConstraint/SpecificConstraint.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 666 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/LinkConstraint/VersionConstraint.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/Package/Loader/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/Package/Loader/
│ │ │ -rw-r--r-- 0 root (0) root (0) 11446 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/Loader/ArrayLoader.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1001 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/Loader/InvalidPackageException.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1116 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/Loader/JsonLoader.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 834 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/Loader/LoaderInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 10097 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/Loader/RootPackageLoader.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 21789 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/Loader/ValidatingArrayLoader.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 14697 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/Locker.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 12546 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/Package.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 9107 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/PackageInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 3645 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/RootAliasPackage.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2628 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/RootPackage.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 3208 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/RootPackageInterface.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/Package/Version/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/Package/Version/
│ │ │ -rw-r--r-- 0 root (0) root (0) 11783 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/Version/VersionGuesser.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2491 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/Version/VersionParser.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 6090 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Package/Version/VersionSelector.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/Plugin/
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/Plugin/Capability/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/Plugin/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/Plugin/Capability/
│ │ │ -rw-r--r-- 0 root (0) root (0) 485 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Plugin/Capability/Capability.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 863 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Plugin/Capability/CommandProvider.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1179 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Plugin/Capable.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1965 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Plugin/CommandEvent.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1448 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Plugin/PluginEvents.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 810 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Plugin/PluginInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 15907 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Plugin/PluginManager.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1357 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Plugin/PreCommandRunEvent.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1591 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Plugin/PreFileDownloadEvent.php
│ │ │ drwxr-xr-x 0 root (0) root (0) 0 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Question/
│ │ │ -rw-r--r-- 0 root (0) root (0) 2667 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Question/StrictConfirmationQuestion.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/Repository/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/Repository/
│ │ │ -rw-r--r-- 0 root (0) root (0) 5718 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/ArrayRepository.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 5137 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/ArtifactRepository.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 7818 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/BaseRepository.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 32540 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/ComposerRepository.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 3927 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/CompositeRepository.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 478 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/ConfigurableRepositoryInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2280 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/FilesystemRepository.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 584 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/InstalledArrayRepository.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 504 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/InstalledFilesystemRepository.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 579 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/InstalledRepositoryInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 479 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/InvalidRepositoryException.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1628 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/PackageRepository.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 5609 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/PathRepository.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/Repository/Pear/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/Repository/Pear/
│ │ │ -rw-r--r-- 0 root (0) root (0) 2527 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/Pear/BaseChannelReader.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1218 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/Pear/ChannelInfo.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 3216 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/Pear/ChannelReader.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 4823 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/Pear/ChannelRest10Reader.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 4089 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/Pear/ChannelRest11Reader.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1248 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/Pear/DependencyConstraint.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1179 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/Pear/DependencyInfo.php
│ │ │ @@ -277,62 +277,62 @@
│ │ │ -rw-r--r-- 0 root (0) root (0) 1026 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/Pear/ReleaseInfo.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 8743 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/PearRepository.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 12479 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/PlatformRepository.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 6948 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/RepositoryFactory.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2233 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/RepositoryInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 5638 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/RepositoryManager.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 482 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/RepositorySecurityException.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/Repository/Vcs/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/Repository/Vcs/
│ │ │ -rw-r--r-- 0 root (0) root (0) 13335 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/Vcs/BitbucketDriver.php
│ │ │ --rw-r--r-- 0 root (0) root (0) 7166 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/Repository/Vcs/FossilDriver.php
