[From nobody Tue Jun 9 20:19:05 2026 Received: (at 1138265-close) by bugs.debian.org; 9 Jun 2026 19:17:21 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.1 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 47; hammy, 150; neutral, 162; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:58532) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wX1wv-00Cna2-27 for 1138265-close@bugs.debian.org; Tue, 09 Jun 2026 19:17:21 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wX1wv-00C2z6-1r for 1138265-close@bugs.debian.org; Tue, 09 Jun 2026 19:17:21 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=2NHGqOnkITv25YrBPy7Hs3hiYL3WPjnGeEbg3kKJOr4=; b=EKxQXZhgOf7fijE/5thpZLeGly YpYWh1LrXpBEhL/+4BGLmhyiYY65naA/uO93yogyf/+EZyD5lLXpZnRzbEKlQgutmqOOTS7we7LHU JVom/vw1S1kjEjtr1pT2OaUxDqjfuTTtA6yodx1TN8nJQ0dT/7JaKnQb/E06oBqJh16nYXP84Vryo mSWpstbgaj1ROLSg+gxHdavLXbS+/WMmbLeaTFGuQQTlY7/zfhtpRfUDZLsyYyVoFBbmEZrykAirp FYwAjk7c2r8jMLstka/Cazpp9eynGrcx2LaV/32Fp7BidVols0RtgLGSFSKoxDR5ImCy5B/BY9hy8 tWS2uuLw==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wX1wu-00000005Pry-3FY7; Tue, 09 Jun 2026 19:17:20 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: =?utf-8?q?David_Pr=C3=A9vot?= <taffit@debian.org> To: 1138265-close@bugs.debian.org X-DAK: dak process-policy X-Debian: DAK X-Debian-Package: php-guzzlehttp-psr7 Debian: DAK Debian-Changes: php-guzzlehttp-psr7_2.4.5-1+deb12u1_source.changes Debian-Source: php-guzzlehttp-psr7 Debian-Version: 2.4.5-1+deb12u1 Debian-Architecture: source Debian-Suite: oldstable-proposed-updates Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1138265: fixed in php-guzzlehttp-psr7 2.4.5-1+deb12u1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============4171865529715613122==" Message-Id: <E1wX1wu-00000005Pry-3FY7@fasolo.debian.org> Date: Tue, 09 Jun 2026 19:17:20 +0000 --===============4171865529715613122== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: php-guzzlehttp-psr7 Source-Version: 2.4.5-1+deb12u1 Done: David Pr=C3=A9vot <taffit@debian.org> We believe that the bug you reported is fixed in the latest version of php-guzzlehttp-psr7, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1138265@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. David Pr=C3=A9vot <taffit@debian.org> (supplier of updated php-guzzlehttp-psr= 7 package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 30 May 2026 16:57:02 +0200 Source: php-guzzlehttp-psr7 Architecture: source Version: 2.4.5-1+deb12u1 Distribution: bookworm Urgency: medium Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org> Changed-By: David Pr=C3=A9vot <taffit@debian.org> Closes: 1138265 Changes: php-guzzlehttp-psr7 (2.4.5-1+deb12u1) bookworm; urgency=3Dmedium . * Backport fixes from upstream - Encode plus sign in withQueryValue() and withQueryValues() (#636) - Harden ServerRequest globals handling (#660) - Normalize global header values (#718) - Reject control characters in URI hosts (#715) [CVE-2026-49214] - Reject malformed Host authorities (#717) [CVE-2026-48998] (Closes: #1138265) Checksums-Sha1: 0fd579f812818752dccfebde72d1bc7796ccf49c 2030 php-guzzlehttp-psr7_2.4.5-1+de= b12u1.dsc eeacaa610d46f0d0a694a5d8e135aa7e39285b49 13256 php-guzzlehttp-psr7_2.4.5-1+d= eb12u1.debian.tar.xz cbc3a07ba9568448dc7603f74ad94dd2d8f29e78 8770 php-guzzlehttp-psr7_2.4.5-1+de= b12u1_amd64.buildinfo Checksums-Sha256: 595c5d988db0a57112bfcb37e2cb971419adbb5a29bca2f5372a76957da30ce1 2030 php-gu= zzlehttp-psr7_2.4.5-1+deb12u1.dsc c5d5dd0a85e138aeaf1ecd61e7a14aa7cf4acffd727ef60b2796b555fe44fa49 13256 php-g= uzzlehttp-psr7_2.4.5-1+deb12u1.debian.tar.xz 02b46c87d70c0192d4368f32a9cbc7f350e705f7cfad0b7e64c7234a1375b680 8770 php-gu= zzlehttp-psr7_2.4.5-1+deb12u1_amd64.buildinfo Files: b33873223ab355bbce87d7557a3c8869 2030 php optional php-guzzlehttp-psr7_2.4.5= -1+deb12u1.dsc 124944ba0b218de2bcc48c31792cc74f 13256 php optional php-guzzlehttp-psr7_2.4.= 5-1+deb12u1.debian.tar.xz 3ecf476ad56bce6b02546800a9529780 8770 php optional php-guzzlehttp-psr7_2.4.5= -1+deb12u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmonrNISHHRhZmZpdEBk ZWJpYW4ub3JnAAoJEAWMHPlE9r08KOAH+wRtV8tNIw22RVYf72rzLlFOWAQ4Ixwg cUcHxshD4cSax8u5r8DAC9gRZpmB2TbYC6cBQvYszt4NRWajxoY/8SJeTe6R8XNZ 9dtKHbGfuMx+cc8f3Te2J5NgzSYxAME1282lLZd20IoNNM6iMN1HrKRibTSApPkv q2UecHz9+x8EMoTAJ2AlgEvPCoAJW4aNJ0CIrF7G8X5xEbUzBr0duBWkUo9Wg7o5 urdyfb+tr3IHQVq5aybBgJJbnG3wCpdVwc0pw6+YcpVDLfgo6/hjIxCS9QmSTad3 tS3abI3/DJq58BMwxpgQitgnY8boYPSFH7pJXd6NkzVpc5seG8OGKUk=3D =3DzcSQ -----END PGP SIGNATURE----- --===============4171865529715613122== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaihmwAAKCRCb9qggYcy5 IbocAP0TR7s2EKkqfThbifv75Ph4mmdkdCEh1dzmPTt0AfQPogEAnhY3SLYD/NbJ yV6xpQ+W9qUo6m6WwklVcZJ5CnTAhgM= =bdwI -----END PGP SIGNATURE----- --===============4171865529715613122==-- ]