--- Begin Message ---
Package: release.debian.org
Severity: normal
Tags: bullseye
User: release.debian....@packages.debian.org
Usertags: pu
X-Debbugs-Cc: pkg-php-p...@lists.alioth.debian.org, t...@security.debian.org
[ Reason ]
I’d like to address CVE-2022-24828 that has been tagged as no-dsa. Some
people may also wish to see #989315 fixed (it was reported twice), and
the fix is trivial, so I’m proposing a fix for it too.
[ Impact ]
The security fix is worth it, the GitHub token pattern fix is useful for
people using this feature.
[ Tests ]
I had to also checkout a file used for the updated testsuite that
passes. I’m not using the Github feature, but the regex fix looks pretty
obvious.
[ Risks ]
I’ve also provided the diffoscope output, showing probably better the
trival changes.
[ Checklist ]
[x] *all* changes are documented in the d/changelog
[x] I reviewed all changes and I approve them
[x] attach debdiff against the package in (old)stable
[x] the issue is verified as fixed in unstable
Regards
Thanks in advance.
David
diff --git a/debian/changelog b/debian/changelog
index 4498422ae..51613d0d9 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,11 @@
+composer (2.0.9-2+deb11u1) bullseye; urgency=medium
+
+ * Fix code injection vulnerability [CVE-2022-24828] (Closes: #1009960)
+ * Update GitHub token pattern (Closes: #989315)
+ * Checkout ProcessExecutorMock.php needed for updated tests
+
+ -- David Prévot <taf...@debian.org> Sun, 29 May 2022 11:55:56 +0200
+
composer (2.0.9-2) unstable; urgency=medium
* Use debian/bullseye branch
diff --git a/debian/patches/0010-Merge-pull-request-from-GHSA-x7cr-6qr6-2hh6.patch b/debian/patches/0010-Merge-pull-request-from-GHSA-x7cr-6qr6-2hh6.patch
new file mode 100644
index 000000000..02fd68fe5
--- /dev/null
+++ b/debian/patches/0010-Merge-pull-request-from-GHSA-x7cr-6qr6-2hh6.patch
@@ -0,0 +1,230 @@
+From: Stephan <glaubi...@users.noreply.github.com>
+Date: Wed, 13 Apr 2022 14:54:58 +0100
+Subject: Merge pull request from GHSA-x7cr-6qr6-2hh6
+
+* GitDriver: filter branch names starting with a - character
+
+* GitDriver: getFileContent prevent identifiers starting with a -
+
+* HgDriver: prevent invalid identifiers and prevent file from running commands
+
+* HgDriver: filter branches starting with a - character
+
+Origin: backport, https://github.com/composer/composer/commit/2c40c53637c5c7e43fff7c09d3d324d632734709
+Bug-Debian: https://bugs.debian.org/1009960
+Bug-Debian: https://security-tracker.debian.org/tracker/CVE-2022-24828
+---
+ src/Composer/Repository/Vcs/GitDriver.php | 6 +-
+ src/Composer/Repository/Vcs/HgDriver.php | 10 ++-
+ .../Composer/Test/Repository/Vcs/GitDriverTest.php | 81 ++++++++++++++++++++++
+ .../Composer/Test/Repository/Vcs/HgDriverTest.php | 46 ++++++++++++
+ 4 files changed, 139 insertions(+), 4 deletions(-)
+ create mode 100644 tests/Composer/Test/Repository/Vcs/GitDriverTest.php
+
+diff --git a/src/Composer/Repository/Vcs/GitDriver.php b/src/Composer/Repository/Vcs/GitDriver.php
+index 70400e8..577477d 100644
+--- a/src/Composer/Repository/Vcs/GitDriver.php
++++ b/src/Composer/Repository/Vcs/GitDriver.php
+@@ -130,6 +130,10 @@ class GitDriver extends VcsDriver
+ */
+ public function getFileContent($file, $identifier)
+ {
++ if (isset($identifier[0]) && $identifier[0] === '-') {
++ throw new \RuntimeException('Invalid git identifier detected. Identifier must not start with a -, given: ' . $identifier);
++ }
++
+ $resource = sprintf('%s:%s', ProcessExecutor::escape($identifier), ProcessExecutor::escape($file));
+ $this->process->execute(sprintf('git show %s', $resource), $content, $this->repoDir);
+
+@@ -183,7 +187,7 @@ class GitDriver extends VcsDriver
+ $this->process->execute('git branch --no-color --no-abbrev -v', $output, $this->repoDir);
+ foreach ($this->process->splitLines($output) as $branch) {
+ if ($branch && !preg_match('{^ *[^/]+/HEAD }', $branch)) {
+- if (preg_match('{^(?:\* )? *(\S+) *([a-f0-9]+)(?: .*)?$}', $branch, $match)) {
++ if (preg_match('{^(?:\* )? *(\S+) *([a-f0-9]+)(?: .*)?$}', $branch, $match) && $match[1][0] !== '-') {
+ $branches[$match[1]] = $match[2];
+ }
+ }
+diff --git a/src/Composer/Repository/Vcs/HgDriver.php b/src/Composer/Repository/Vcs/HgDriver.php
+index f3b0e6c..b154653 100644
+--- a/src/Composer/Repository/Vcs/HgDriver.php
++++ b/src/Composer/Repository/Vcs/HgDriver.php
+@@ -121,7 +121,11 @@ class HgDriver extends VcsDriver
+ */
+ public function getFileContent($file, $identifier)
+ {
+- $resource = sprintf('hg cat -r %s %s', ProcessExecutor::escape($identifier), ProcessExecutor::escape($file));
++ if (isset($identifier[0]) && $identifier[0] === '-') {
++ throw new \RuntimeException('Invalid hg identifier detected. Identifier must not start with a -, given: ' . $identifier);
++ }
++
++ $resource = sprintf('hg cat -r %s -- %s', ProcessExecutor::escape($identifier), ProcessExecutor::escape($file));
+ $this->process->execute($resource, $content, $this->repoDir);
+
+ if (!trim($content)) {
+@@ -181,14 +185,14 @@ class HgDriver extends VcsDriver
+
+ $this->process->execute('hg branches', $output, $this->repoDir);
+ foreach ($this->process->splitLines($output) as $branch) {
+- if ($branch && preg_match('(^([^\s]+)\s+\d+:([a-f0-9]+))', $branch, $match)) {
++ if ($branch && preg_match('(^([^\s]+)\s+\d+:([a-f0-9]+))', $branch, $match) && $match[1][0] !== '-') {
+ $branches[$match[1]] = $match[2];
+ }
+ }
+
+ $this->process->execute('hg bookmarks', $output, $this->repoDir);
+ foreach ($this->process->splitLines($output) as $branch) {
+- if ($branch && preg_match('(^(?:[\s*]*)([^\s]+)\s+\d+:(.*)$)', $branch, $match)) {
++ if ($branch && preg_match('(^(?:[\s*]*)([^\s]+)\s+\d+:(.*)$)', $branch, $match) && $match[1][0] !== '-') {
+ $bookmarks[$match[1]] = $match[2];
+ }
+ }
+diff --git a/tests/Composer/Test/Repository/Vcs/GitDriverTest.php b/tests/Composer/Test/Repository/Vcs/GitDriverTest.php
+new file mode 100644
+index 0000000..eebe5da
+--- /dev/null
++++ b/tests/Composer/Test/Repository/Vcs/GitDriverTest.php
+@@ -0,0 +1,81 @@
++<?php
++
++namespace Composer\Test\Repository\Vcs;
++
++use Composer\Config;
++use Composer\Repository\Vcs\GitDriver;
++use Composer\Test\Mock\ProcessExecutorMock;
++use Composer\Test\TestCase;
++
++class GitDriverTest extends TestCase
++{
++ /** @var Config */
++ private $config;
++ /** @var string */
++ private $home;
++
++ public function setUp(): void
++ {
++ $this->home = self::getUniqueTmpDirectory();
++ $this->config = new Config();
++ $this->config->merge(array(
++ 'config' => array(
++ 'home' => $this->home,
++ ),
++ ));
++ }
++
++ public function testGetBranchesFilterInvalidBranchNames()
++ {
++ $process = new ProcessExecutorMock;
++ $io = $this->getMockBuilder('Composer\IO\IOInterface')->getMock();
++
++ $driver = new GitDriver(array('url' => 'https://example.org/acme.git'), $io, $this->config, $this->getMockBuilder('Composer\Util\HttpDownloader')->disableOriginalConstructor()->getMock(), $process);
++ $this->setRepoDir($driver, $this->home);
++
++ // Branches starting with a - character are not valid git branches names
++ // Still assert that they get filtered to prevent issues later on
++ $stdout = <<<GIT
++* main 089681446ba44d6d9004350192486f2ceb4eaa06 commit
++ 2.2 12681446ba44d6d9004350192486f2ceb4eaa06 commit
++ -h 089681446ba44d6d9004350192486f2ceb4eaa06 commit
++GIT;
++
++ $process
++ ->expects(array(array(
++ 'cmd' => 'git branch --no-color --no-abbrev -v',
++ 'stdout' => $stdout,
++ )));
++
++ $branches = $driver->getBranches();
++ $this->assertSame(array(
++ 'main' => '089681446ba44d6d9004350192486f2ceb4eaa06',
++ '2.2' => '12681446ba44d6d9004350192486f2ceb4eaa06',
++ ), $branches);
++ }
++
++ public function testFileGetContentInvalidIdentifier()
++ {
++ $this->expectException('\RuntimeException');
++
++ $process = new ProcessExecutorMock;
++ $io = $this->getMockBuilder('Composer\IO\IOInterface')->getMock();
++ $driver = new GitDriver(array('url' => 'https://example.org/acme.git'), $io, $this->config, $this->getMockBuilder('Composer\Util\HttpDownloader')->disableOriginalConstructor()->getMock(), $process);
++
++ $this->assertNull($driver->getFileContent('file.txt', 'h'));
++
++ $driver->getFileContent('file.txt', '-h');
++ }
++
++ /**
++ * @param GitDriver $driver
++ * @param string $path
++ */
++ private function setRepoDir($driver, $path)
++ {
++ $reflectionClass = new \ReflectionClass($driver);
++ $reflectionProperty = $reflectionClass->getProperty('repoDir');
++ $reflectionProperty->setAccessible(true);
++ $reflectionProperty->setValue($driver, $path);
++ }
++}
+diff --git a/tests/Composer/Test/Repository/Vcs/HgDriverTest.php b/tests/Composer/Test/Repository/Vcs/HgDriverTest.php
+index c22439b..50138f0 100644
+--- a/tests/Composer/Test/Repository/Vcs/HgDriverTest.php
++++ b/tests/Composer/Test/Repository/Vcs/HgDriverTest.php
+@@ -13,6 +13,7 @@
+ namespace Composer\Test\Repository\Vcs;
+
+ use Composer\Repository\Vcs\HgDriver;
++use Composer\Test\Mock\ProcessExecutorMock;
+ use Composer\Test\TestCase;
+ use Composer\Util\Filesystem;
+ use Composer\Config;
+@@ -64,4 +65,49 @@ class HgDriverTest extends TestCase
+ array('https://u...@bitbucket.org/user/repo'),
+ );
+ }
++
++ public function testGetBranchesFilterInvalidBranchNames()
++ {
++ $process = new ProcessExecutorMock;
++
++ $driver = new HgDriver(array('url' => 'https://example.org/acme.git'), $this->io, $this->config, $this->getMockBuilder('Composer\Util\HttpDownloader')->disableOriginalConstructor()->getMock(), $process);
++
++ $stdout = <<<HG_BRANCHES
++default 1:dbf6c8acb640
++--help 1:dbf6c8acb640
++HG_BRANCHES;
++
++ $stdout1 = <<<HG_BOOKMARKS
++help 1:dbf6c8acb641
++--help 1:dbf6c8acb641
++
++HG_BOOKMARKS;
++
++ $process
++ ->expects(array(array(
++ 'cmd' => 'hg branches',
++ 'stdout' => $stdout,
++ ), array(
++ 'cmd' => 'hg bookmarks',
++ 'stdout' => $stdout1,
++ )));
++
++ $branches = $driver->getBranches();
++ $this->assertSame(array(
++ 'help' => 'dbf6c8acb641',
++ 'default' => 'dbf6c8acb640',
++ ), $branches);
++ }
++
++ public function testFileGetContentInvalidIdentifier()
++ {
++ $this->expectException('\RuntimeException');
++
++ $process = new ProcessExecutorMock;
++ $driver = new HgDriver(array('url' => 'https://example.org/acme.git'), $this->io, $this->config, $this->getMockBuilder('Composer\Util\HttpDownloader')->disableOriginalConstructor()->getMock(), $process);
++
++ $this->assertNull($driver->getFileContent('file.txt', 'h'));
++
++ $driver->getFileContent('file.txt', '-h');
++ }
+ }
diff --git a/debian/patches/0011-Update-GitHub-token-pattern.patch b/debian/patches/0011-Update-GitHub-token-pattern.patch
new file mode 100644
index 000000000..2db6ea201
--- /dev/null
+++ b/debian/patches/0011-Update-GitHub-token-pattern.patch
@@ -0,0 +1,26 @@
+From: Ayesh Karunaratne <ay...@aye.sh>
+Date: Sun, 7 Mar 2021 00:40:32 +0700
+Subject: Update GitHub token pattern
+
+GitHub is updating the format of auth tokens from `a-z0-9` to `A-Za-z0-9` ([notice](https://github.blog/changelog/2021-03-04-authentication-token-format-updates/)).
+I'm not sure why `.` is allowed, but I dare not to remove it. In this PR, the token validation regex is updated to allow `A-Za-z0-9` instead of the current all lower-case `a-z` and disallowed `_`.
