-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 10 Feb 2025 11:45:37 +0100 Source: curl Binary: curl curl-dbgsym libcurl3-gnutls libcurl3-gnutls-dbgsym libcurl3-nss libcurl3-nss-dbgsym libcurl4 libcurl4-dbgsym libcurl4-gnutls-dev libcurl4-nss-dev libcurl4-openssl-dev Architecture: arm64 Version: 7.88.1-10+deb12u11 Distribution: bookworm Urgency: medium Maintainer: arm Build Daemon (arm-ubc-01) Changed-By: Dr. Tobias Quathamer Description: curl - command line tool for transferring data with URL syntax libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.88.1-10+deb12u11) bookworm; urgency=medium . * Team upload. * Import patch for CVE-2025-0167. - When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has a `default` entry that omits both login and password. A rare circumstance. Checksums-Sha1: 43b692b13ba74407ad00ec00ded5c3346520a990 158148 curl-dbgsym_7.88.1-10+deb12u11_arm64.deb 7158c2f8b66fada1718c95a83c970275bd8eaf49 13109 curl_7.88.1-10+deb12u11_arm64-buildd.buildinfo 6765e1425b06e0a0c4de8a8aa12d34b4ce1f0e9b 309512 curl_7.88.1-10+deb12u11_arm64.deb d2f00c75c6989c7335336cb7fabe8748ff8c6bb1 1014764 libcurl3-gnutls-dbgsym_7.88.1-10+deb12u11_arm64.deb b244c4878ab13b99ea6d5b21d9188f6d800052af 362724 libcurl3-gnutls_7.88.1-10+deb12u11_arm64.deb 727e115a77187042d2b0edd1e0525ee9e407e6d9 1059876 libcurl3-nss-dbgsym_7.88.1-10+deb12u11_arm64.deb 0983510b3b64581317e2272dd7e33838c9d4f797 371148 libcurl3-nss_7.88.1-10+deb12u11_arm64.deb ed2a0b6bef891d9e178bd3836c7b93975bd7950d 1042456 libcurl4-dbgsym_7.88.1-10+deb12u11_arm64.deb 96818d2301e6c6cfaa03ecd5ee1e20114951626d 471756 libcurl4-gnutls-dev_7.88.1-10+deb12u11_arm64.deb 855577e88bd741af60be387105230c95c2dd6bf8 482064 libcurl4-nss-dev_7.88.1-10+deb12u11_arm64.deb 765042e58dcdfcde4898b2f114ba715743afd369 476196 libcurl4-openssl-dev_7.88.1-10+deb12u11_arm64.deb 47685799d11b6d4b3132cd7db239d3c94704df04 366872 libcurl4_7.88.1-10+deb12u11_arm64.deb Checksums-Sha256: 3c30f4071e8fc1d2aefcaebb6c7bdf1eb7d1c4f350035a137830eb97a12bbffa 158148 curl-dbgsym_7.88.1-10+deb12u11_arm64.deb 7c864009c4706962315ac7ac616be90e39a06fbf057c1ff34f22f6f859a3c629 13109 curl_7.88.1-10+deb12u11_arm64-buildd.buildinfo 7c6efb36d8679220fb802a372fb856c381894efd0d3a96f3a83b40b1eba56304 309512 curl_7.88.1-10+deb12u11_arm64.deb c998570027cd1ea27d9a62e342b8220f19ae1dda3974e24046ca3e0b9547f34e 1014764 libcurl3-gnutls-dbgsym_7.88.1-10+deb12u11_arm64.deb 8248eb5792753495924803a00ac05ad668a26cee8b6e46b421306c10d24b8e0d 362724 libcurl3-gnutls_7.88.1-10+deb12u11_arm64.deb 7d4f4a9bf8b90a05fbb10b487be999d9694097cfee454d7ddf5f4695c0d6408b 1059876 libcurl3-nss-dbgsym_7.88.1-10+deb12u11_arm64.deb a8fad0a692e6545a039337717f65cea932c0208908d69396c6b1d15155c8c62f 