The 5.3.x branch received a bugfix, but it has not been released. This means that this bugfix is not shipped to anyone using Composer with the default stability setting
Any news here? :) Would be nice to get a new patch release.
Following https://github.com/guzzle/guzzle/pull/1393, it could be a good idea to release a patch. Specially since it breaks build on PHP 7.1
@mtdowling it would be really helpful for people who want to upgrade to PHP 7.1 if v5.3.1 is tagged with this fix!
CVE-2016-5385
Thanks for the new tag. :)
Most helpful comment
Following https://github.com/guzzle/guzzle/pull/1393, it could be a good idea to release a patch. Specially since it breaks build on PHP 7.1