-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 10 Feb 2025 11:45:37 +0100 Source: curl Binary: curl curl-dbgsym libcurl3-gnutls libcurl3-gnutls-dbgsym libcurl3-nss libcurl3-nss-dbgsym libcurl4 libcurl4-dbgsym libcurl4-gnutls-dev libcurl4-nss-dev libcurl4-openssl-dev Architecture: armhf Version: 7.88.1-10+deb12u11 Distribution: bookworm Urgency: medium Maintainer: arm Build Daemon (arm-conova-01) Changed-By: Dr. Tobias Quathamer Description: curl - command line tool for transferring data with URL syntax libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.88.1-10+deb12u11) bookworm; urgency=medium . * Team upload. * Import patch for CVE-2025-0167. - When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has a `default` entry that omits both login and password. A rare circumstance. Checksums-Sha1: cb17c1b2e20a8577b38df8d041b04bebdbcf92df 159088 curl-dbgsym_7.88.1-10+deb12u11_armhf.deb e3a5026457dde94ff0b586cac153a1afda33170f 12985 curl_7.88.1-10+deb12u11_armhf-buildd.buildinfo c002270c2ff70cd0a1e351bd69bb2bb9c49690a5 306168 curl_7.88.1-10+deb12u11_armhf.deb 2a5b2c0ad520810f30744d29ae7af9dca1f0b139 1001156 libcurl3-gnutls-dbgsym_7.88.1-10+deb12u11_armhf.deb fefd23293b87bb7d0a71242b76bfbbfb5ade4bdb 346368 libcurl3-gnutls_7.88.1-10+deb12u11_armhf.deb 4f9e35ed590b07ac5c7085de0da1a4610f272ed4 1047536 libcurl3-nss-dbgsym_7.88.1-10+deb12u11_armhf.deb a4cc186722556df9613c7fa7cbcfc6968ce78e0c 354492 libcurl3-nss_7.88.1-10+deb12u11_armhf.deb 2fb751270a736bb81b1e918cd46806032d8627c8 1026764 libcurl4-dbgsym_7.88.1-10+deb12u11_armhf.deb 712afcc1ec269719bfdbf21dab9e6173eae2446a 452316 libcurl4-gnutls-dev_7.88.1-10+deb12u11_armhf.deb 321d848388978335eef8e55ea65c2db52d4e0d7e 460472 libcurl4-nss-dev_7.88.1-10+deb12u11_armhf.deb 51306c3cf4061ccd1472dfb2cbdf30345c779edc 457292 libcurl4-openssl-dev_7.88.1-10+deb12u11_armhf.deb 63282801d38e1c29b8b8017c8751b84993e0d7af 351176 libcurl4_7.88.1-10+deb12u11_armhf.deb Checksums-Sha256: f7b7a41b8033c4c01a74be9611099e022f081215366e4c765532d4b3a0b60b9e 159088 curl-dbgsym_7.88.1-10+deb12u11_armhf.deb 9a16543a8e0a8b5e3e323f67b235b71254a9194b72b58b2020756240ad7c4ec0 12985 curl_7.88.1-10+deb12u11_armhf-buildd.buildinfo a0ee5e40bc9050a9be86e15892e06bffdbc6cd212f88f9af6b39f0402ca719a2 306168 curl_7.88.1-10+deb12u11_armhf.deb 2667113f6e2caeb301925e22103557b0fd4d2955062cda5657c0a4a6ae4a6f5e 1001156 libcurl3-gnutls-dbgsym_7.88.1-10+deb12u11_armhf.deb f8f1fd04527fa81e0b1140278ed22c87cb96f83abc3e28a5d6fadac5084d4923 346368 libcurl3-gnutls_7.88.1-10+deb12u11_armhf.deb efb69a9360a208e4b9e5bf4692e4aaef1e18fae3ba7827b824796e04205b4752 1047536 libcurl3-nss-dbgsym_7.88.1-10+deb12u11_armhf.deb 96e6ce0965075fd6ddee676b096ffcb92881c34776dd280ade43003bba7199c3 