Control: tags -1 + confirmed On Fri, 2025-11-14 at 05:38 +0100, David Prévot wrote: > As agreed with the security team, I’d like to see CVE-2025-64500 > fixed in bookworm. The patch is minimal, and only affects > php-symfony-http-foundation that is not part of the dependency chain > of any end-user package AFAICT. Please go ahead. Regards, Adam