+
+Origin: upstream, https://github.com/composer/composer/commit/dc83ba93f3d8a35629f9a387632e8cd373a144d0
+Bug-Debian: https://bugs.debian.org/989315
+---
+ src/Composer/IO/BaseIO.php | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/src/Composer/IO/BaseIO.php b/src/Composer/IO/BaseIO.php
+index e66360e..9c8bf70 100644
+--- a/src/Composer/IO/BaseIO.php
++++ b/src/Composer/IO/BaseIO.php
+@@ -124,7 +124,7 @@ abstract class BaseIO implements IOInterface
+ }
+
+ foreach ($githubOauth as $domain => $token) {
+- if (!preg_match('{^[.a-z0-9]+$}', $token)) {
++ if (!preg_match('{^[.A-Za-z0-9_]+$}', $token)) {
+ throw new \UnexpectedValueException('Your github oauth token for '.$domain.' contains invalid characters: "'.$token.'"');
+ }
+ $this->checkAndSetAuthentication($domain, $token, 'x-oauth-basic');
diff --git a/debian/patches/0012-Checkout-ProcessExecutorMock.php-needed-for-updated-.patch b/debian/patches/0012-Checkout-ProcessExecutorMock.php-needed-for-updated-.patch
new file mode 100644
index 000000000..74d86b951
--- /dev/null
+++ b/debian/patches/0012-Checkout-ProcessExecutorMock.php-needed-for-updated-.patch
@@ -0,0 +1,188 @@
+From: =?utf-8?q?David_Pr=C3=A9vot?= <taf...@debian.org>
+Date: Sun, 29 May 2022 11:02:37 +0200
+Subject: Checkout ProcessExecutorMock.php needed for updated tests
+
+git checkout 2c40c53637c5c7e43fff7c09d3d324d632734709 tests/Composer/Test/Mock/ProcessExecutorMock.php
+---
+ tests/Composer/Test/Mock/ProcessExecutorMock.php | 172 +++++++++++++++++++++++
+ 1 file changed, 172 insertions(+)
+ create mode 100644 tests/Composer/Test/Mock/ProcessExecutorMock.php
+
+diff --git a/tests/Composer/Test/Mock/ProcessExecutorMock.php b/tests/Composer/Test/Mock/ProcessExecutorMock.php
+new file mode 100644
+index 0000000..247f815
+--- /dev/null
++++ b/tests/Composer/Test/Mock/ProcessExecutorMock.php
+@@ -0,0 +1,172 @@
++<?php
++
++/*
++ * This file is part of Composer.
++ *
++ * (c) Nils Adermann <nader...@naderman.de>
++ * Jordi Boggiano <j.boggi...@seld.be>
++ *
++ * For the full copyright and license information, please view the LICENSE
++ * file that was distributed with this source code.
++ */
++
++namespace Composer\Test\Mock;
++
++use Composer\Util\ProcessExecutor;
++use Composer\Util\Platform;
++use PHPUnit\Framework\TestCase;
++use PHPUnit\Framework\AssertionFailedError;
++use Symfony\Component\Process\Process;
++use React\Promise\Promise;
++
++/**
++ * @author Jordi Boggiano <j.boggi...@seld.be>
++ */
++class ProcessExecutorMock extends ProcessExecutor
++{
++ /**
++ * @var array<array{cmd: string, return: int, stdout: string, stderr: string, callback: ?callable}>
++ */
++ private $expectations = array();
++ /**
++ * @var bool
++ */
++ private $strict = false;
++ /**
++ * @var array{return: int, stdout: string, stderr: string}
++ */
++ private $defaultHandler = array('return' => 0, 'stdout' => '', 'stderr' => '');
++ /**
++ * @var string[]
++ */
++ private $log = array();
++
++ /**
++ * @param array<string|array{cmd: string, return?: int, stdout?: string, stderr?: string, callback?: callable}> $expectations
++ * @param bool $strict set to true if you want to provide *all* expected commands, and not just a subset you are interested in testing
++ * @param array{return: int, stdout?: string, stderr?: string} $defaultHandler default command handler for undefined commands if not in strict mode
++ *
++ * @return void
++ */
++ public function expects(array $expectations, $strict = false, array $defaultHandler = array('return' => 0, 'stdout' => '', 'stderr' => ''))
++ {
++ $default = array('cmd' => '', 'return' => 0, 'stdout' => '', 'stderr' => '', 'callback' => null);
++ $this->expectations = array_map(function ($expect) use ($default) {
++ if (is_string($expect)) {
++ $expect = array('cmd' => $expect);
++ } elseif ($diff = array_diff_key(array_merge($default, $expect), $default)) {
++ throw new \UnexpectedValueException('Unexpected keys in process execution step: '.implode(', ', array_keys($diff)));
++ }
++
++ return array_merge($default, $expect);
++ }, $expectations);
++ $this->strict = $strict;
++ $this->defaultHandler = array_merge($this->defaultHandler, $defaultHandler);
++ }
++
++ /** @return void */
++ public function assertComplete(TestCase $testCase)
++ {
++ if ($this->expectations) {
++ $expectations = array_map(function ($expect) {
++ return $expect['cmd'];
++ }, $this->expectations);
++ throw new AssertionFailedError(
++ 'There are still '.count($this->expectations).' expected process calls which have not been consumed:'.PHP_EOL.
++ implode(PHP_EOL, $expectations).PHP_EOL.PHP_EOL.
++ 'Received calls:'.PHP_EOL.implode(PHP_EOL, $this->log)
++ );
++ }
++
++ $testCase->assertTrue(true);
++ }
++
++ public function execute($command, &$output = null, $cwd = null)
++ {
++ if (func_num_args() > 1) {
++ return $this->doExecute($command, $cwd, false, $output);
++ }
++
++ return $this->doExecute($command, $cwd, false);
++ }
++
++ public function executeTty($command, $cwd = null)
++ {
++ if (Platform::isTty()) {
++ return $this->doExecute($command, $cwd, true);
++ }
++
++ return $this->doExecute($command, $cwd, false);
++ }
++
++ /**
++ * @param string $command
++ * @param string $cwd
++ * @param bool $tty
++ * @param callable $output
++ * @return mixed
++ */
++ private function doExecute($command, $cwd, $tty, &$output = null)
++ {
++ $this->captureOutput = func_num_args() > 3;
++ $this->errorOutput = '';
++
++ $callback = is_callable($output) ? $output : array($this, 'outputHandler');
++
++ $this->log[] = $command;
++
++ if ($this->expectations && $command === $this->expectations[0]['cmd']) {
++ $expect = array_shift($this->expectations);
++ $stdout = $expect['stdout'];
++ $stderr = $expect['stderr'];
++ $return = $expect['return'];
++ if (isset($expect['callback'])) {
++ call_user_func($expect['callback']);
++ }
++ } elseif (!$this->strict) {
++ $stdout = $this->defaultHandler['stdout'];
++ $stderr = $this->defaultHandler['stderr'];
++ $return = $this->defaultHandler['return'];
++ } else {
++ throw new AssertionFailedError(
++ 'Received unexpected command "'.$command.'" in "'.$cwd.'"'.PHP_EOL.
++ ($this->expectations ? 'Expected "'.$this->expectations[0]['cmd'].'" at this point.' : 'Expected no more calls at this point.').PHP_EOL.
