-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 01 Aug 2026 19:56:16 -0300 Source: guzzle Architecture: source Version: 8.0.1-1 Distribution: experimental Urgency: medium Maintainer: Debian PHP PEAR Maintainers <[email protected]> Changed-By: David Prévot <[email protected]> Changes: guzzle (8.0.1-1) experimental; urgency=medium . [ Graham Campbell ] * Security fixes 8.0 (#3908) + Reject request URI hosts and `Host` header values that are not printable ASCII (GHSA-v5mv-p594-2x33) + Reject URI hosts with a percent escape or that are not valid RFC 3986 hosts (GHSA-v5mv-p594-2x33) + Reject numeric-looking URI hosts with trailing dots, read as IPv4 addresses (GHSA-v5mv-p594-2x33) + Treat percent-escaped cookie domains as exact-match-only (GHSA-f7vp-7xgx-4w4r) + Regenerate a derived `Host` header after client URI rewrites (GHSA-v5mv-p594-2x33) Checksums-Sha1: d81ca0faeca5e1cba81502f1b1fb99c21849cde1 1748 guzzle_8.0.1-1.dsc ea468f657d078020d88b9158606a14c20e5d70ab 394796 guzzle_8.0.1.orig.tar.xz 3a24abd0ba0408ff1604263ced7057dcf33c4730 6504 guzzle_8.0.1-1.debian.tar.xz df1aa03d384aa5e9c5491c1c256b490f47c1d1c1 6344 guzzle_8.0.1-1_amd64.buildinfo Checksums-Sha256: 15fd92d915bbc8c9c8564ff4fae4db9070348251472b4b8ca04b68db48af6df5 1748 guzzle_8.0.1-1.dsc 12b597207402ca82368774e638223e628e82ea005598cd70017c672d96e10bec 394796 guzzle_8.0.1.orig.tar.xz e5b50682f94a274681b10fc2e6f45e81b4e6fe4c4dffa2bb10891984aa1e9aef 6504 guzzle_8.0.1-1.debian.tar.xz f2aaa2279443d7cfaa26bd7ef6c94bfc904c81cddabf92647bc6802eb9138551 6344 guzzle_8.0.1-1_amd64.buildinfo Files: e4c9c30db46ae4cbf009c8b8ec5dd6e1 1748 php optional guzzle_8.0.1-1.dsc 29ab1513912040508e5a7fa83f9ddef3 394796 php optional guzzle_8.0.1.orig.tar.xz c2a1b39616645942f372902767044240 6504 php optional guzzle_8.0.1-1.debian.tar.xz 7eb008cfd219aa3f933962ed504bad6a 6344 php optional guzzle_8.0.1-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE----- iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmpvbwkSHHRhZmZpdEBk ZWJpYW4ub3JnAAoJEAWMHPlE9r08WFYIAJty0aBhozv6BRgekVaMfHKQQMsIf9Fu nApWOGF2UVpF2mhdwDqn0W4p44JFxPc3cZZF68VM44Sno2HGznUJ1quDVu617tR/ tpmmIT+IcM20k8Zab5lHEpDQNYlSBEt1T/DEqmgDM/FSK1y76VLp3qX3XSZL5b+A QYhoXgbAOVIzI9Qx4OCX4nG+sTx3DRND04OtY2PWNcoesJT/U5eaPcH/dwD+lZAu Jehax3Dsar69VbWO1gEDEhO7+RbI5dncca7b+NcmhxVlUULfuaXBjpoCO5HT9j6K SYYLBWC9ljiDxeengNmyl/f4F9VU/hzjXCvQquEdS78EE8Dp0fThQbM= =fEW9 -----END PGP SIGNATURE-----
pgpvewiXTFmR2.pgp
Description: PGP signature
