Accepted guzzle 7.15.2-1 (source) into unstable

Debian FTP Masters <[email protected]> Wed, 05 Aug 2026 05:33:51 +0000
Newsgroups gmane.linux.debian.devel.changes.unstable
Message-ID <[email protected]>
--===============4923982751854284429==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 05 Aug 2026 06:56:39 +0200
Source: guzzle
Architecture: source
Version: 7.15.2-1
Distribution: unstable
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers <[email protected]>
Changed-By: David Pr=C3=A9vot <[email protected]>
Closes: 1143595
Changes:
 guzzle (7.15.2-1) unstable; urgency=3Dmedium
 .
   [ Graham Campbell ]
   * Security fixes 7.15 (#3907) (Closes: #1143595)
     + Reject non-printable-ASCII and percent-escaped URI hosts and `Host`
       headers (GHSA-v5mv-p594-2x33) [CVE-2026-69246]
     + Reject request URI hosts that contain a URI authority delimiter
       (GHSA-v5mv-p594-2x33) [CVE-2026-69246]
     + Reject numeric-looking URI hosts with trailing dots, read as IPv4
       addresses (GHSA-v5mv-p594-2x33) [CVE-2026-69246]
     + Treat numeric-in-any-base and percent-escaped cookie domains as
       exact-match-only (GHSA-f7vp-7xgx-4w4r) [CVE-2026-69245]
     + Regenerate a derived `Host` header after client URI rewrites
       (GHSA-v5mv-p594-2x33) [CVE-2026-69246]
 .
   [ David Pr=C3=A9vot ]
   * Track version 7 for now
Checksums-Sha1:
 39dcd30674962362a7c90345be78170313a7e16d 1780 guzzle_7.15.2-1.dsc
 7309c992e491d25bada9d358779ffcb7da51fa53 285544 guzzle_7.15.2.orig.tar.xz
 41d73f19a84008f9aaaa4560b0b0cc0eec4a4b5c 6476 guzzle_7.15.2-1.debian.tar.xz
 fd5166c7e0d1278551b970e3f7a2c83105dc8bc0 6352 guzzle_7.15.2-1_amd64.buildinfo
Checksums-Sha256:
 963b028b05a7fca2117b9ba29c92d9682ee43fe0b2c92ee30fc55a359b0f50ad 1780 guzzle=
_7.15.2-1.dsc
 cb4f59ea2f76b8466b7a193b7c709adbc5a56909c89099aef4c7452f618805e7 285544 guzz=
le_7.15.2.orig.tar.xz
 8af0932754c2a06cbc09b90cc7001b322cf2fce0a52708efbabad48486457ee3 6476 guzzle=
_7.15.2-1.debian.tar.xz
 22669ba194cc464ad4ba4f301c8c975e5dafeb3e0431bb0c302b11110c8a283c 6352 guzzle=
_7.15.2-1_amd64.buildinfo
Files:
 5b3ad8a5080e18468a5ce1302416afbc 1780 php optional guzzle_7.15.2-1.dsc
 35fbec6337bf015d0930c1097cfedcdc 285544 php optional guzzle_7.15.2.orig.tar.=
xz
 d8370ab9b9ddeed5d1d680a79bc739f4 6476 php optional guzzle_7.15.2-1.debian.ta=
r.xz
 cb3ab8fabbb55e6cf347e6e8700f5f6d 6352 php optional guzzle_7.15.2-1_amd64.bui=
ldinfo

-----BEGIN PGP SIGNATURE-----

iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmpyxggSHHRhZmZpdEBk
ZWJpYW4ub3JnAAoJEAWMHPlE9r08masH/2iTEDNvf1ju345TJN6RBfP1Q35hMbjM
e2uamJNt8FjY8ECiKrxc/2d6in2VmCxkeggwVB6lbZC6W0ZBwt0s4N7o/mBMjZtJ
4tbrvM6HO+abrlEWHqUE0th/P59ZqB6OxxqP3QBG+84B11TGpcOrDUjv0SkQyp3a
dzfIZsxDW7nHBlTd4vj6mq7ZALVwH8T2o6TZt3qHe21Z56E5eTrUGQ+PRhn3SVUu
jHaYdbvnmjlNtuj2N7x0+hqsv+tOzgCkYu7fi17tRwFSv73IOX+cIbQjYqO6IIXR
aqon1wf3reY6lcueGBnA89r0U70Aq9zBDIXrpxbrx4AWreP8bsC5WCo=3D
=3D6GRV
-----END PGP SIGNATURE-----


--===============4923982751854284429==
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----

iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCanLLPwAKCRCb9qggYcy5
Id3fAP9cHMo+qgkAoofoyNOdSf7atu3GaGUwcJE8BWEzoyVy9gEAzquQLtA5Jf5x
MW+nVkm8Mc5yKCj21XL6GvXQ7/ivGQo=
=L0y9
-----END PGP SIGNATURE-----

--===============4923982751854284429==--