++ 'Received calls:'.PHP_EOL.implode(PHP_EOL, array_slice($this->log, 0, -1))
++ );
++ }
++
++ if ($stdout) {
++ call_user_func($callback, Process::STDOUT, $stdout);
++ }
++ if ($stderr) {
++ call_user_func($callback, Process::ERR, $stderr);
++ }
++
++ if ($this->captureOutput && !is_callable($output)) {
++ $output = $stdout;
++ }
++
++ $this->errorOutput = $stderr;
++
++ return $return;
++ }
++
++ public function executeAsync($command, $cwd = null)
++ {
++ $resolver = function ($resolve, $reject) {
++ // TODO strictly speaking this should resolve with a mock Process instance here
++ $resolve();
++ };
++
++ $canceler = function () {
++ throw new \RuntimeException('Aborted process');
++ };
++
++ return new Promise($resolver, $canceler);
++ }
++
++ public function getErrorOutput()
++ {
++ return $this->errorOutput;
++ }
++}
diff --git a/debian/patches/series b/debian/patches/series
index fe5b35053..e3c4bb6f7 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -7,3 +7,6 @@
0007-Use-expectException-instead-of-setExpectedException.patch
0008-Compatibility-with-recent-PHPUnit-8.patch
0009-Merge-pull-request-from-GHSA-h5h8-pc6h-jvvx.patch
+0010-Merge-pull-request-from-GHSA-x7cr-6qr6-2hh6.patch
+0011-Update-GitHub-token-pattern.patch
+0012-Checkout-ProcessExecutorMock.php-needed-for-updated-.patch
--- ../composer_2.0.9-2_all.deb
+++ ../composer_2.0.9-2+deb11u1_all.deb
├── file list
│ @@ -1,3 +1,3 @@
│ --rw-r--r-- 0 0 0 4 2021-04-27 22:20:52.000000 debian-binary
│ --rw-r--r-- 0 0 0 9020 2021-04-27 22:20:52.000000 control.tar.xz
│ --rw-r--r-- 0 0 0 398172 2021-04-27 22:20:52.000000 data.tar.xz
│ +-rw-r--r-- 0 0 0 4 2022-05-29 09:55:56.000000 debian-binary
│ +-rw-r--r-- 0 0 0 9028 2022-05-29 09:55:56.000000 control.tar.xz
│ +-rw-r--r-- 0 0 0 398364 2022-05-29 09:55:56.000000 data.tar.xz
├── control.tar.xz
│ ├── control.tar
│ │ ├── file list
│ │ │ @@ -1,3 +1,3 @@
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./
│ │ │ --rw-r--r-- 0 root (0) root (0) 1060 2021-04-27 22:20:52.000000 ./control
│ │ │ --rw-r--r-- 0 root (0) root (0) 26748 2021-04-27 22:20:52.000000 ./md5sums
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./
│ │ │ +-rw-r--r-- 0 root (0) root (0) 1068 2022-05-29 09:55:56.000000 ./control
│ │ │ +-rw-r--r-- 0 root (0) root (0) 26748 2022-05-29 09:55:56.000000 ./md5sums
│ │ ├── ./control
│ │ │ @@ -1,12 +1,12 @@
│ │ │ Package: composer
│ │ │ -Version: 2.0.9-2
│ │ │ +Version: 2.0.9-2+deb11u1
│ │ │ Architecture: all
│ │ │ Maintainer: Debian PHP PEAR Maintainers <pkg-php-p...@lists.alioth.debian.org>
│ │ │ -Installed-Size: 2244
│ │ │ +Installed-Size: 2245
│ │ │ Depends: php-cli, php-common, php-composer-ca-bundle (>= 1.0), php-composer-ca-bundle (<< 2~~), php-composer-semver (>= 3.0), php-composer-semver (<< 4~~), php-composer-spdx-licenses (>= 1.2), php-composer-spdx-licenses (<< 2~~), php-composer-xdebug-handler (>= 1.1), php-composer-xdebug-handler (<< 2~~), php-json-schema (>= 5.2.10), php-json-schema (<< 6~~), php-psr-log (>= 1.0), php-psr-log (<< 2~~), jsonlint (>= 1.4), jsonlint (<< 2~~), php-symfony-console, php-symfony-filesystem, php-symfony-finder, php-symfony-process, php-react-promise
│ │ │ Recommends: git, unzip
│ │ │ Suggests: fossil, mercurial, subversion, php-zip
│ │ │ Section: php
│ │ │ Priority: optional
│ │ │ Homepage: https://getcomposer.org/
│ │ │ Description: dependency manager for PHP
│ │ ├── ./md5sums
│ │ │ ├── ./md5sums
│ │ │ │┄ Files differ
├── data.tar.xz
│ ├── data.tar
│ │ ├── file list
│ │ │ @@ -1,79 +1,79 @@
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/bin/
│ │ │ --rwxr-xr-x 0 root (0) root (0) 1855 2021-04-27 22:20:52.000000 ./usr/bin/composer
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/doc/
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/doc/composer/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/bin/
│ │ │ +-rwxr-xr-x 0 root (0) root (0) 1855 2022-05-29 09:55:56.000000 ./usr/bin/composer
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/doc/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/doc/composer/
│ │ │ -rw-r--r-- 0 root (0) root (0) 2457 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/00-intro.md.gz
│ │ │ -rw-r--r-- 0 root (0) root (0) 4653 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/01-basic-usage.md.gz
│ │ │ -rw-r--r-- 0 root (0) root (0) 2292 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/02-libraries.md.gz
│ │ │ -rw-r--r-- 0 root (0) root (0) 12394 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/03-cli.md.gz
│ │ │ -rw-r--r-- 0 root (0) root (0) 10201 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/04-schema.md.gz
│ │ │ -rw-r--r-- 0 root (0) root (0) 7492 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/05-repositories.md.gz
│ │ │ -rw-r--r-- 0 root (0) root (0) 4687 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/06-config.md.gz
│ │ │ -rw-r--r-- 0 root (0) root (0) 1806 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/07-runtime.md.gz
│ │ │ -rw-r--r-- 0 root (0) root (0) 1323 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/08-community.md
│ │ │ -rw-r--r-- 0 root (0) root (0) 2262 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/README.md
│ │ │ -rw-r--r-- 0 root (0) root (0) 4411 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/UPGRADE-2.0.md.gz
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/doc/composer/articles/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/doc/composer/articles/
│ │ │ -rw-r--r-- 0 root (0) root (0) 3996 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/articles/aliases.md
│ │ │ -rw-r--r-- 0 root (0) root (0) 2795 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/articles/authentication-for-private-packages.md.gz
│ │ │ -rw-r--r-- 0 root (0) root (0) 1738 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/articles/autoloader-optimization.md.gz
│ │ │ -rw-r--r-- 0 root (0) root (0) 2442 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/articles/custom-installers.md.gz
│ │ │ -rw-r--r-- 0 root (0) root (0) 4358 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/articles/handling-private-packages.md.gz
│ │ │ -rw-r--r-- 0 root (0) root (0) 3746 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/articles/plugins.md.gz
│ │ │ -rw-r--r-- 0 root (0) root (0) 3215 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/articles/repository-priorities.md
│ │ │ -rw-r--r-- 0 root (0) root (0) 2966 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/articles/resolving-merge-conflicts.md
│ │ │ -rw-r--r-- 0 root (0) root (0) 4087 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/articles/scripts.md.gz
│ │ │ -rw-r--r-- 0 root (0) root (0) 5491 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/articles/troubleshooting.md.gz
│ │ │ -rw-r--r-- 0 root (0) root (0) 3401 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/articles/vendor-binaries.md
│ │ │ -rw-r--r-- 0 root (0) root (0) 4390 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/articles/versions.md.gz
│ │ │ --rw-r--r-- 0 root (0) root (0) 4415 2021-04-27 22:20:52.000000 ./usr/share/doc/composer/changelog.Debian.gz
│ │ │ +-rw-r--r-- 0 root (0) root (0) 4529 2022-05-29 09:55:56.000000 ./usr/share/doc/composer/changelog.Debian.gz
│ │ │ -rw-r--r-- 0 root (0) root (0) 22982 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/changelog.gz
│ │ │ --rw-r--r-- 0 root (0) root (0) 2919 2021-04-27 22:10:47.000000 ./usr/share/doc/composer/copyright
│ │ │ +-rw-r--r-- 0 root (0) root (0) 2919 2022-05-29 09:00:09.000000 ./usr/share/doc/composer/copyright
│ │ │ drwxr-xr-x 0 root (0) root (0) 0 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/dev/
│ │ │ -rw-r--r-- 0 root (0) root (0) 1280 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/dev/DefaultPolicy.md
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/doc/composer/faqs/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/doc/composer/faqs/
│ │ │ -rw-r--r-- 0 root (0) root (0) 2219 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/faqs/how-do-i-install-a-package-to-a-custom-path-for-my-framework.md
│ │ │ -rw-r--r-- 0 root (0) root (0) 1440 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/faqs/how-to-install-composer-programmatically.md
│ │ │ -rw-r--r-- 0 root (0) root (0) 938 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/faqs/how-to-install-untrusted-packages-safely.md
│ │ │ -rw-r--r-- 0 root (0) root (0) 1704 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/faqs/should-i-commit-the-dependencies-in-my-vendor-directory.md
│ │ │ -rw-r--r-- 0 root (0) root (0) 153 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/faqs/which-version-numbering-system-does-composer-itself-use.md
│ │ │ -rw-r--r-- 0 root (0) root (0) 1069 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/faqs/why-are-unbound-version-constraints-a-bad-idea.md
│ │ │ -rw-r--r-- 0 root (0) root (0) 989 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/faqs/why-are-version-constraints-combining-comparisons-and-wildcards-a-bad-idea.md
│ │ │ -rw-r--r-- 0 root (0) root (0) 2106 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/faqs/why-can't-composer-load-repositories-recursively.md
│ │ │ drwxr-xr-x 0 root (0) root (0) 0 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/fixtures/
│ │ │ -rw-r--r-- 0 root (0) root (0) 1012 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/fixtures/fixtures.md
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/doc/composer/fixtures/repo-composer-plain/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/doc/composer/fixtures/repo-composer-plain/
│ │ │ -rw-r--r-- 0 root (0) root (0) 582 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/fixtures/repo-composer-plain/packages.json.gz
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/doc/composer/fixtures/repo-composer-with-providers/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/doc/composer/fixtures/repo-composer-with-providers/
│ │ │ drwxr-xr-x 0 root (0) root (0) 0 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/fixtures/repo-composer-with-providers/p/
│ │ │ drwxr-xr-x 0 root (0) root (0) 0 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/fixtures/repo-composer-with-providers/p/bar/
│ │ │ -rw-r--r-- 0 root (0) root (0) 1656 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/fixtures/repo-composer-with-providers/p/bar/baz$923363b3c22e73abb2e3fd891c8156dd4d0821a97fd3e428bc910833e3e46dbe.json
│ │ │ drwxr-xr-x 0 root (0) root (0) 0 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/fixtures/repo-composer-with-providers/p/foo/
│ │ │ -rw-r--r-- 0 root (0) root (0) 2607 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/fixtures/repo-composer-with-providers/p/foo/bar$4baabb3303afa3e34a4d3af18fb138e5f3b79029c1f8d9ab5b477ea15776ba0a.json
│ │ │ drwxr-xr-x 0 root (0) root (0) 0 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/fixtures/repo-composer-with-providers/p/gar/
│ │ │ -rw-r--r-- 0 root (0) root (0) 1614 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/fixtures/repo-composer-with-providers/p/gar/nix$5d210670cb46c8364c8e3fb449967b9bea558b971e5b082f330ae4f1d484c321.json
│ │ │ -rw-r--r-- 0 root (0) root (0) 516 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/fixtures/repo-composer-with-providers/p/provider-active$1893a061e579543822389ecd12d791c612db0c05e22d90e9286e233cacd86ed8.json
│ │ │ drwxr-xr-x 0 root (0) root (0) 0 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/fixtures/repo-composer-with-providers/p/qux/
│ │ │ -rw-r--r-- 0 root (0) root (0) 632 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/fixtures/repo-composer-with-providers/p/qux/quux$c142d1a07ca354be46b613f59f1d601923a5a00ccc5fcce50a77ecdd461eb72d.json
│ │ │ -rw-r--r-- 0 root (0) root (0) 308 2021-01-27 15:09:27.000000 ./usr/share/doc/composer/fixtures/repo-composer-with-providers/packages.json
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/man/