│ │ │ +-rw-r--r-- 0 root (0) root (0) 7166 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/Repository/Vcs/FossilDriver.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2380 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/Vcs/GitBitbucketDriver.php
│ │ │ --rw-r--r-- 0 root (0) root (0) 6593 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/Repository/Vcs/GitDriver.php
│ │ │ +-rw-r--r-- 0 root (0) root (0) 6826 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/Repository/Vcs/GitDriver.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 15610 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/Vcs/GitHubDriver.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 15033 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/Vcs/GitLabDriver.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2374 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/Vcs/HgBitbucketDriver.php
│ │ │ --rw-r--r-- 0 root (0) root (0) 6721 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/Repository/Vcs/HgDriver.php
│ │ │ +-rw-r--r-- 0 root (0) root (0) 6980 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/Repository/Vcs/HgDriver.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 3692 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/Vcs/PerforceDriver.php
│ │ │ --rw-r--r-- 0 root (0) root (0) 12198 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/Repository/Vcs/SvnDriver.php
│ │ │ +-rw-r--r-- 0 root (0) root (0) 12198 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/Repository/Vcs/SvnDriver.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 4958 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/Vcs/VcsDriver.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 3198 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/Vcs/VcsDriverInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 14166 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/VcsRepository.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 520 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/VersionCacheInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1520 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/WritableArrayRepository.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1253 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Repository/WritableRepositoryInterface.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/Script/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/Script/
│ │ │ -rw-r--r-- 0 root (0) root (0) 416 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Script/CommandEvent.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2000 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Script/Event.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 495 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Script/PackageEvent.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 5803 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Script/ScriptEvents.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/SelfUpdate/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/SelfUpdate/
│ │ │ -rw-r--r-- 0 root (0) root (0) 874 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/SelfUpdate/Keys.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2140 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/SelfUpdate/Versions.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/Util/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/Util/
│ │ │ -rw-r--r-- 0 root (0) root (0) 1695 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Util/AuthHelper.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 8589 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Util/Bitbucket.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1787 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Util/ComposerMirror.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 7801 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Util/ConfigValidator.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2329 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Util/ErrorHandler.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 21843 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Util/Filesystem.php
│ │ │ --rw-r--r-- 0 root (0) root (0) 16407 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/Util/Git.php
│ │ │ +-rw-r--r-- 0 root (0) root (0) 16407 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/Util/Git.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 6060 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Util/GitHub.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 5551 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Util/GitLab.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2883 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Util/Hg.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1632 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Util/IniHelper.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 4171 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Util/NoProxyPattern.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 17526 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Util/Perforce.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2600 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Util/Platform.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 5790 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Util/ProcessExecutor.php
│ │ │ --rw-r--r-- 0 root (0) root (0) 45172 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Util/RemoteFilesystem.php
│ │ │ +-rw-r--r-- 0 root (0) root (0) 45151 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/Util/RemoteFilesystem.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2166 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Util/Silencer.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 570 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Util/SpdxLicense.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 7345 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Util/StreamContextFactory.php
│ │ │ --rw-r--r-- 0 root (0) root (0) 10044 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/Util/Svn.php
│ │ │ +-rw-r--r-- 0 root (0) root (0) 10044 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/Util/Svn.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 6662 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Util/TlsHelper.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2904 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/Util/Url.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 845 2019-02-11 09:52:10.000000 ./usr/share/php/Composer/XdebugHandler.php
│ │ │ --rw-r--r-- 0 root (0) root (0) 23899 2021-04-27 22:47:26.000000 ./usr/share/php/Composer/autoload.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/php/data/
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/php/data/Composer/
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:47:26.000000 ./usr/share/php/data/Composer/res/
│ │ │ +-rw-r--r-- 0 root (0) root (0) 23899 2022-05-28 16:18:24.000000 ./usr/share/php/Composer/autoload.php
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/php/data/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/php/data/Composer/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-28 16:18:24.000000 ./usr/share/php/data/Composer/res/
│ │ │ -rw-r--r-- 0 root (0) root (0) 4080 2019-02-11 09:52:10.000000 ./usr/share/php/data/Composer/res/composer-repository-schema.json
│ │ │ -rw-r--r-- 0 root (0) root (0) 38533 2019-02-11 09:52:10.000000 ./usr/share/php/data/Composer/res/composer-schema.json
│ │ ├── ./usr/share/doc/composer/changelog.Debian.gz
│ │ │ ├── changelog.Debian
│ │ │ │ @@ -1,7 +1,16 @@
│ │ │ │ +composer (1.8.4-1+deb10u2) buster; urgency=medium
│ │ │ │ +
│ │ │ │ + * Fix code injection vulnerability [CVE-2022-24828] (Closes: #1009960)
│ │ │ │ + * Update GitHub token pattern (Closes: #989315)
│ │ │ │ + * Use Authorization header instead of deprecated access_token query param
│ │ │ │ + (Closes: #955485)
│ │ │ │ +
│ │ │ │ + -- David Prévot <taf...@debian.org> Sat, 28 May 2022 18:18:24 +0200
│ │ │ │ +
│ │ │ │ composer (1.8.4-1+deb10u1) buster-security; urgency=high
│ │ │ │
│ │ │ │ * Use debian/buster branch
│ │ │ │ * Security: Fixed command injection vulnerability.
