[From nobody Tue Jun 9 19:49:03 2026 Received: (at 1138265-close) by bugs.debian.org; 9 Jun 2026 18:47:08 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.1 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 66; hammy, 150; neutral, 157; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:39272) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wX1Tg-00Cjni-0q for 1138265-close@bugs.debian.org; Tue, 09 Jun 2026 18:47:08 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wX1Tg-00C1Jv-0d for 1138265-close@bugs.debian.org; Tue, 09 Jun 2026 18:47:08 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=l9Gg4InsL1ZgprhAUMjleXiZmu4vDZ5lxXEzccSVuMg=; b=b5b4JYPaDY0Elwygi30W+AkJlR 4rOpQaq0lHbOo6pMR16Rr+yBZvAj7k8e7wkM06Krs+2imQyeXyQyZlg5RjI0he4AKvtzxRPvBvQoE xnvUQoFc4EvA+TJM0VatVcjPJqpi2SUUUi8XzfIfqjFUvf6iaiT8XfuzCORuA+m4eSjykh1VKFQFs 3ao0hdj5XFJaqNAKujaDRS1fv9TZPZ5uQF8OrhUp14CV2ZAGWEwfhV8esUkvpnXChwBFJxfwUjFm1 XUnAVJ5OIULEQ0XEFiKKeNafAcQG36jPVGnncyP8gAbDZc5ojWhtltnkqVhbddiGmw7GjpQgSWMWA edl7DF2g==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wX1Tf-00000005L8k-1feb; Tue, 09 Jun 2026 18:47:07 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: =?utf-8?q?David_Pr=C3=A9vot?= <taffit@debian.org> To: 1138265-close@bugs.debian.org X-DAK: dak process-policy X-Debian: DAK X-Debian-Package: php-guzzlehttp-psr7 Debian: DAK Debian-Changes: php-guzzlehttp-psr7_2.7.1-1+deb13u1_source.changes Debian-Source: php-guzzlehttp-psr7 Debian-Version: 2.7.1-1+deb13u1 Debian-Architecture: source Debian-Suite: proposed-updates Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1138265: fixed in php-guzzlehttp-psr7 2.7.1-1+deb13u1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============8543318000598770183==" Message-Id: <E1wX1Tf-00000005L8k-1feb@fasolo.debian.org> Date: Tue, 09 Jun 2026 18:47:07 +0000 --===============8543318000598770183== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: php-guzzlehttp-psr7 Source-Version: 2.7.1-1+deb13u1 Done: David Pr=C3=A9vot <taffit@debian.org> We believe that the bug you reported is fixed in the latest version of php-guzzlehttp-psr7, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1138265@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. David Pr=C3=A9vot <taffit@debian.org> (supplier of updated php-guzzlehttp-psr= 7 package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 30 May 2026 13:39:01 +0200 Source: php-guzzlehttp-psr7 Architecture: source Version: 2.7.1-1+deb13u1 Distribution: trixie Urgency: medium Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org> Changed-By: David Pr=C3=A9vot <taffit@debian.org> Closes: 1138265 Changes: php-guzzlehttp-psr7 (2.7.1-1+deb13u1) trixie; urgency=3Dmedium . * Backport fixes from upstream - Encode plus sign in withQueryValue() and withQueryValues() (#636) - Harden ServerRequest globals handling (#660) - Normalize global header values (#718) - Reject control characters in URI hosts (#715) [CVE-2026-49214] - Reject malformed Host authorities (#717) [CVE-2026-48998] (Closes: #1138265) * Track debian/trixie branch Checksums-Sha1: 20281a4c29fbebe869576678662c87a10b2bff10 2036 php-guzzlehttp-psr7_2.7.1-1+de= b13u1.dsc 2905a1d100d32f9884790dcc05099b62d2b51c3f 19020 php-guzzlehttp-psr7_2.7.1-1+d= eb13u1.debian.tar.xz d1ccbcf5a181653bf5c5dd5fc6765d26063d2c5b 8573 php-guzzlehttp-psr7_2.7.1-1+de= b13u1_amd64.buildinfo Checksums-Sha256: b978602ec821e823b454c2d0e6029320cbf199b609dcc3d1da39076ad3c9f9f6 2036 php-gu= zzlehttp-psr7_2.7.1-1+deb13u1.dsc 5ff8678208f1906fbeaa53ad903381df00f46ab99dbea6abf2ecab3bd55a79f8 19020 php-g= uzzlehttp-psr7_2.7.1-1+deb13u1.debian.tar.xz c3c3a16b2c69f2aba13474b7bc1e294d660ece4f8daab13772499217abeaebea 8573 php-gu= zzlehttp-psr7_2.7.1-1+deb13u1_amd64.buildinfo Files: 1eb225a17ea3663e2d000b8b7a2d38d1 2036 php optional php-guzzlehttp-psr7_2.7.1= -1+deb13u1.dsc 2a6edcc1e4659e6e4d5fbd2ff39e23bd 19020 php optional php-guzzlehttp-psr7_2.7.= 1-1+deb13u1.debian.tar.xz ca24f4516e513e8348fe12d0a467a9be 8573 php optional php-guzzlehttp-psr7_2.7.1= -1+deb13u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmonrNESHHRhZmZpdEBk ZWJpYW4ub3JnAAoJEAWMHPlE9r08mrwH/1w8OiSIGSlcBMzbG/Dj6sI7jBr5rakX 26bNQR/WH4/uT8L4ha4YnPSE1i6sU25uuTG6e0CkkWlVl6IZbdmI0B1g3DMX+Akn hy1xBNXF+MULqa5dlMG6wugysE7WUr53iljRUJDiABYxfnW07/izFICx8Bv/xVZB U9pM3ehgCjMbaFGRNoVrHfHhS0+WJgky7xqGHBuE2PjC9KvtYNhsnb5mava0Ap8R talzdVCn9TuIFi1GsI+RLkuwteRSY84EmiTRMMswOrDQXt6EvBRLftd6xc02IM+D iek2gBvhHm+JOWZeYJdK1uMOxb+gQQKksRG7YRAVVYNMSdwb//hP1ZE=3D =3DYmVR -----END PGP SIGNATURE----- --===============8543318000598770183== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaihfqwAKCRCb9qggYcy5 IdBGAP4giLfX8DBcZSA5JkOSczbdXq5MGWwb7ziyVZsE0tjJMQD9EcSZcyLaVJSW qk6jbpfsB6FTYlr/3Dg/b+niS03gZQE= =dwCK -----END PGP SIGNATURE----- --===============8543318000598770183==-- ]