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/man/man1/
│ │ │ --rw-r--r-- 0 root (0) root (0) 1338 2021-04-27 22:20:52.000000 ./usr/share/man/man1/composer.1.gz
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/php/
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/Autoload/
│ │ │ --rw-r--r-- 0 root (0) root (0) 45789 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/Autoload/AutoloadGenerator.php
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/man/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/man/man1/
│ │ │ +-rw-r--r-- 0 root (0) root (0) 1338 2022-05-29 09:55:56.000000 ./usr/share/man/man1/composer.1.gz
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/php/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/Autoload/
│ │ │ +-rw-r--r-- 0 root (0) root (0) 45789 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/Autoload/AutoloadGenerator.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 14362 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Autoload/ClassLoader.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 13066 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Autoload/ClassMapGenerator.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 8329 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Cache.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/Command/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/Command/
│ │ │ -rw-r--r-- 0 root (0) root (0) 1172 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Command/AboutCommand.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 7035 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Command/ArchiveCommand.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 6726 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Command/BaseCommand.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 9754 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Command/BaseDependencyCommand.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 7858 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Command/CheckPlatformReqsCommand.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2225 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Command/ClearCacheCommand.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 32295 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Command/ConfigCommand.php
│ │ │ @@ -98,30 +98,30 @@
│ │ │ -rw-r--r-- 0 root (0) root (0) 24328 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Command/SelfUpdateCommand.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 52650 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Command/ShowCommand.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 8589 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Command/StatusCommand.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 4047 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Command/SuggestsCommand.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 15981 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Command/UpdateCommand.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 7509 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Command/ValidateCommand.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 6814 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Composer.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/Config/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/Config/
│ │ │ -rw-r--r-- 0 root (0) root (0) 2015 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Config/ConfigSourceInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 10330 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Config/JsonConfigSource.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 17305 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Config.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/Console/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/Console/
│ │ │ -rw-r--r-- 0 root (0) root (0) 22370 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Console/Application.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1314 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Console/GithubActionError.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2561 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Console/HtmlOutputFormatter.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/DependencyResolver/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/DependencyResolver/
│ │ │ -rw-r--r-- 0 root (0) root (0) 5684 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/DependencyResolver/Decisions.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 7085 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/DependencyResolver/DefaultPolicy.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2096 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/DependencyResolver/GenericRule.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 706 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/DependencyResolver/LocalRepoTransaction.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 4836 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/DependencyResolver/LockTransaction.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2659 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/DependencyResolver/MultiConflictRule.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/DependencyResolver/Operation/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/DependencyResolver/Operation/
│ │ │ -rw-r--r-- 0 root (0) root (0) 1283 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/DependencyResolver/Operation/InstallOperation.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1289 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/DependencyResolver/Operation/MarkAliasInstalledOperation.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1295 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/DependencyResolver/Operation/MarkAliasUninstalledOperation.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 915 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/DependencyResolver/Operation/OperationInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 787 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/DependencyResolver/Operation/SolverOperation.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1261 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/DependencyResolver/Operation/UninstallOperation.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2833 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/DependencyResolver/Operation/UpdateOperation.php
│ │ │ @@ -138,55 +138,55 @@
│ │ │ -rw-r--r-- 0 root (0) root (0) 1402 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/DependencyResolver/RuleWatchChain.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 6380 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/DependencyResolver/RuleWatchGraph.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2826 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/DependencyResolver/RuleWatchNode.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 26565 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/DependencyResolver/Solver.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 766 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/DependencyResolver/SolverBugException.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 4479 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/DependencyResolver/SolverProblemsException.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 13484 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/DependencyResolver/Transaction.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/Downloader/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/Downloader/
│ │ │ -rw-r--r-- 0 root (0) root (0) 5903 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Downloader/ArchiveDownloader.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 766 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Downloader/ChangeReportInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 15599 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Downloader/DownloadManager.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 3775 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Downloader/DownloaderInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 782 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Downloader/DvcsDownloaderInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 16782 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Downloader/FileDownloader.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 672 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Downloader/FilesystemException.php
│ │ │ --rw-r--r-- 0 root (0) root (0) 4140 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/Downloader/FossilDownloader.php
│ │ │ --rw-r--r-- 0 root (0) root (0) 23738 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/Downloader/GitDownloader.php
│ │ │ --rw-r--r-- 0 root (0) root (0) 1969 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/Downloader/GzipDownloader.php
│ │ │ --rw-r--r-- 0 root (0) root (0) 3179 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/Downloader/HgDownloader.php
│ │ │ +-rw-r--r-- 0 root (0) root (0) 4140 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/Downloader/FossilDownloader.php
│ │ │ +-rw-r--r-- 0 root (0) root (0) 23738 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/Downloader/GitDownloader.php
│ │ │ +-rw-r--r-- 0 root (0) root (0) 1969 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/Downloader/GzipDownloader.php
│ │ │ +-rw-r--r-- 0 root (0) root (0) 3179 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/Downloader/HgDownloader.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 367 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Downloader/MaxFileSizeExceededException.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 9770 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Downloader/PathDownloader.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2992 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Downloader/PerforceDownloader.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1004 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Downloader/PharDownloader.php
│ │ │ --rw-r--r-- 0 root (0) root (0) 2405 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/Downloader/RarDownloader.php
│ │ │ --rw-r--r-- 0 root (0) root (0) 8171 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/Downloader/SvnDownloader.php
│ │ │ +-rw-r--r-- 0 root (0) root (0) 2405 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/Downloader/RarDownloader.php
│ │ │ +-rw-r--r-- 0 root (0) root (0) 8171 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/Downloader/SvnDownloader.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 764 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Downloader/TarDownloader.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1337 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Downloader/TransportException.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 795 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Downloader/VcsCapableDownloaderInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 12336 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Downloader/VcsDownloader.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1001 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Downloader/XzDownloader.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 10718 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Downloader/ZipDownloader.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/EventDispatcher/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/EventDispatcher/
