[pkg-php-pear] php-guzzlehttp-psr7_2.7.1-1+deb13u1_source.changes ACCEPTED into proposed-updates

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 30 May 2026 13:39:01 +0200
Source: php-guzzlehttp-psr7
Architecture: source
Version: 2.7.1-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear at lists.alioth.debian.org>
Changed-By: David Prévot <taffit at debian.org>
Closes: 1138265
Changes:
 php-guzzlehttp-psr7 (2.7.1-1+deb13u1) trixie; urgency=medium
 .
   * Backport fixes from upstream
     - Encode plus sign in withQueryValue() and withQueryValues() (#636)
     - Harden ServerRequest globals handling (#660)
     - Normalize global header values (#718)
     - Reject control characters in URI hosts (#715) [CVE-2026-49214]
     - Reject malformed Host authorities (#717) [CVE-2026-48998]
     (Closes: #1138265)
   * Track debian/trixie branch
Checksums-Sha1:
 20281a4c29fbebe869576678662c87a10b2bff10 2036 php-guzzlehttp-psr7_2.7.1-1+deb13u1.dsc
 2905a1d100d32f9884790dcc05099b62d2b51c3f 19020 php-guzzlehttp-psr7_2.7.1-1+deb13u1.debian.tar.xz
 d1ccbcf5a181653bf5c5dd5fc6765d26063d2c5b 8573 php-guzzlehttp-psr7_2.7.1-1+deb13u1_amd64.buildinfo
Checksums-Sha256:
 b978602ec821e823b454c2d0e6029320cbf199b609dcc3d1da39076ad3c9f9f6 2036 php-guzzlehttp-psr7_2.7.1-1+deb13u1.dsc
 5ff8678208f1906fbeaa53ad903381df00f46ab99dbea6abf2ecab3bd55a79f8 19020 php-guzzlehttp-psr7_2.7.1-1+deb13u1.debian.tar.xz
 c3c3a16b2c69f2aba13474b7bc1e294d660ece4f8daab13772499217abeaebea 8573 php-guzzlehttp-psr7_2.7.1-1+deb13u1_amd64.buildinfo
Files:
 1eb225a17ea3663e2d000b8b7a2d38d1 2036 php optional php-guzzlehttp-psr7_2.7.1-1+deb13u1.dsc
 2a6edcc1e4659e6e4d5fbd2ff39e23bd 19020 php optional php-guzzlehttp-psr7_2.7.1-1+deb13u1.debian.tar.xz
 ca24f4516e513e8348fe12d0a467a9be 8573 php optional php-guzzlehttp-psr7_2.7.1-1+deb13u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmonrNESHHRhZmZpdEBk
ZWJpYW4ub3JnAAoJEAWMHPlE9r08mrwH/1w8OiSIGSlcBMzbG/Dj6sI7jBr5rakX
26bNQR/WH4/uT8L4ha4YnPSE1i6sU25uuTG6e0CkkWlVl6IZbdmI0B1g3DMX+Akn
hy1xBNXF+MULqa5dlMG6wugysE7WUr53iljRUJDiABYxfnW07/izFICx8Bv/xVZB
U9pM3ehgCjMbaFGRNoVrHfHhS0+WJgky7xqGHBuE2PjC9KvtYNhsnb5mava0Ap8R
talzdVCn9TuIFi1GsI+RLkuwteRSY84EmiTRMMswOrDQXt6EvBRLftd6xc02IM+D
iek2gBvhHm+JOWZeYJdK1uMOxb+gQQKksRG7YRAVVYNMSdwb//hP1ZE=
=YmVR
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-php-pear/attachments/20260609/a547c04e/attachment.sig>