Accepted guzzle 7.15.2-1 (source) into unstable
Debian FTP Masters <[email protected]> Wed, 05 Aug 2026 05:33:51 +0000
| Newsgroups | gmane.linux.debian.devel.changes.unstable |
|---|---|
| Message-ID | <[email protected]> |
--===============4923982751854284429== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 05 Aug 2026 06:56:39 +0200 Source: guzzle Architecture: source Version: 7.15.2-1 Distribution: unstable Urgency: medium Maintainer: Debian PHP PEAR Maintainers <[email protected]> Changed-By: David Pr=C3=A9vot <[email protected]> Closes: 1143595 Changes: guzzle (7.15.2-1) unstable; urgency=3Dmedium . [ Graham Campbell ] * Security fixes 7.15 (#3907) (Closes: #1143595) + Reject non-printable-ASCII and percent-escaped URI hosts and `Host` headers (GHSA-v5mv-p594-2x33) [CVE-2026-69246] + Reject request URI hosts that contain a URI authority delimiter (GHSA-v5mv-p594-2x33) [CVE-2026-69246] + Reject numeric-looking URI hosts with trailing dots, read as IPv4 addresses (GHSA-v5mv-p594-2x33) [CVE-2026-69246] + Treat numeric-in-any-base and percent-escaped cookie domains as exact-match-only (GHSA-f7vp-7xgx-4w4r) [CVE-2026-69245] + Regenerate a derived `Host` header after client URI rewrites (GHSA-v5mv-p594-2x33) [CVE-2026-69246] . [ David Pr=C3=A9vot ] * Track version 7 for now Checksums-Sha1: 39dcd30674962362a7c90345be78170313a7e16d 1780 guzzle_7.15.2-1.dsc 7309c992e491d25bada9d358779ffcb7da51fa53 285544 guzzle_7.15.2.orig.tar.xz 41d73f19a84008f9aaaa4560b0b0cc0eec4a4b5c 6476 guzzle_7.15.2-1.debian.tar.xz fd5166c7e0d1278551b970e3f7a2c83105dc8bc0 6352 guzzle_7.15.2-1_amd64.buildinfo Checksums-Sha256: 963b028b05a7fca2117b9ba29c92d9682ee43fe0b2c92ee30fc55a359b0f50ad 1780 guzzle= _7.15.2-1.dsc cb4f59ea2f76b8466b7a193b7c709adbc5a56909c89099aef4c7452f618805e7 285544 guzz= le_7.15.2.orig.tar.xz 8af0932754c2a06cbc09b90cc7001b322cf2fce0a52708efbabad48486457ee3 6476 guzzle= _7.15.2-1.debian.tar.xz 22669ba194cc464ad4ba4f301c8c975e5dafeb3e0431bb0c302b11110c8a283c 6352 guzzle= _7.15.2-1_amd64.buildinfo Files: 5b3ad8a5080e18468a5ce1302416afbc 1780 php optional guzzle_7.15.2-1.dsc 35fbec6337bf015d0930c1097cfedcdc 285544 php optional guzzle_7.15.2.orig.tar.= xz d8370ab9b9ddeed5d1d680a79bc739f4 6476 php optional guzzle_7.15.2-1.debian.ta= r.xz cb3ab8fabbb55e6cf347e6e8700f5f6d 6352 php optional guzzle_7.15.2-1_amd64.bui= ldinfo -----BEGIN PGP SIGNATURE----- iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmpyxggSHHRhZmZpdEBk ZWJpYW4ub3JnAAoJEAWMHPlE9r08masH/2iTEDNvf1ju345TJN6RBfP1Q35hMbjM e2uamJNt8FjY8ECiKrxc/2d6in2VmCxkeggwVB6lbZC6W0ZBwt0s4N7o/mBMjZtJ 4tbrvM6HO+abrlEWHqUE0th/P59ZqB6OxxqP3QBG+84B11TGpcOrDUjv0SkQyp3a dzfIZsxDW7nHBlTd4vj6mq7ZALVwH8T2o6TZt3qHe21Z56E5eTrUGQ+PRhn3SVUu jHaYdbvnmjlNtuj2N7x0+hqsv+tOzgCkYu7fi17tRwFSv73IOX+cIbQjYqO6IIXR aqon1wf3reY6lcueGBnA89r0U70Aq9zBDIXrpxbrx4AWreP8bsC5WCo=3D =3D6GRV -----END PGP SIGNATURE----- --===============4923982751854284429== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCanLLPwAKCRCb9qggYcy5 Id3fAP9cHMo+qgkAoofoyNOdSf7atu3GaGUwcJE8BWEzoyVy9gEAzquQLtA5Jf5x MW+nVkm8Mc5yKCj21XL6GvXQ7/ivGQo= =L0y9 -----END PGP SIGNATURE----- --===============4923982751854284429==--