│ │ │ -rw-r--r-- 0 root (0) root (0) 2150 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/EventDispatcher/Event.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 20608 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/EventDispatcher/EventDispatcher.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1553 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/EventDispatcher/EventSubscriberInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 422 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/EventDispatcher/ScriptExecutionException.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/Exception/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/Exception/
│ │ │ -rw-r--r-- 0 root (0) root (0) 422 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Exception/IrrecoverableDownloadException.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 474 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Exception/NoSslException.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 26495 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Factory.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/IO/
│ │ │ --rw-r--r-- 0 root (0) root (0) 8428 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/IO/BaseIO.php
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/IO/
│ │ │ +-rw-r--r-- 0 root (0) root (0) 8432 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/IO/BaseIO.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2604 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/IO/BufferIO.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 10973 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/IO/ConsoleIO.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 7609 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/IO/IOInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2311 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/IO/NullIO.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 9564 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/InstalledVersions.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/Installer/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/Installer/
│ │ │ -rw-r--r-- 0 root (0) root (0) 7014 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Installer/BinaryInstaller.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 731 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Installer/BinaryPresenceInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 22555 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Installer/InstallationManager.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2040 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Installer/InstallerEvent.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 635 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Installer/InstallerEvents.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 4790 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Installer/InstallerInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 10193 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Installer/LibraryInstaller.php
│ │ │ @@ -194,22 +194,22 @@
│ │ │ -rw-r--r-- 0 root (0) root (0) 2602 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Installer/NoopInstaller.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2637 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Installer/PackageEvent.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2020 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Installer/PackageEvents.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 3851 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Installer/PluginInstaller.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 3354 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Installer/ProjectInstaller.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 8433 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Installer/SuggestedPackagesReporter.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 49009 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Installer.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/Json/
│ │ │ --rw-r--r-- 0 root (0) root (0) 10590 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/Json/JsonFile.php
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/Json/
│ │ │ +-rw-r--r-- 0 root (0) root (0) 10590 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/Json/JsonFile.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 4513 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Json/JsonFormatter.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 20929 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Json/JsonManipulator.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 704 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Json/JsonValidationException.php
│ │ │ drwxr-xr-x 0 root (0) root (0) 0 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Package/
│ │ │ -rw-r--r-- 0 root (0) root (0) 10520 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Package/AliasPackage.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/Package/Archiver/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/Package/Archiver/
│ │ │ -rw-r--r-- 0 root (0) root (0) 990 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Package/Archiver/ArchivableFilesFilter.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2899 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Package/Archiver/ArchivableFilesFinder.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 6837 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Package/Archiver/ArchiveManager.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1271 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Package/Archiver/ArchiverInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 3948 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Package/Archiver/BaseExcludeFilter.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 858 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Package/Archiver/ComposerExcludeFilter.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2105 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Package/Archiver/GitExcludeFilter.php
│ │ │ @@ -220,52 +220,52 @@
│ │ │ drwxr-xr-x 0 root (0) root (0) 0 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Package/Comparer/
│ │ │ -rw-r--r-- 0 root (0) root (0) 3687 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Package/Comparer/Comparer.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 3961 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Package/CompletePackage.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2488 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Package/CompletePackageInterface.php
│ │ │ drwxr-xr-x 0 root (0) root (0) 0 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Package/Dumper/
│ │ │ -rw-r--r-- 0 root (0) root (0) 4944 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Package/Dumper/ArrayDumper.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 3634 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Package/Link.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/Package/Loader/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/Package/Loader/
│ │ │ -rw-r--r-- 0 root (0) root (0) 14901 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Package/Loader/ArrayLoader.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1001 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Package/Loader/InvalidPackageException.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1363 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Package/Loader/JsonLoader.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 834 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Package/Loader/LoaderInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 10031 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Package/Loader/RootPackageLoader.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 23735 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Package/Loader/ValidatingArrayLoader.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 16442 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Package/Locker.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 14178 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Package/Package.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 10845 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Package/PackageInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 3686 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Package/RootAliasPackage.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2688 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Package/RootPackage.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 3208 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Package/RootPackageInterface.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/Package/Version/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/Package/Version/
│ │ │ -rw-r--r-- 0 root (0) root (0) 1823 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Package/Version/StabilityFilter.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 14469 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Package/Version/VersionGuesser.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2883 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Package/Version/VersionParser.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 8003 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Package/Version/VersionSelector.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/Platform/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/Platform/
│ │ │ -rw-r--r-- 0 root (0) root (0) 1870 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Platform/HhvmDetector.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2284 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Platform/Runtime.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2813 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Platform/Version.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/Plugin/
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/Plugin/Capability/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/Plugin/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/Plugin/Capability/
│ │ │ -rw-r--r-- 0 root (0) root (0) 485 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Plugin/Capability/Capability.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 863 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Plugin/Capability/CommandProvider.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1179 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Plugin/Capable.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1965 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Plugin/CommandEvent.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2087 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Plugin/PluginEvents.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1709 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Plugin/PluginInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 20572 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Plugin/PluginManager.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2032 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Plugin/PostFileDownloadEvent.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1357 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Plugin/PreCommandRunEvent.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2864 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Plugin/PreFileDownloadEvent.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 3505 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Plugin/PrePoolCreateEvent.php
│ │ │ drwxr-xr-x 0 root (0) root (0) 0 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Question/
