-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 10 Feb 2025 11:45:37 +0100 Source: curl Binary: curl curl-dbgsym libcurl3-gnutls libcurl3-gnutls-dbgsym libcurl3-nss libcurl3-nss-dbgsym libcurl4 libcurl4-dbgsym libcurl4-gnutls-dev libcurl4-nss-dev libcurl4-openssl-dev Architecture: i386 Version: 7.88.1-10+deb12u11 Distribution: bookworm Urgency: medium Maintainer: i386 Build Daemon (x86-grnet-01) Changed-By: Dr. Tobias Quathamer Description: curl - command line tool for transferring data with URL syntax libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.88.1-10+deb12u11) bookworm; urgency=medium . * Team upload. * Import patch for CVE-2025-0167. - When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has a `default` entry that omits both login and password. A rare circumstance. Checksums-Sha1: 17071c53a25b1c55d9c094607185292d67c6ecdb 145080 curl-dbgsym_7.88.1-10+deb12u11_i386.deb d81a3b15119abd26b104aa503109f322ebd6a1c1 13030 curl_7.88.1-10+deb12u11_i386-buildd.buildinfo 3d72a899d24e0e0e7c349f62e345f81b1b6644db 319860 curl_7.88.1-10+deb12u11_i386.deb a5ac49bd00dd40d60316c9363730d6b826f69239 912312 libcurl3-gnutls-dbgsym_7.88.1-10+deb12u11_i386.deb 374323daa720c8122245c36ddd7fe494bd97d616 419284 libcurl3-gnutls_7.88.1-10+deb12u11_i386.deb 1b6855809e7d71f49b6b675e72fcafcee4e425fe 952152 libcurl3-nss-dbgsym_7.88.1-10+deb12u11_i386.deb 3f85672aaabbb6a47d8afb0e8a3ae4362b4c3f19 427332 libcurl3-nss_7.88.1-10+deb12u11_i386.deb 3da6b570a8a54d584aee00545de24256324260b1 932476 libcurl4-dbgsym_7.88.1-10+deb12u11_i386.deb ef2cafc237d8f2d9f3012a3b536bbe2eb119e368 533324 libcurl4-gnutls-dev_7.88.1-10+deb12u11_i386.deb c521c717e4659203899341f3c648def458d401ab 542620 libcurl4-nss-dev_7.88.1-10+deb12u11_i386.deb 29734965a08522d5ff87ba1c8c1234497d37a250 540732 libcurl4-openssl-dev_7.88.1-10+deb12u11_i386.deb 84c7d8886bffc5155933e0b5085b05f075a71686 425896 libcurl4_7.88.1-10+deb12u11_i386.deb Checksums-Sha256: df165a03157a6c25da0c8f6dc446e536211c73ce9765205fdd4b0e27dcf501f9 145080 curl-dbgsym_7.88.1-10+deb12u11_i386.deb 3156073a93f760fdd9535463abaa68f2c05b3a92b16579c2790836b4cc01b677 13030 curl_7.88.1-10+deb12u11_i386-buildd.buildinfo 66731d9e5fb86ef2a889651ff444e8d4e65a292935e646c45acd4eb3101bacae 319860 curl_7.88.1-10+deb12u11_i386.deb 989cb0528a189513756516c1dcc5c0fe728c64294233181181de1cd677d46cdf 912312 libcurl3-gnutls-dbgsym_7.88.1-10+deb12u11_i386.deb 1980486fa0ad8b3f0a368da30e5bce7c21138e3c399e88f2c858681bbfa47c3c 419284 libcurl3-gnutls_7.88.1-10+deb12u11_i386.deb 7c8bcd205152deaf73beb408e8af65796915b12a3c289a86fdba14ff3ceb43a6 952152 libcurl3-nss-dbgsym_7.88.1-10+deb12u11_i386.deb 89558d354b7f02a691d26a61fc42ceed3de4c4d9970fb6ec85a0a357e27d0439 