-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 10 Feb 2025 11:45:37 +0100 Source: curl Binary: curl curl-dbgsym libcurl3-gnutls libcurl3-gnutls-dbgsym libcurl3-nss libcurl3-nss-dbgsym libcurl4 libcurl4-dbgsym libcurl4-gnutls-dev libcurl4-nss-dev libcurl4-openssl-dev Architecture: armel Version: 7.88.1-10+deb12u11 Distribution: bookworm Urgency: medium Maintainer: arm Build Daemon (arm-ubc-04) Changed-By: Dr. Tobias Quathamer Description: curl - command line tool for transferring data with URL syntax libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.88.1-10+deb12u11) bookworm; urgency=medium . * Team upload. * Import patch for CVE-2025-0167. - When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has a `default` entry that omits both login and password. A rare circumstance. Checksums-Sha1: a76137d22786daa40c2a3403b840224189214b81 157212 curl-dbgsym_7.88.1-10+deb12u11_armel.deb 89901bf1e80fc6d7ec5d2aa7491773144cd90035 12980 curl_7.88.1-10+deb12u11_armel-buildd.buildinfo 1af203037d7e2ce680a1fb49388db9d87e147490 306296 curl_7.88.1-10+deb12u11_armel.deb d0c3cecca7f5097f6fd4a367c3c01ee3763f2c5e 989964 libcurl3-gnutls-dbgsym_7.88.1-10+deb12u11_armel.deb 68043b32daa530ced082b2ceffd532c0c559e554 343608 libcurl3-gnutls_7.88.1-10+deb12u11_armel.deb 7fa00bea6bb10f8323f8c0b147390d37418c969c 1034920 libcurl3-nss-dbgsym_7.88.1-10+deb12u11_armel.deb d7f8e58f6927d7be6d9fb500e408d838ba3e3b13 350128 libcurl3-nss_7.88.1-10+deb12u11_armel.deb bdc8e2809193f62bc4eaca6f5a4566fc78220c57 1014356 libcurl4-dbgsym_7.88.1-10+deb12u11_armel.deb 0d0500e83896e3508b3ec594d1f5209e4436d9e1 448964 libcurl4-gnutls-dev_7.88.1-10+deb12u11_armel.deb 9853fff703b4a6b6ff1974b910cad6586f62b288 457488 libcurl4-nss-dev_7.88.1-10+deb12u11_armel.deb ebf94175c5dd3ead5662d7fe3cb6072380632f63 454064 libcurl4-openssl-dev_7.88.1-10+deb12u11_armel.deb 58ca55211d9745b750370250976cc282a8cb8cdd 346956 libcurl4_7.88.1-10+deb12u11_armel.deb Checksums-Sha256: cbc6d73c248f73d510d9eb7deb71918e23447e7f6b59545d765c1e93264ac48b 157212 curl-dbgsym_7.88.1-10+deb12u11_armel.deb 74fe57ee17806a7b9943ce00f7432e7477a5c1eb25543c97f74710bb5fbff0a1 12980 curl_7.88.1-10+deb12u11_armel-buildd.buildinfo 8c44caefc4609737416caef6f64b5f756a4f019a9c3fa5ff8bdf083774b64197 306296 curl_7.88.1-10+deb12u11_armel.deb e59f9a8ed54567d14777911ad7d5e9c19bc0c9d1b1997b5aaef64a7a237c6d9a 989964 libcurl3-gnutls-dbgsym_7.88.1-10+deb12u11_armel.deb 5fc6f9a5ddc31eef6a2fab208513cf237828df81eb902c12f9f835df80438a76 343608 libcurl3-gnutls_7.88.1-10+deb12u11_armel.deb 35b81342e65565433eca3e7180731642106d6ad9db5d86f200f7ea84be0401ce 1034920 libcurl3-nss-dbgsym_7.88.1-10+deb12u11_armel.deb 28c99dc4e2b38079d1bd8e869a75398ad4ff4d19d270829f6f74465d64ef6606 