[pkg-php-pear] guzzle_8.0.1-1_source.changes ACCEPTED into experimental

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 01 Aug 2026 19:56:16 -0300
Source: guzzle
Architecture: source
Version: 8.0.1-1
Distribution: experimental
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear at lists.alioth.debian.org>
Changed-By: David Prévot <taffit at debian.org>
Changes:
 guzzle (8.0.1-1) experimental; urgency=medium
 .
   [ Graham Campbell ]
   * Security fixes 8.0 (#3908)
     + Reject request URI hosts and `Host` header values that are not printable
       ASCII (GHSA-v5mv-p594-2x33)
     + Reject URI hosts with a percent escape or that are not valid RFC 3986
       hosts (GHSA-v5mv-p594-2x33)
     + Reject numeric-looking URI hosts with trailing dots, read as IPv4
       addresses (GHSA-v5mv-p594-2x33)
     + Treat percent-escaped cookie domains as exact-match-only
       (GHSA-f7vp-7xgx-4w4r)
     + Regenerate a derived `Host` header after client URI rewrites
       (GHSA-v5mv-p594-2x33)
Checksums-Sha1:
 d81ca0faeca5e1cba81502f1b1fb99c21849cde1 1748 guzzle_8.0.1-1.dsc
 ea468f657d078020d88b9158606a14c20e5d70ab 394796 guzzle_8.0.1.orig.tar.xz
 3a24abd0ba0408ff1604263ced7057dcf33c4730 6504 guzzle_8.0.1-1.debian.tar.xz
 df1aa03d384aa5e9c5491c1c256b490f47c1d1c1 6344 guzzle_8.0.1-1_amd64.buildinfo
Checksums-Sha256:
 15fd92d915bbc8c9c8564ff4fae4db9070348251472b4b8ca04b68db48af6df5 1748 guzzle_8.0.1-1.dsc
 12b597207402ca82368774e638223e628e82ea005598cd70017c672d96e10bec 394796 guzzle_8.0.1.orig.tar.xz
 e5b50682f94a274681b10fc2e6f45e81b4e6fe4c4dffa2bb10891984aa1e9aef 6504 guzzle_8.0.1-1.debian.tar.xz
 f2aaa2279443d7cfaa26bd7ef6c94bfc904c81cddabf92647bc6802eb9138551 6344 guzzle_8.0.1-1_amd64.buildinfo
Files:
 e4c9c30db46ae4cbf009c8b8ec5dd6e1 1748 php optional guzzle_8.0.1-1.dsc
 29ab1513912040508e5a7fa83f9ddef3 394796 php optional guzzle_8.0.1.orig.tar.xz
 c2a1b39616645942f372902767044240 6504 php optional guzzle_8.0.1-1.debian.tar.xz
 7eb008cfd219aa3f933962ed504bad6a 6344 php optional guzzle_8.0.1-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmpvbwkSHHRhZmZpdEBk
ZWJpYW4ub3JnAAoJEAWMHPlE9r08WFYIAJty0aBhozv6BRgekVaMfHKQQMsIf9Fu
nApWOGF2UVpF2mhdwDqn0W4p44JFxPc3cZZF68VM44Sno2HGznUJ1quDVu617tR/
tpmmIT+IcM20k8Zab5lHEpDQNYlSBEt1T/DEqmgDM/FSK1y76VLp3qX3XSZL5b+A
QYhoXgbAOVIzI9Qx4OCX4nG+sTx3DRND04OtY2PWNcoesJT/U5eaPcH/dwD+lZAu
Jehax3Dsar69VbWO1gEDEhO7+RbI5dncca7b+NcmhxVlUULfuaXBjpoCO5HT9j6K
SYYLBWC9ljiDxeengNmyl/f4F9VU/hzjXCvQquEdS78EE8Dp0fThQbM=
=fEW9
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-php-pear/attachments/20260802/88d4abe2/attachment.sig>