│ │ │ -rw-r--r-- 0 root (0) root (0) 2667 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Question/StrictConfirmationQuestion.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/Repository/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/Repository/
│ │ │ -rw-r--r-- 0 root (0) root (0) 8956 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Repository/ArrayRepository.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 4158 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Repository/ArtifactRepository.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 53547 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Repository/ComposerRepository.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 5363 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Repository/CompositeRepository.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 478 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Repository/ConfigurableRepositoryInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 9313 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Repository/FilesystemRepository.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 5407 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Repository/FilterRepository.php
│ │ │ @@ -281,49 +281,49 @@
│ │ │ -rw-r--r-- 0 root (0) root (0) 27845 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Repository/PlatformRepository.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 7321 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Repository/RepositoryFactory.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 4538 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Repository/RepositoryInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 6159 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Repository/RepositoryManager.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 482 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Repository/RepositorySecurityException.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 10919 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Repository/RepositorySet.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 778 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Repository/RootPackageRepository.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/Repository/Vcs/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/Repository/Vcs/
│ │ │ -rw-r--r-- 0 root (0) root (0) 13829 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Repository/Vcs/BitbucketDriver.php
│ │ │ --rw-r--r-- 0 root (0) root (0) 7386 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/Repository/Vcs/FossilDriver.php
│ │ │ +-rw-r--r-- 0 root (0) root (0) 7386 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/Repository/Vcs/FossilDriver.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2378 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Repository/Vcs/GitBitbucketDriver.php
│ │ │ --rw-r--r-- 0 root (0) root (0) 7337 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/Repository/Vcs/GitDriver.php
│ │ │ +-rw-r--r-- 0 root (0) root (0) 7570 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/Repository/Vcs/GitDriver.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 20170 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Repository/Vcs/GitHubDriver.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 18164 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Repository/Vcs/GitLabDriver.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2372 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Repository/Vcs/HgBitbucketDriver.php
│ │ │ --rw-r--r-- 0 root (0) root (0) 6955 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/Repository/Vcs/HgDriver.php
│ │ │ +-rw-r--r-- 0 root (0) root (0) 7214 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/Repository/Vcs/HgDriver.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 3855 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Repository/Vcs/PerforceDriver.php
│ │ │ --rw-r--r-- 0 root (0) root (0) 12158 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/Repository/Vcs/SvnDriver.php
│ │ │ +-rw-r--r-- 0 root (0) root (0) 12158 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/Repository/Vcs/SvnDriver.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 4803 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Repository/Vcs/VcsDriver.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 3231 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Repository/Vcs/VcsDriverInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 18285 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Repository/VcsRepository.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 656 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Repository/VersionCacheInterface.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1988 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Repository/WritableArrayRepository.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1705 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Repository/WritableRepositoryInterface.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/Script/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/Script/
│ │ │ -rw-r--r-- 0 root (0) root (0) 3014 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Script/Event.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 3623 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Script/ScriptEvents.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/SelfUpdate/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/SelfUpdate/
│ │ │ -rw-r--r-- 0 root (0) root (0) 874 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/SelfUpdate/Keys.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2586 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/SelfUpdate/Versions.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/Util/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/Util/
│ │ │ -rw-r--r-- 0 root (0) root (0) 12318 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Util/AuthHelper.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 8618 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Util/Bitbucket.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1787 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Util/ComposerMirror.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 8767 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Util/ConfigValidator.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2371 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Util/ErrorHandler.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 24553 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Util/Filesystem.php
│ │ │ --rw-r--r-- 0 root (0) root (0) 18378 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/Util/Git.php
│ │ │ +-rw-r--r-- 0 root (0) root (0) 18378 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/Util/Git.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 6121 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Util/GitHub.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 7017 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Util/GitLab.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2538 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Util/Hg.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/Util/Http/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/Util/Http/
│ │ │ -rw-r--r-- 0 root (0) root (0) 22976 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Util/Http/CurlDownloader.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 687 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Util/Http/CurlResponse.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 5198 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Util/Http/ProxyHelper.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 4740 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Util/Http/ProxyManager.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1903 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Util/Http/RequestProxy.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2335 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Util/Http/Response.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 15357 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Util/HttpDownloader.php
│ │ │ @@ -334,20 +334,20 @@
│ │ │ -rw-r--r-- 0 root (0) root (0) 2744 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Util/PackageSorter.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 17398 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Util/Perforce.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 3319 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Util/Platform.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 12956 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Util/ProcessExecutor.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 33094 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Util/RemoteFilesystem.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2166 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Util/Silencer.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 9288 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Util/StreamContextFactory.php
│ │ │ --rw-r--r-- 0 root (0) root (0) 10041 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/Util/Svn.php
│ │ │ +-rw-r--r-- 0 root (0) root (0) 10041 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/Util/Svn.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 2469 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Util/SyncHelper.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 1880 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Util/Tar.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 6625 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Util/TlsHelper.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 5024 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Util/Url.php
│ │ │ -rw-r--r-- 0 root (0) root (0) 3628 2021-01-27 15:09:27.000000 ./usr/share/php/Composer/Util/Zip.php
│ │ │ --rw-r--r-- 0 root (0) root (0) 24534 2021-04-27 22:20:52.000000 ./usr/share/php/Composer/autoload.php
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/php/data/
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/php/data/Composer/
│ │ │ --rw-r--r-- 0 root (0) root (0) 1068 2021-04-27 22:20:52.000000 ./usr/share/php/data/Composer/LICENSE
│ │ │ -drwxr-xr-x 0 root (0) root (0) 0 2021-04-27 22:20:52.000000 ./usr/share/php/data/Composer/res/
│ │ │ +-rw-r--r-- 0 root (0) root (0) 24534 2022-05-29 09:55:56.000000 ./usr/share/php/Composer/autoload.php
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/php/data/
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/php/data/Composer/
│ │ │ +-rw-r--r-- 0 root (0) root (0) 1068 2022-05-29 09:55:56.000000 ./usr/share/php/data/Composer/LICENSE
│ │ │ +drwxr-xr-x 0 root (0) root (0) 0 2022-05-29 09:55:56.000000 ./usr/share/php/data/Composer/res/
│ │ │ -rw-r--r-- 0 root (0) root (0) 4081 2021-01-27 15:09:27.000000 ./usr/share/php/data/Composer/res/composer-repository-schema.json
│ │ │ -rw-r--r-- 0 root (0) root (0) 43775 2021-01-27 15:09:27.000000 ./usr/share/php/data/Composer/res/composer-schema.json
│ │ ├── ./usr/share/doc/composer/changelog.Debian.gz
│ │ │ ├── changelog.Debian
│ │ │ │ @@ -1,7 +1,15 @@
│ │ │ │ +composer (2.0.9-2+deb11u1) bullseye; urgency=medium
│ │ │ │ +
│ │ │ │ + * Fix code injection vulnerability [CVE-2022-24828] (Closes: #1009960)
│ │ │ │ + * Update GitHub token pattern (Closes: #989315)
│ │ │ │ + * Checkout ProcessExecutorMock.php needed for updated tests
│ │ │ │ +
│ │ │ │ + -- David Prévot <taf...@debian.org> Sun, 29 May 2022 11:55:56 +0200
│ │ │ │ +
│ │ │ │ composer (2.0.9-2) unstable; urgency=medium
│ │ │ │
│ │ │ │ * Use debian/bullseye branch
│ │ │ │ * Security: Fixed command injection vulnerability.
