Bug#1034713: bullseye-pu: package php-guzzlehttp-psr7/1.7.0-1+deb11u2
Control: tags -1 + confirmed
On Sat, 2023-04-22 at 12:17 +0200, David Prévot wrote:
> I’d like to fix an improper input validation [CVE-2023-29197]
> filed as #1034581. This is a follow up from [CVE-2022-24775]
> filed as #1008236 that was fixed via a previous point release.
> The security team filed those bugs with a non-RC severity, so
> I assume they don’t expect to release a DSA for it (as for the
> previous main issue), anyway the team is X-D-Cc.
>
The Security Tracker agrees. Please go ahead.
Regards,
Adam
Reply to: