[pkg-php-pear] guzzle_7.15.2-1_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 05 Aug 2026 06:56:39 +0200
Source: guzzle
Architecture: source
Version: 7.15.2-1
Distribution: unstable
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear at lists.alioth.debian.org>
Changed-By: David Prévot <taffit at debian.org>
Closes: 1143595
Changes:
 guzzle (7.15.2-1) unstable; urgency=medium
 .
   [ Graham Campbell ]
   * Security fixes 7.15 (#3907) (Closes: #1143595)
     + Reject non-printable-ASCII and percent-escaped URI hosts and `Host`
       headers (GHSA-v5mv-p594-2x33) [CVE-2026-69246]
     + Reject request URI hosts that contain a URI authority delimiter
       (GHSA-v5mv-p594-2x33) [CVE-2026-69246]
     + Reject numeric-looking URI hosts with trailing dots, read as IPv4
       addresses (GHSA-v5mv-p594-2x33) [CVE-2026-69246]
     + Treat numeric-in-any-base and percent-escaped cookie domains as
       exact-match-only (GHSA-f7vp-7xgx-4w4r) [CVE-2026-69245]
     + Regenerate a derived `Host` header after client URI rewrites
       (GHSA-v5mv-p594-2x33) [CVE-2026-69246]
 .
   [ David Prévot ]
   * Track version 7 for now
Checksums-Sha1:
 39dcd30674962362a7c90345be78170313a7e16d 1780 guzzle_7.15.2-1.dsc
 7309c992e491d25bada9d358779ffcb7da51fa53 285544 guzzle_7.15.2.orig.tar.xz
 41d73f19a84008f9aaaa4560b0b0cc0eec4a4b5c 6476 guzzle_7.15.2-1.debian.tar.xz
 fd5166c7e0d1278551b970e3f7a2c83105dc8bc0 6352 guzzle_7.15.2-1_amd64.buildinfo
Checksums-Sha256:
 963b028b05a7fca2117b9ba29c92d9682ee43fe0b2c92ee30fc55a359b0f50ad 1780 guzzle_7.15.2-1.dsc
 cb4f59ea2f76b8466b7a193b7c709adbc5a56909c89099aef4c7452f618805e7 285544 guzzle_7.15.2.orig.tar.xz
 8af0932754c2a06cbc09b90cc7001b322cf2fce0a52708efbabad48486457ee3 6476 guzzle_7.15.2-1.debian.tar.xz
 22669ba194cc464ad4ba4f301c8c975e5dafeb3e0431bb0c302b11110c8a283c 6352 guzzle_7.15.2-1_amd64.buildinfo
Files:
 5b3ad8a5080e18468a5ce1302416afbc 1780 php optional guzzle_7.15.2-1.dsc
 35fbec6337bf015d0930c1097cfedcdc 285544 php optional guzzle_7.15.2.orig.tar.xz
 d8370ab9b9ddeed5d1d680a79bc739f4 6476 php optional guzzle_7.15.2-1.debian.tar.xz
 cb3ab8fabbb55e6cf347e6e8700f5f6d 6352 php optional guzzle_7.15.2-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmpyxggSHHRhZmZpdEBk
ZWJpYW4ub3JnAAoJEAWMHPlE9r08masH/2iTEDNvf1ju345TJN6RBfP1Q35hMbjM
e2uamJNt8FjY8ECiKrxc/2d6in2VmCxkeggwVB6lbZC6W0ZBwt0s4N7o/mBMjZtJ
4tbrvM6HO+abrlEWHqUE0th/P59ZqB6OxxqP3QBG+84B11TGpcOrDUjv0SkQyp3a
dzfIZsxDW7nHBlTd4vj6mq7ZALVwH8T2o6TZt3qHe21Z56E5eTrUGQ+PRhn3SVUu
jHaYdbvnmjlNtuj2N7x0+hqsv+tOzgCkYu7fi17tRwFSv73IOX+cIbQjYqO6IIXR
aqon1wf3reY6lcueGBnA89r0U70Aq9zBDIXrpxbrx4AWreP8bsC5WCo=
=6GRV
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-php-pear/attachments/20260805/f218c659/attachment-0001.sig>