427332 libcurl3-nss_7.88.1-10+deb12u11_i386.deb 33440c5090078998860b974f3a63dcc9e60b419ad249362ae7ad6ff1e7ec8a04 932476 libcurl4-dbgsym_7.88.1-10+deb12u11_i386.deb 8ab69c7216287db16aff64920eecf4e22348571c9d3fc2177b2fdd2bb80549a7 533324 libcurl4-gnutls-dev_7.88.1-10+deb12u11_i386.deb fa9c000d1b4aaf6a87a57b424f787e1dc1c7150067052b9d60a36f753b9d5de5 542620 libcurl4-nss-dev_7.88.1-10+deb12u11_i386.deb c2e14c6dedc6875d9c3f549fca0957a487b91174d50469d8dd76c8d51da00360 540732 libcurl4-openssl-dev_7.88.1-10+deb12u11_i386.deb 69d41fc827bacad5dbf5ebe7ea3a65d2e980ca33f35467252816265bd1596d67 425896 libcurl4_7.88.1-10+deb12u11_i386.deb Files: 7fc8b352759ce3ad4f71a0cb5d6697b8 145080 debug optional curl-dbgsym_7.88.1-10+deb12u11_i386.deb e06bb4f6951ffb0ffc35fcfd1a9dc48f 13030 web optional curl_7.88.1-10+deb12u11_i386-buildd.buildinfo 433a97e6b5614f41f0c3252dde89ea56 319860 web optional curl_7.88.1-10+deb12u11_i386.deb 15ee1d8b8120f80cf8651e3ca0a7fbc2 912312 debug optional libcurl3-gnutls-dbgsym_7.88.1-10+deb12u11_i386.deb 21619fe55a22c30b1d5dc3a24695d876 419284 libs optional libcurl3-gnutls_7.88.1-10+deb12u11_i386.deb 7fe1cdb80f6ebf7930bac5a4a4b40c5f 952152 debug optional libcurl3-nss-dbgsym_7.88.1-10+deb12u11_i386.deb 2a757f43da384e6b7c9c50a99028f23b 427332 libs optional libcurl3-nss_7.88.1-10+deb12u11_i386.deb e66b7fc9bf4421ffdad64e7fa85945de 932476 debug optional libcurl4-dbgsym_7.88.1-10+deb12u11_i386.deb a239fdca349230680245cec773862b71 533324 libdevel optional libcurl4-gnutls-dev_7.88.1-10+deb12u11_i386.deb 3a8f1cf82c2c77871c9158236a094da8 542620 libdevel optional libcurl4-nss-dev_7.88.1-10+deb12u11_i386.deb bc1add4ded8dd5439875c7718cb656f7 540732 libdevel optional libcurl4-openssl-dev_7.88.1-10+deb12u11_i386.deb 8d828533763f3060c4ec83f625bb6fd6 425896 libs optional libcurl4_7.88.1-10+deb12u11_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEyTfXx8sBpQ0Lh3cUU9a0/LcaTpMFAmfMtBQACgkQU9a0/Lca TpNNZA/+MN+o7tXWZRgVIhC4RE04++MeGFaqaz1yUuRAWbe4GTEczMnqyktrMzRk oPsKAAlrvgRTCQ9v16tGmT91kqLrmuyxVa/hOTUXwA40byrqQb9YCzHEOYjIpp8C 50gJfvWXMDFfEBjkEtiUftP7U/oUsPpm1QVT8GPDCCC+XcOOgF5MWv4ejQSDoDZK RB8sNRYdNqUTplqRfEj/fw2vCufXCPF633k8z8z/PVX86d81kuMGEndB98ozaViz 7yM8qFjUvIaU5ZeC4Hz+998Cdhy884V57zQQEHqsEU79lgr4me8d/bELpZIS9XTu xlgzDABGjKxvnBU5JkOnQ3oElL8lQhvUFE5UCB8BUXaMlig3VG9mSs3zIDFUoh8A h6oc6ffhlqdfuO4HpH6a5PJG6J2dwNiWGqQ/3L3f0XsekyTtDBTgdniTpV1HI664 oy4kL7UpDqYzyfGJbxhv0Pce4GfTwXQ8wYdmuNFa7egzkx8T8FPfIrwjNoG5/3ja k4etbt9SkFMTXR7OBDZaIN7s+qfSRDu/7wVG+9EW7dk2NVxA0VDixxh0qHbA4lnC 9HM/dNZTtORy8qKS1WBjHo0kcRhwaEgi5SwAu8eeoB6dytrbCluyMzirlgE+MpIM 5JFEOVaAfPfGLOm/SsSpLr0CY4B1FxJIqvpVcg6Fh6XbZ0RKWz8= =0gRG -----END PGP SIGNATURE-----