371148 libcurl3-nss_7.88.1-10+deb12u11_arm64.deb 131155484300816e307b1fa2039e96254c50e5c2889bb72e6c84ca538d04c61e 1042456 libcurl4-dbgsym_7.88.1-10+deb12u11_arm64.deb e4a983a80329f2ff88792c770ecff425d449f1367ad726bd7f69c907b4d82c0c 471756 libcurl4-gnutls-dev_7.88.1-10+deb12u11_arm64.deb cb8f93fc0b7fe0c1337a805a5477e8f833960054df92875aee18db85e33e367a 482064 libcurl4-nss-dev_7.88.1-10+deb12u11_arm64.deb fb5d421e678f059c4d4e9cd0823e96ba9baa78e7c04688a55d48391a63d57ddb 476196 libcurl4-openssl-dev_7.88.1-10+deb12u11_arm64.deb 6af9b12e0abd24daeb1efa6570c54ded8dde5471f75fdb07bfa95f1548807b5e 366872 libcurl4_7.88.1-10+deb12u11_arm64.deb Files: a51e3a447c62a19a6a75f78ad2891236 158148 debug optional curl-dbgsym_7.88.1-10+deb12u11_arm64.deb cbacba6748716cacd1db1e800d128f36 13109 web optional curl_7.88.1-10+deb12u11_arm64-buildd.buildinfo fb13218eb2b14349982dc6a956d9085e 309512 web optional curl_7.88.1-10+deb12u11_arm64.deb db159716c0d052cfdd33c9ca2b17801d 1014764 debug optional libcurl3-gnutls-dbgsym_7.88.1-10+deb12u11_arm64.deb 6c1ec589666d1cb4a5a3f55af2196cac 362724 libs optional libcurl3-gnutls_7.88.1-10+deb12u11_arm64.deb 07909920eb13f5ce4e05888a61436b9b 1059876 debug optional libcurl3-nss-dbgsym_7.88.1-10+deb12u11_arm64.deb 659abd7f23169ab6f765f728fa1112f3 371148 libs optional libcurl3-nss_7.88.1-10+deb12u11_arm64.deb d952917940d27d5f20a02c641ce80f36 1042456 debug optional libcurl4-dbgsym_7.88.1-10+deb12u11_arm64.deb 4ee8f4f7cf59847f277a67038341e400 471756 libdevel optional libcurl4-gnutls-dev_7.88.1-10+deb12u11_arm64.deb 145f2ededf6ed82539166a6e8ea37ba1 482064 libdevel optional libcurl4-nss-dev_7.88.1-10+deb12u11_arm64.deb 72b85be5bf7c3a00ae85ca111720bb7c 476196 libdevel optional libcurl4-openssl-dev_7.88.1-10+deb12u11_arm64.deb 7f997c4cf4c948f07cadd34849dd31e8 366872 libs optional libcurl4_7.88.1-10+deb12u11_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEH43oX1cK+BEEs9Pe/9j0ct/+ZwwFAmfMulEACgkQ/9j0ct/+ ZwxAJxAAsTdq13l1Eor5E0p/I3A+I3POPIPbAuzbB5h5GLxGoZSk3w+CA4yzwoZM /Y19gtq5zzExquVubPJ0cMKm64VjjYWSoZ8oqNk1wDHCy18sxNechXtUqMqLNTZQ bGBDgQ7Fy0Ik7Q3M0IB1ETz0RbE3Xds8pY5yN7m4O9koQ89kMt0fXgiX1F4+UGuh QuBNGcP2YCIax+XMT5RnnVrcbRiD4cPZCqbC2PYlS7v3JyAsS9vEt8yJCrMvJ1g/ B8NVHktd4yJRijhAzClOtblVz6OWGQ5NUxuWny1MTWGK4lRSuMVamrQULDGWObM3 MZp0XeQKAm7XW0d8aBdu9weqvYLwHRWnLDekdLfGbBCzOmpXQZZDEZmzficcnMvj 1CaAigDNKA/OZlMN6RmxwGBbrwOI/vvljIsfHoNgH2gmoGzoqpxMswR3u9h6QjGW R+4vmGAtYzicP/3zKlG23w1Fd8aPCrt4a9YV4fctxqCHiJV7dnDxslZUkm+Tqe7y MnQVApXEyo6ek+vWHSdvx0FXCWhRJT/DPZ0IE5XPkGxJDBY7DRGQiXrzuIqknVGZ nKbevTMGuEwMCEs4o4JFydixN7Dc3L63pmQNIhpnbS8oa6XTsyQjKzEc+dHGk6sr VI3gRxhgFTgWhxU5WFes754jQn3J+Z8+3ZZ86k7W+NQV0Dnoyi8= =v+PG -----END PGP SIGNATURE-----