│ │ │ │ Fix external process calls to avoid user input being able to pass extra
│ │ │ │ parameters in HgDriver/HgDownloader and hardened other VCS drivers and
│ │ │ │ downloaders (GHSA-h5h8-pc6h-jvvx) [CVE-2021-29472]
│ │ ├── ./usr/share/man/man1/composer.1.gz
│ │ │ ├── composer.1
│ │ │ │ @@ -1,9 +1,9 @@
│ │ │ │ .\" DO NOT MODIFY THIS FILE! It was generated by help2man 1.47.8.
│ │ │ │ -.TH COMPOSER "1" "April 2021" "composer 1.8.4+deb10u1" "User Commands"
│ │ │ │ +.TH COMPOSER "1" "May 2022" "composer 1.8.4+deb10u2" "User Commands"
│ │ │ │ .SH NAME
│ │ │ │ composer \- Composer command line interface
│ │ │ │ .SH SYNOPSIS
│ │ │ │ .B composer
│ │ │ │ \fI\,command \/\fR[\fI\,options\/\fR] [\fI\,arguments\/\fR]
│ │ │ │ .SH OPTIONS
│ │ │ │ .TP
│ │ ├── ./usr/share/php/Composer/IO/BaseIO.php
│ │ │ @@ -96,15 +96,15 @@
│ │ │ // reload oauth tokens from config if available
│ │ │
│ │ │ foreach ($bitbucketOauth as $domain => $cred) {
│ │ │ $this->checkAndSetAuthentication($domain, $cred['consumer-key'], $cred['consumer-secret']);
│ │ │ }
│ │ │
│ │ │ foreach ($githubOauth as $domain => $token) {
│ │ │ - if (!preg_match('{^[.a-z0-9]+$}', $token)) {
│ │ │ + if (!preg_match('{^[.A-Za-z0-9_]+$}', $token)) {
│ │ │ throw new \UnexpectedValueException('Your github oauth token for '.$domain.' contains invalid characters: "'.$token.'"');
│ │ │ }
│ │ │ $this->checkAndSetAuthentication($domain, $token, 'x-oauth-basic');
│ │ │ }
│ │ │
│ │ │ foreach ($gitlabOauth as $domain => $token) {
│ │ │ $this->checkAndSetAuthentication($domain, $token, 'oauth2');
│ │ ├── ./usr/share/php/Composer/Repository/Vcs/GitDriver.php
│ │ │ @@ -119,14 +119,18 @@
│ │ │ }
│ │ │
│ │ │ /**
│ │ │ * {@inheritdoc}
│ │ │ */
│ │ │ public function getFileContent($file, $identifier)
│ │ │ {
│ │ │ + if (isset($identifier[0]) && $identifier[0] === '-') {
│ │ │ + throw new \RuntimeException('Invalid git identifier detected. Identifier must not start with a -, given: ' . $identifier);
│ │ │ + }
│ │ │ +
│ │ │ $resource = sprintf('%s:%s', ProcessExecutor::escape($identifier), ProcessExecutor::escape($file));
│ │ │ $this->process->execute(sprintf('git show %s', $resource), $content, $this->repoDir);
│ │ │
│ │ │ if (!trim($content)) {
│ │ │ return null;
│ │ │ }
│ │ │
│ │ │ @@ -172,15 +176,15 @@
│ │ │ {
│ │ │ if (null === $this->branches) {
│ │ │ $branches = array();
│ │ │
│ │ │ $this->process->execute('git branch --no-color --no-abbrev -v', $output, $this->repoDir);
│ │ │ foreach ($this->process->splitLines($output) as $branch) {
│ │ │ if ($branch && !preg_match('{^ *[^/]+/HEAD }', $branch)) {
│ │ │ - if (preg_match('{^(?:\* )? *(\S+) *([a-f0-9]+)(?: .*)?$}', $branch, $match)) {
│ │ │ + if (preg_match('{^(?:\* )? *(\S+) *([a-f0-9]+)(?: .*)?$}', $branch, $match) && $match[1][0] !== '-') {
│ │ │ $branches[$match[1]] = $match[2];
│ │ │ }