354492 libcurl3-nss_7.88.1-10+deb12u11_armhf.deb 9819b74d3712e9d7cd0e00d43853b50d0a8866189ffe91808f9ba23691ac51f9 1026764 libcurl4-dbgsym_7.88.1-10+deb12u11_armhf.deb 65a6c4c8653812cc8bf2e17ac63c05bbc0ee9e43271787238fedb2defa8da76d 452316 libcurl4-gnutls-dev_7.88.1-10+deb12u11_armhf.deb 2ec59a103b88b8bd7874376b8c4a27f859ad76ad4a6af064e24463108898615f 460472 libcurl4-nss-dev_7.88.1-10+deb12u11_armhf.deb 22bc0001d6b5cdfb573560531dcbc1017e3601de8092e739d6967c2abedcc548 457292 libcurl4-openssl-dev_7.88.1-10+deb12u11_armhf.deb bd7fd47368091a38c581308f8ab82995c4b00db2f4fb77c443b6d56307d4ebdb 351176 libcurl4_7.88.1-10+deb12u11_armhf.deb Files: a5a2ec110103e622200af9f023d2288c 159088 debug optional curl-dbgsym_7.88.1-10+deb12u11_armhf.deb 6f4bc1288f276333dedf333e4888bd73 12985 web optional curl_7.88.1-10+deb12u11_armhf-buildd.buildinfo ff135d96fad0150c9522833cffb1bcb5 306168 web optional curl_7.88.1-10+deb12u11_armhf.deb 7b8c685eb14cc2f89deb16446915a13c 1001156 debug optional libcurl3-gnutls-dbgsym_7.88.1-10+deb12u11_armhf.deb c2ac6853a869bfb13062bf6da049af26 346368 libs optional libcurl3-gnutls_7.88.1-10+deb12u11_armhf.deb a828330d46732bb6de2d7db573b00794 1047536 debug optional libcurl3-nss-dbgsym_7.88.1-10+deb12u11_armhf.deb 79ac4d0d35f0d77276c9ce5766e5f1bf 354492 libs optional libcurl3-nss_7.88.1-10+deb12u11_armhf.deb 048dac208d95c3e49ba7fd07ac06c1da 1026764 debug optional libcurl4-dbgsym_7.88.1-10+deb12u11_armhf.deb fcf1b9fa1a28027ca10d46a734ef0fa6 452316 libdevel optional libcurl4-gnutls-dev_7.88.1-10+deb12u11_armhf.deb bdd0d1910b7fa5221ad1b5b4e4b79b84 460472 libdevel optional libcurl4-nss-dev_7.88.1-10+deb12u11_armhf.deb 4b6895a3203d3685f07fb8f439fa3b61 457292 libdevel optional libcurl4-openssl-dev_7.88.1-10+deb12u11_armhf.deb 9e68e54f67ee23e18801814f03f79664 351176 libs optional libcurl4_7.88.1-10+deb12u11_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEegRwmIwj8f99iF4m4CwlMGxHD8UFAmfMtC8ACgkQ4CwlMGxH D8VmLBAA6krmYZ2l7Cu/T4WzPurxqN2DjFSHEtpPoAcWSWIRNka3BBZoJKQxDZLi k0Uk7b7TZKRSGvmIMptXNrCTVypOlU1H5CPQ7rdbv066V1CzPtSihBGKp8psDf8l 9TjzYoiHCMdxp5W9heT5VwdETLbt6gwMA+e0dPOLnKmT0ELoHXyR+DNg/jAmCeVK dpoh+o8iEc9dafreFUVvV97XDug5Gy/2oWrM4qqcpnP09ftFVlQgADmTKHtH23cY FPzYmMoeqWgLI1iOTNgMEYYQoHQDyRk5hZ3IBcmzlQzjXiJGfgl9Y5tPk0wgKQ5d 2A6LkjXYh76ey6GT7GOjGVqj4AbZmmdgGsRpUG3n3svQ+tmRGafe9qIGGjD/Txes dLJHaxLwPdTN1iXu+y5UHBDG0nNyhuRj5PgxTx6sV3tHTLLHxkqzNk1nu+/TiaRJ fEfoiPohSrLfRDZQXDWiCNNhbG7Wh74n99cKXb/vMwHJgN+8aRw+yHF2gAsEHbKc NMkhNACxFE3mfgvPxmByWeVpsDSD4UKE3n6EkjTqazGWu/SSNOIY4+T/UlAyMBrB IJ7Kg1cpasotYySZS3PKNbTvmyJnjMP2NZPxrEB0bFtklGox42n7w+2G+ORgcal1 CnVd/s7kVGNQMgXyWTlXNKvqb1A5bRGoUInNiKzWqxVIla17Jvg= =X2w4 -----END PGP SIGNATURE-----