-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 01 Aug 2026 19:56:16 -0300
Source: guzzle
Architecture: source
Version: 8.0.1-1
Distribution: experimental
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org>
Changed-By: David Prévot <taffit@debian.org>
Changes:
guzzle (8.0.1-1) experimental; urgency=medium
.
[ Graham Campbell ]
* Security fixes 8.0 (#3908)
+ Reject request URI hosts and `Host` header values that are not printable
ASCII (GHSA-v5mv-p594-2x33)
+ Reject URI hosts with a percent escape or that are not valid RFC 3986
hosts (GHSA-v5mv-p594-2x33)
+ Reject numeric-looking URI hosts with trailing dots, read as IPv4
addresses (GHSA-v5mv-p594-2x33)
+ Treat percent-escaped cookie domains as exact-match-only
(GHSA-f7vp-7xgx-4w4r)
+ Regenerate a derived `Host` header after client URI rewrites
(GHSA-v5mv-p594-2x33)
Checksums-Sha1:
d81ca0faeca5e1cba81502f1b1fb99c21849cde1 1748 guzzle_8.0.1-1.dsc
ea468f657d078020d88b9158606a14c20e5d70ab 394796 guzzle_8.0.1.orig.tar.xz
3a24abd0ba0408ff1604263ced7057dcf33c4730 6504 guzzle_8.0.1-1.debian.tar.xz
df1aa03d384aa5e9c5491c1c256b490f47c1d1c1 6344 guzzle_8.0.1-1_amd64.buildinfo
Checksums-Sha256:
15fd92d915bbc8c9c8564ff4fae4db9070348251472b4b8ca04b68db48af6df5 1748 guzzle_8.0.1-1.dsc
12b597207402ca82368774e638223e628e82ea005598cd70017c672d96e10bec 394796 guzzle_8.0.1.orig.tar.xz
e5b50682f94a274681b10fc2e6f45e81b4e6fe4c4dffa2bb10891984aa1e9aef 6504 guzzle_8.0.1-1.debian.tar.xz
f2aaa2279443d7cfaa26bd7ef6c94bfc904c81cddabf92647bc6802eb9138551 6344 guzzle_8.0.1-1_amd64.buildinfo
Files:
e4c9c30db46ae4cbf009c8b8ec5dd6e1 1748 php optional guzzle_8.0.1-1.dsc
29ab1513912040508e5a7fa83f9ddef3 394796 php optional guzzle_8.0.1.orig.tar.xz
c2a1b39616645942f372902767044240 6504 php optional guzzle_8.0.1-1.debian.tar.xz
7eb008cfd219aa3f933962ed504bad6a 6344 php optional guzzle_8.0.1-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmpvbwkSHHRhZmZpdEBk
ZWJpYW4ub3JnAAoJEAWMHPlE9r08WFYIAJty0aBhozv6BRgekVaMfHKQQMsIf9Fu
nApWOGF2UVpF2mhdwDqn0W4p44JFxPc3cZZF68VM44Sno2HGznUJ1quDVu617tR/
tpmmIT+IcM20k8Zab5lHEpDQNYlSBEt1T/DEqmgDM/FSK1y76VLp3qX3XSZL5b+A
QYhoXgbAOVIzI9Qx4OCX4nG+sTx3DRND04OtY2PWNcoesJT/U5eaPcH/dwD+lZAu
Jehax3Dsar69VbWO1gEDEhO7+RbI5dncca7b+NcmhxVlUULfuaXBjpoCO5HT9j6K
SYYLBWC9ljiDxeengNmyl/f4F9VU/hzjXCvQquEdS78EE8Dp0fThQbM=
=fEW9
-----END PGP SIGNATURE-----
