-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 30 May 2026 13:39:01 +0200 Source: php-guzzlehttp-psr7 Binary: php-guzzlehttp-psr7 Architecture: all Version: 2.7.1-1+deb13u1 Distribution: trixie Urgency: medium Maintainer: all Build Daemon (x86-csail-02) Changed-By: David Prévot Description: php-guzzlehttp-psr7 - Closes: 1138265 Changes: php-guzzlehttp-psr7 (2.7.1-1+deb13u1) trixie; urgency=medium . * Backport fixes from upstream - Encode plus sign in withQueryValue() and withQueryValues() (#636) - Harden ServerRequest globals handling (#660) - Normalize global header values (#718) - Reject control characters in URI hosts (#715) [CVE-2026-49214] - Reject malformed Host authorities (#717) [CVE-2026-48998] (Closes: #1138265) * Track debian/trixie branch Checksums-Sha1: c2eb1246528aed41795ee3b8ad803448b653aaf9 8610 php-guzzlehttp-psr7_2.7.1-1+deb13u1_all-buildd.buildinfo 6bcc7d2372318eff03fc0f055612d5ae78fb31da 62060 php-guzzlehttp-psr7_2.7.1-1+deb13u1_all.deb Checksums-Sha256: 65ccee6daa6fa1dd154c4bb944841ca695ed6af32e0e07ad00d13e488f636391 8610 php-guzzlehttp-psr7_2.7.1-1+deb13u1_all-buildd.buildinfo bfa3eda6f2819e65cbd92f29774e5d266d63bd0a4c076c97abd9134676f7672b 62060 php-guzzlehttp-psr7_2.7.1-1+deb13u1_all.deb Files: e5b4cc7e85b2b4a78ac5bde94579ac76 8610 php optional php-guzzlehttp-psr7_2.7.1-1+deb13u1_all-buildd.buildinfo 46b7e7a653b804750eb7703bcc7a4d0a 62060 php optional php-guzzlehttp-psr7_2.7.1-1+deb13u1_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXLxUpUHQBQBTDtd4aBVi67oXtfkFAmooYvMACgkQaBVi67oX tflmkg//UE+LI76cWDMb4tePotYavhSLH3/FtOmh/bjeTd1b4RrLrxi7vaaMP//r 3Xogxx7SiPHVtwxyrN86ACZU/JdwJ87Aa1CrhlaJUHO1ztRgX0aqtKony+2AWrPr njrAgwkbB5LkYqsFmiXfnUicdwdO4KYdxXgEHAv0VCI5WBXWbBmpFllwvMwzv/IQ QiPPa/SfsBCTXd8cG8W36/yObK2LetQB5lLO5R+teZVzQNsIq5hrzC3opUcT+a69 tcdSnRkhnOJj2uKgzKvxSIWOMz9MGbLoKGhTyi9hLUxdK+eJ8BF7crbbZQ58j5v6 Af7iL6sP24Op8v0jeYobi59ujkzvgCnxRaFgkJVrPcDL7HxideBjYRpddYFyQUSt CZmtoP4YtY3O03IgxgH0T/7qRWS+pqsJ/qOMoVkvjS7/VTWgIl8pLz5zfJQkntD9 nUPY8CpMPuXgjJQWzQQYdi1m4C/JDkj6a2/xhVYXtGlLfHqV5kwDM29SwzOOVBmj lzkzYQeJoDCbrYZv2Z/7RxbOPv0N+TvvI2JPDd1zqWFpM17KqnWD7PlYRaiye2xG aYhFK8hweoo//MRcnuyrDaSzJEQTK3u/GvV3dD/1UIaGIzPlnwnSdcEGXBkFBPYB Na4B9K1/HjB56e+srB8T0MaWxyFkV8w2E2rd1iGGOs+ZyvsjD9s= =M27v -----END PGP SIGNATURE-----