│ │ │ │ Fix external process calls to avoid user input being able to pass extra
│ │ │ │ parameters in HgDriver/HgDownloader and hardened other VCS drivers and
│ │ │ │ downloaders (GHSA-h5h8-pc6h-jvvx) [CVE-2021-29472]
│ │ ├── ./usr/share/man/man1/composer.1.gz
│ │ │ ├── composer.1
│ │ │ │ @@ -1,9 +1,9 @@
│ │ │ │ -.\" DO NOT MODIFY THIS FILE! It was generated by help2man 1.48.3.
│ │ │ │ -.TH COMPOSER "1" "April 2021" "composer 2.0.9" "User Commands"
│ │ │ │ +.\" DO NOT MODIFY THIS FILE! It was generated by help2man 1.48.1.
│ │ │ │ +.TH COMPOSER "1" "May 2022" "composer 2.0.9" "User Commands"
│ │ │ │ .SH NAME
│ │ │ │ composer \- Composer command line interface
│ │ │ │ .SH SYNOPSIS
│ │ │ │ .B composer
│ │ │ │ \fI\,command \/\fR[\fI\,options\/\fR] [\fI\,arguments\/\fR]
│ │ │ │ .SH OPTIONS
│ │ │ │ .TP
│ │ ├── ./usr/share/php/Composer/IO/BaseIO.php
│ │ │ @@ -120,15 +120,15 @@
│ │ │ // reload oauth tokens from config if available
│ │ │
│ │ │ foreach ($bitbucketOauth as $domain => $cred) {
│ │ │ $this->checkAndSetAuthentication($domain, $cred['consumer-key'], $cred['consumer-secret']);
│ │ │ }
│ │ │
│ │ │ foreach ($githubOauth as $domain => $token) {
│ │ │ - if (!preg_match('{^[.a-z0-9]+$}', $token)) {
│ │ │ + if (!preg_match('{^[.A-Za-z0-9_]+$}', $token)) {
│ │ │ throw new \UnexpectedValueException('Your github oauth token for '.$domain.' contains invalid characters: "'.$token.'"');
│ │ │ }
│ │ │ $this->checkAndSetAuthentication($domain, $token, 'x-oauth-basic');
│ │ │ }
│ │ │
│ │ │ foreach ($gitlabOauth as $domain => $token) {
│ │ │ $this->checkAndSetAuthentication($domain, $token, 'oauth2');
│ │ ├── ./usr/share/php/Composer/Repository/Vcs/GitDriver.php
│ │ │ @@ -126,14 +126,18 @@
│ │ │ }
│ │ │
│ │ │ /**
│ │ │ * {@inheritdoc}
│ │ │ */
│ │ │ public function getFileContent($file, $identifier)
│ │ │ {
│ │ │ + if (isset($identifier[0]) && $identifier[0] === '-') {
│ │ │ + throw new \RuntimeException('Invalid git identifier detected. Identifier must not start with a -, given: ' . $identifier);
│ │ │ + }
│ │ │ +
│ │ │ $resource = sprintf('%s:%s', ProcessExecutor::escape($identifier), ProcessExecutor::escape($file));
│ │ │ $this->process->execute(sprintf('git show %s', $resource), $content, $this->repoDir);
│ │ │
│ │ │ if (!trim($content)) {
│ │ │ return null;
│ │ │ }
│ │ │
│ │ │ @@ -179,15 +183,15 @@
│ │ │ {
│ │ │ if (null === $this->branches) {
│ │ │ $branches = array();
│ │ │
│ │ │ $this->process->execute('git branch --no-color --no-abbrev -v', $output, $this->repoDir);
│ │ │ foreach ($this->process->splitLines($output) as $branch) {
│ │ │ if ($branch && !preg_match('{^ *[^/]+/HEAD }', $branch)) {
│ │ │ - if (preg_match('{^(?:\* )? *(\S+) *([a-f0-9]+)(?: .*)?$}', $branch, $match)) {
│ │ │ + if (preg_match('{^(?:\* )? *(\S+) *([a-f0-9]+)(?: .*)?$}', $branch, $match) && $match[1][0] !== '-') {
│ │ │ $branches[$match[1]] = $match[2];
│ │ │ }
│ │ │ }
│ │ │ }
│ │ │
│ │ │ $this->branches = $branches;
│ │ │ }
│ │ ├── ./usr/share/php/Composer/Repository/Vcs/HgDriver.php
│ │ │ @@ -117,15 +117,19 @@
│ │ │ }
│ │ │
│ │ │ /**
│ │ │ * {@inheritdoc}
│ │ │ */
│ │ │ public function getFileContent($file, $identifier)
│ │ │ {
│ │ │ - $resource = sprintf('hg cat -r %s %s', ProcessExecutor::escape($identifier), ProcessExecutor::escape($file));
│ │ │ + if (isset($identifier[0]) && $identifier[0] === '-') {
│ │ │ + throw new \RuntimeException('Invalid hg identifier detected. Identifier must not start with a -, given: ' . $identifier);
│ │ │ + }
│ │ │ +
│ │ │ + $resource = sprintf('hg cat -r %s -- %s', ProcessExecutor::escape($identifier), ProcessExecutor::escape($file));
│ │ │ $this->process->execute($resource, $content, $this->repoDir);
│ │ │
│ │ │ if (!trim($content)) {
│ │ │ return;
│ │ │ }
│ │ │
│ │ │ return $content;
│ │ │ @@ -177,22 +181,22 @@
│ │ │ {
│ │ │ if (null === $this->branches) {
│ │ │ $branches = array();
│ │ │ $bookmarks = array();
│ │ │
│ │ │ $this->process->execute('hg branches', $output, $this->repoDir);
│ │ │ foreach ($this->process->splitLines($output) as $branch) {
│ │ │ - if ($branch && preg_match('(^([^\s]+)\s+\d+:([a-f0-9]+))', $branch, $match)) {
│ │ │ + if ($branch && preg_match('(^([^\s]+)\s+\d+:([a-f0-9]+))', $branch, $match) && $match[1][0] !== '-') {
│ │ │ $branches[$match[1]] = $match[2];
│ │ │ }
│ │ │ }
│ │ │
│ │ │ $this->process->execute('hg bookmarks', $output, $this->repoDir);
│ │ │ foreach ($this->process->splitLines($output) as $branch) {
│ │ │ - if ($branch && preg_match('(^(?:[\s*]*)([^\s]+)\s+\d+:(.*)$)', $branch, $match)) {
│ │ │ + if ($branch && preg_match('(^(?:[\s*]*)([^\s]+)\s+\d+:(.*)$)', $branch, $match) && $match[1][0] !== '-') {
│ │ │ $bookmarks[$match[1]] = $match[2];
│ │ │ }
│ │ │ }
│ │ │
│ │ │ // Branches will have preference over bookmarks
│ │ │ $this->branches = array_merge($bookmarks, $branches);
│ │ │ }
signature.asc
Description: PGP signature
--- End Message ---