│ │ │ }
│ │ │ }
│ │ │
│ │ │ $this->branches = $branches;
│ │ │ }
│ │ ├── ./usr/share/php/Composer/Repository/Vcs/HgDriver.php
│ │ │ @@ -112,15 +112,19 @@
│ │ │ }
│ │ │
│ │ │ /**
│ │ │ * {@inheritdoc}
│ │ │ */
│ │ │ public function getFileContent($file, $identifier)
│ │ │ {
│ │ │ - $resource = sprintf('hg cat -r %s %s', ProcessExecutor::escape($identifier), ProcessExecutor::escape($file));
│ │ │ + if (isset($identifier[0]) && $identifier[0] === '-') {
│ │ │ + throw new \RuntimeException('Invalid hg identifier detected. Identifier must not start with a -, given: ' . $identifier);
│ │ │ + }
│ │ │ +
│ │ │ + $resource = sprintf('hg cat -r %s -- %s', ProcessExecutor::escape($identifier), ProcessExecutor::escape($file));
│ │ │ $this->process->execute($resource, $content, $this->repoDir);
│ │ │
│ │ │ if (!trim($content)) {
│ │ │ return;
│ │ │ }
│ │ │
│ │ │ return $content;
│ │ │ @@ -172,22 +176,22 @@
│ │ │ {
│ │ │ if (null === $this->branches) {
│ │ │ $branches = array();
│ │ │ $bookmarks = array();
│ │ │
│ │ │ $this->process->execute('hg branches', $output, $this->repoDir);
│ │ │ foreach ($this->process->splitLines($output) as $branch) {
│ │ │ - if ($branch && preg_match('(^([^\s]+)\s+\d+:([a-f0-9]+))', $branch, $match)) {
│ │ │ + if ($branch && preg_match('(^([^\s]+)\s+\d+:([a-f0-9]+))', $branch, $match) && $match[1][0] !== '-') {
│ │ │ $branches[$match[1]] = $match[2];
│ │ │ }
│ │ │ }
│ │ │
│ │ │ $this->process->execute('hg bookmarks', $output, $this->repoDir);
│ │ │ foreach ($this->process->splitLines($output) as $branch) {
│ │ │ - if ($branch && preg_match('(^(?:[\s*]*)([^\s]+)\s+\d+:(.*)$)', $branch, $match)) {
│ │ │ + if ($branch && preg_match('(^(?:[\s*]*)([^\s]+)\s+\d+:(.*)$)', $branch, $match) && $match[1][0] !== '-') {
│ │ │ $bookmarks[$match[1]] = $match[2];
│ │ │ }
│ │ │ }
│ │ │
│ │ │ // Branches will have preference over bookmarks
│ │ │ $this->branches = array_merge($bookmarks, $branches);
│ │ │ }
│ │ ├── ./usr/share/php/Composer/Util/RemoteFilesystem.php
│ │ │ @@ -270,15 +270,15 @@
│ │ │ unset($tempAdditionalOptions);
│ │ │
│ │ │ $origFileUrl = $fileUrl;
│ │ │
│ │ │ if (isset($options['github-token'])) {
│ │ │ // only add the access_token if it is actually a github URL (in case we were redirected to S3)
│ │ │ if (preg_match('{^https?://([a-z0-9-]+\.)*github\.com/}', $fileUrl)) {
│ │ │ - $fileUrl .= (false === strpos($fileUrl, '?') ? '?' : '&') . 'access_token='.$options['github-token'];
│ │ │ + $options['http']['header'][] = 'Authorization: token '.$options['github-token'];
│ │ │ }
│ │ │ unset($options['github-token']);
│ │ │ }
│ │ │
│ │ │ if (isset($options['gitlab-token'])) {
│ │ │ $fileUrl .= (false === strpos($fileUrl, '?') ? '?' : '&') . 'access_token='.$options['gitlab-token'];
│ │ │ unset($options['gitlab-token']);
signature.asc
Description: PGP signature