350128 libcurl3-nss_7.88.1-10+deb12u11_armel.deb ec02683ea3e03ba7e7ff2da6298284379c93e5f0a9a92b64a0323e2d74ac82ac 1014356 libcurl4-dbgsym_7.88.1-10+deb12u11_armel.deb 2e43f58a88b03fa2cc561a0b0176bc3e1303328e8fcdc00823326d30ffc32ac0 448964 libcurl4-gnutls-dev_7.88.1-10+deb12u11_armel.deb b6e4eb768a6cee632ec9f96ddff40e5045e70bae84580c3dcba3c8d8f331b991 457488 libcurl4-nss-dev_7.88.1-10+deb12u11_armel.deb 76ffb9962daeb2816b31cb4d5a477c973a3930f1fc33719c9b79210acf95c483 454064 libcurl4-openssl-dev_7.88.1-10+deb12u11_armel.deb e8ad70500330229e74a4743696a0534f218c1d35a47ed6fc462aa3e0fb6993e5 346956 libcurl4_7.88.1-10+deb12u11_armel.deb Files: 71acec49c84261b114a8a893c34aaeee 157212 debug optional curl-dbgsym_7.88.1-10+deb12u11_armel.deb 1af6493a1a26a381e6f0abf7dd49d95f 12980 web optional curl_7.88.1-10+deb12u11_armel-buildd.buildinfo 76272d2735a4fdc94df44480f5ee8f91 306296 web optional curl_7.88.1-10+deb12u11_armel.deb fbd3362ba8d4f058967ba3f6667e318c 989964 debug optional libcurl3-gnutls-dbgsym_7.88.1-10+deb12u11_armel.deb 49f17356fc6a773e62577bfcec2ea283 343608 libs optional libcurl3-gnutls_7.88.1-10+deb12u11_armel.deb 7a96d6fb2b510427b3138f809de85b42 1034920 debug optional libcurl3-nss-dbgsym_7.88.1-10+deb12u11_armel.deb 195b98fa97b019bfdb5905a9d30d905e 350128 libs optional libcurl3-nss_7.88.1-10+deb12u11_armel.deb d8d2a2cf39711dbf142fc80ad5ce222a 1014356 debug optional libcurl4-dbgsym_7.88.1-10+deb12u11_armel.deb ace4521c346ec51c85bfda364133bfc6 448964 libdevel optional libcurl4-gnutls-dev_7.88.1-10+deb12u11_armel.deb ec87a25fd6bba1cc19badcc921168d7f 457488 libdevel optional libcurl4-nss-dev_7.88.1-10+deb12u11_armel.deb 7d7ea2c26faeaf8e6294b746eed09a01 454064 libdevel optional libcurl4-openssl-dev_7.88.1-10+deb12u11_armel.deb 4df7a42a120c578628dc4a588c17d407 346956 libs optional libcurl4_7.88.1-10+deb12u11_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE6s8UzO+WAx8RRAOV80lOEvgzuSsFAmfMuxcACgkQ80lOEvgz uSv72xAApjO9uvW+bKuHRESh2oOIHKvTmD6DGgj8JBw/pcsJ4xczQPUKFIyCu3Fu D36ExgZ4Nt/biu3tnFZA/094ZV/yL6/3tEhNGqUFOZ4wdb3Y1h/j/7PbgEgpmFYt 2u6rG/vjFY9VOUEa5N/v5YRJOuU0OEr1VBbcZJhNLYQH8Qyu7LSUazV/YwYkhqhD kBaySy8zKeEFkleRfG2F1svcUfScpMAXrpFkreTkErCWAYsNXwq55PfoPGwnXiEt X+4mPiFweyx+EZcxcbOnx9hW2lW6+vRwxe/sZYuArOhepPAFVSXc7KfwITP7B3++ 57dhR3ykpRvl5g6bYScG+uVx1N7tJfUnlgEncrPTJeS2p40+QSpBH7pr8uyf85wl gCOQllH67Em4m1XM/IAuR1wS3Fg1gga1ehTjDNG/1vOUFvp4cmzCrxwkkdE9X+ut kqeTQQJPfZofnI4o1XPM1vWTTme0Bj2g+em1btCyUCtwJkeOTtGk22BldB02DXjn rTFgv10feX2POSf91RK2zAa0IWdA1PX+2Bb74LUBNGShMf/BglFge6FCkqJtQdkz Vo8JP4xM4gnmyjbx1W4Ptwr/nECBYTIaDkFQyYcsN4CGXrQtWVTCanpxJAmB40lx HmLrO+WN4RI31HDhAo/1OXp5M8Tp9RntCLvZbFh+cY9MKAkGwVE= =FuS2 -----END PGP SIGNATURE-----