[From nobody Wed Aug 5 06:35:08 2026 Received: (at 1143595-close) by bugs.debian.org; 5 Aug 2026 05:33:54 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.1 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE, SPF_HELO_PASS,SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 79; hammy, 150; neutral, 165; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:33652) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wrUGI-00GIAG-0f for 1143595-close@bugs.debian.org; Wed, 05 Aug 2026 05:33:54 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wrUGG-001CON-2t for 1143595-close@bugs.debian.org; Wed, 05 Aug 2026 05:33:52 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=18iGjQMc42CnX3M/bPCL4Gaeagtalwfq9V3T7S4cQiU=; b=Vm7RdgaU3RjFnX7dpqBUR67/Kk qcf3AIt2hjVhPXMJn3a/IQVTGjLDJDoJmUHChcBfOJN/11xj5Cy1PoT4R3Tha459lwb6bOCkwJYNe 4liH0gViY/bV0QonU9Tv12q0dzyQ7hBvnD4ixib72ue3fBF675kujH4L76hgquggBFkgvF66B4NEO bp/LZc98RLvPtXLl0VkwP9NigmO/8cz7Y8uwwDfZmSY+P65E8cV2B9Pxh1iD+zKW7T46BsHNbStgx i5R8v5V5C9igJBIDg8yGt6VOJCrUA2f5lkqJgRowCGHD1XS9IbAWdRBzClpo8wCPT8P7iU39UZiKq nQdPc5hQ==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wrUGG-0000000Dozd-079Q; Wed, 05 Aug 2026 05:33:52 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: =?utf-8?q?David_Pr=C3=A9vot?= <taffit@debian.org> To: 1143595-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: guzzle Debian: DAK Debian-Changes: guzzle_7.15.2-1_source.changes Debian-Source: guzzle Debian-Version: 7.15.2-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1143595: fixed in guzzle 7.15.2-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============3396546210154370692==" Message-Id: <E1wrUGG-0000000Dozd-079Q@fasolo.debian.org> Date: Wed, 05 Aug 2026 05:33:52 +0000 --===============3396546210154370692== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: guzzle Source-Version: 7.15.2-1 Done: David Pr=C3=A9vot <taffit@debian.org> We believe that the bug you reported is fixed in the latest version of guzzle, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1143595@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. David Pr=C3=A9vot <taffit@debian.org> (supplier of updated guzzle package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 05 Aug 2026 06:56:39 +0200 Source: guzzle Architecture: source Version: 7.15.2-1 Distribution: unstable Urgency: medium Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org> Changed-By: David Pr=C3=A9vot <taffit@debian.org> Closes: 1143595 Changes: guzzle (7.15.2-1) unstable; urgency=3Dmedium . [ Graham Campbell ] * Security fixes 7.15 (#3907) (Closes: #1143595) + Reject non-printable-ASCII and percent-escaped URI hosts and `Host` headers (GHSA-v5mv-p594-2x33) [CVE-2026-69246] + Reject request URI hosts that contain a URI authority delimiter (GHSA-v5mv-p594-2x33) [CVE-2026-69246] + Reject numeric-looking URI hosts with trailing dots, read as IPv4 addresses (GHSA-v5mv-p594-2x33) [CVE-2026-69246] + Treat numeric-in-any-base and percent-escaped cookie domains as exact-match-only (GHSA-f7vp-7xgx-4w4r) [CVE-2026-69245] + Regenerate a derived `Host` header after client URI rewrites (GHSA-v5mv-p594-2x33) [CVE-2026-69246] . [ David Pr=C3=A9vot ] * Track version 7 for now Checksums-Sha1: 39dcd30674962362a7c90345be78170313a7e16d 1780 guzzle_7.15.2-1.dsc 7309c992e491d25bada9d358779ffcb7da51fa53 285544 guzzle_7.15.2.orig.tar.xz 41d73f19a84008f9aaaa4560b0b0cc0eec4a4b5c 6476 guzzle_7.15.2-1.debian.tar.xz fd5166c7e0d1278551b970e3f7a2c83105dc8bc0 6352 guzzle_7.15.2-1_amd64.buildinfo Checksums-Sha256: 963b028b05a7fca2117b9ba29c92d9682ee43fe0b2c92ee30fc55a359b0f50ad 1780 guzzle= _7.15.2-1.dsc cb4f59ea2f76b8466b7a193b7c709adbc5a56909c89099aef4c7452f618805e7 285544 guzz= le_7.15.2.orig.tar.xz 8af0932754c2a06cbc09b90cc7001b322cf2fce0a52708efbabad48486457ee3 6476 guzzle= _7.15.2-1.debian.tar.xz 22669ba194cc464ad4ba4f301c8c975e5dafeb3e0431bb0c302b11110c8a283c 6352 guzzle= _7.15.2-1_amd64.buildinfo Files: 5b3ad8a5080e18468a5ce1302416afbc 1780 php optional guzzle_7.15.2-1.dsc 35fbec6337bf015d0930c1097cfedcdc 285544 php optional guzzle_7.15.2.orig.tar.= xz d8370ab9b9ddeed5d1d680a79bc739f4 6476 php optional guzzle_7.15.2-1.debian.ta= r.xz cb3ab8fabbb55e6cf347e6e8700f5f6d 6352 php optional guzzle_7.15.2-1_amd64.bui= ldinfo -----BEGIN PGP SIGNATURE----- iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmpyxggSHHRhZmZpdEBk ZWJpYW4ub3JnAAoJEAWMHPlE9r08masH/2iTEDNvf1ju345TJN6RBfP1Q35hMbjM e2uamJNt8FjY8ECiKrxc/2d6in2VmCxkeggwVB6lbZC6W0ZBwt0s4N7o/mBMjZtJ 4tbrvM6HO+abrlEWHqUE0th/P59ZqB6OxxqP3QBG+84B11TGpcOrDUjv0SkQyp3a dzfIZsxDW7nHBlTd4vj6mq7ZALVwH8T2o6TZt3qHe21Z56E5eTrUGQ+PRhn3SVUu jHaYdbvnmjlNtuj2N7x0+hqsv+tOzgCkYu7fi17tRwFSv73IOX+cIbQjYqO6IIXR aqon1wf3reY6lcueGBnA89r0U70Aq9zBDIXrpxbrx4AWreP8bsC5WCo=3D =3D6GRV -----END PGP SIGNATURE----- --===============3396546210154370692== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCanLLPwAKCRCb9qggYcy5 IVEKAQDhnxpLjxJlLAaRJRvAGbHBVwhj7ky1j/vI9hNO2Uq0eQEArSdgNvFQtVJD ntSWNFa4W1gkg7Ivv822t4t4RzuvrAg= =NQlS -----END PGP SIGNATURE----- --===============3396546210154370692==-- ]