Debian Patches

Status for php-guzzlehttp-psr7/2.4.5-1+deb12u1

Patch Description Author Forwarded Bugs Origin Last update
0001-Adapt-path-to-Debian-expectations.patch Adapt path to Debian expectations David Prévot <taffit@debian.org> not-needed 2021-03-30
0002-2.8-Encode-plus-sign-in-withQueryValue-and-withQuery.patch [2.8] Encode plus sign in withQueryValue() and withQueryValues() (#636)

* Encode plus sign in withQueryValue() and withQueryValues()

* Add plus sign note to Uri query comment
Eyüp Can Akman <eyupcanakman@gmail.com> yes upstream upstrem, https://github.com/guzzle/psr7/commit/bf5b5784ad30e4d01d7723366977ae54dc1d06ff 2026-03-10
0003-Harden-ServerRequest-globals-handling-660.patch Harden ServerRequest globals handling (#660)
* Harden server request globals

* Document ServerRequest globals hardening

* Move ServerRequest changelog entry

* Reorder ServerRequest changelog entry
Graham Campbell <GrahamCampbell@users.noreply.github.com> yes upstream backport, https://github.com/guzzle/psr7/commit/ed659d5c2254b9d2af3a1b77257b91a4899e313c 2026-05-19
0004-Normalize-global-header-values-718.patch Normalize global header values (#718) Graham Campbell <GrahamCampbell@users.noreply.github.com> yes upstream backport, https://github.com/guzzle/psr7/commit/a0fda818b0f74482925e66e814fe9afb48fd2fa5 2026-05-25
0005-Reject-malformed-Host-authorities-717.patch Reject malformed Host authorities (#717)
* Reject malformed Host authorities

* Tighten Host authority validation

* Mark Host authority fix as security

* Remove redundant Host header type check

* Share Host header authority parser

* Move RFC 3986 character classes

* Order RFC 3986 constants by section

* Remove unused Host port flag

* Avoid port zero parseRequest case
Graham Campbell <GrahamCampbell@users.noreply.github.com> yes debian upstream backport, https://github.com/guzzle/psr7/commit/c68fe44ea6b56eb0a7ebdeb9012fb7efbc37c2d3 2026-05-25
0006-Reject-control-characters-in-URI-hosts-715.patch Reject control characters in URI hosts (#715)
* Reject control characters in URI hosts

* Validate generated Host header values

* Mark URI host fix as security
Graham Campbell <GrahamCampbell@users.noreply.github.com> yes debian upstream backport, https://github.com/guzzle/psr7/commit/12caca7f2302477216a460fabf93a92659835a06 2026-05-25

All known versions for source package 'php-guzzlehttp-psr7'

Links