[BUGFIX] Update guzzlehttp/guzzle to 7.4.5
The maintainers of the package guzzlehttp/guzzle released a new version 7.4.5 that fixes two security issues: * CURLOPT_HTTPAUTH option not cleared on change of origin [1] * Change in port should be considered a change in origin [2] Executed commands: composer require \ guzzlehttp/guzzle:^7.4.5 \ -W composer require \ -d typo3/sysext/core \ guzzlehttp/guzzle:^7.4.5 \ --no-update [1] https://github.com/guzzle/guzzle/security/advisories/GHSA-25mq-v84q-4j7r [2] https://github.com/guzzle/guzzle/security/advisories/GHSA-q559-8m2m-g699 Resolves: #97802 Releases: main, 11.5, 10.4 Change-Id: Ia49f75f8ed078beb43ba42f89efdd8e68ee146c5 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/74971 Tested-by:core-ci <typo3@b13.com> Tested-by:
Stefan Bürk <stefan@buerk.tech> Tested-by:
Oliver Bartsch <bo@cedev.de> Tested-by:
Andreas Fernandez <a.fernandez@scripting-base.de> Reviewed-by:
Stefan Bürk <stefan@buerk.tech> Reviewed-by:
Oliver Bartsch <bo@cedev.de> Reviewed-by:
Andreas Fernandez <a.fernandez@scripting-base.de>
... | ... | @@ -55,7 +55,7 @@ |
"doctrine/lexer": "^1.2.3", | ||
"egulias/email-validator": "^3.1", | ||
"enshrined/svg-sanitize": "^0.15.4", | ||
"guzzlehttp/guzzle": "^7.4.4", | ||
"guzzlehttp/guzzle": "^7.4.5", | ||
"guzzlehttp/promises": "^1.4.0", | ||
"guzzlehttp/psr7": "^1.8.5 || ^2.1.2", | ||
"lolli42/finediff": "^1.0.1", | ||
... | ... |
Please register or sign in to comment