-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 10 Feb 2025 11:45:37 +0100 Source: curl Binary: curl curl-dbgsym libcurl3-gnutls libcurl3-gnutls-dbgsym libcurl3-nss libcurl3-nss-dbgsym libcurl4 libcurl4-dbgsym libcurl4-gnutls-dev libcurl4-nss-dev libcurl4-openssl-dev Architecture: ppc64el Version: 7.88.1-10+deb12u11 Distribution: bookworm Urgency: medium Maintainer: ppc64el Build Daemon (ppc64el-osuosl-01) Changed-By: Dr. Tobias Quathamer Description: curl - command line tool for transferring data with URL syntax libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.88.1-10+deb12u11) bookworm; urgency=medium . * Team upload. * Import patch for CVE-2025-0167. - When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has a `default` entry that omits both login and password. A rare circumstance. Checksums-Sha1: 4318a4c89d88563f4054f1f5c787bd14a31288b1 163556 curl-dbgsym_7.88.1-10+deb12u11_ppc64el.deb a45534e3d10c1cc8282cdfa55a74784c742d437f 13143 curl_7.88.1-10+deb12u11_ppc64el-buildd.buildinfo a23008b7406e740a6204fed2ab434124d86cc340 316324 curl_7.88.1-10+deb12u11_ppc64el.deb e817d898bee0e598b337b69817464d2cd21b8fe8 1050692 libcurl3-gnutls-dbgsym_7.88.1-10+deb12u11_ppc64el.deb 784b997bc87f382862a3c6a4ea30b3e2ace83d9d 406652 libcurl3-gnutls_7.88.1-10+deb12u11_ppc64el.deb a2c7ec8e60930bb2fc5c879d87852c533a6bb860 1093924 libcurl3-nss-dbgsym_7.88.1-10+deb12u11_ppc64el.deb 3d914a9427b2612d3260d2c785e401d46ffbfe46 417668 libcurl3-nss_7.88.1-10+deb12u11_ppc64el.deb 87c99c049ac622ad6375a01708bcbab1bc958f6f 1078004 libcurl4-dbgsym_7.88.1-10+deb12u11_ppc64el.deb a3f8765e8a778131469e0dc9cc39241184c550f4 518204 libcurl4-gnutls-dev_7.88.1-10+deb12u11_ppc64el.deb e4489b2f57654f9742db1e7657545cf17519c329 529140 libcurl4-nss-dev_7.88.1-10+deb12u11_ppc64el.deb 27a8815d16bfcbf1c3e2a703ab35827f6685c7bf 522704 libcurl4-openssl-dev_7.88.1-10+deb12u11_ppc64el.deb 08b3a9305d9b2da7d7ac5e9c2e5a10cc95e98de8 411340 libcurl4_7.88.1-10+deb12u11_ppc64el.deb Checksums-Sha256: 3d27876b3231a009706e2793727533da9039bbe1eb4c47869b9147007817a775 163556 curl-dbgsym_7.88.1-10+deb12u11_ppc64el.deb c5c29cdb2549164d12049b952a5c3b12ba09e97d126168b126cb8bf392448242 13143 curl_7.88.1-10+deb12u11_ppc64el-buildd.buildinfo 0991575e0472e3c7841cf5448ad6d83e4b932a16a0d327f8bcfcc7a72ca1c1d4 316324 curl_7.88.1-10+deb12u11_ppc64el.deb 57f1139646cfffcb4c55942f65e02b3ebe628228facf31157411c016868a6512 1050692 libcurl3-gnutls-dbgsym_7.88.1-10+deb12u11_ppc64el.deb 703e1d39eb0c9fafd486baf87242a8b2c0de8df66078a2861f947a3ce7e401fa 406652 libcurl3-gnutls_7.88.1-10+deb12u11_ppc64el.deb a607faf57660e128cbc75c6835c357831dda6e31804643af7f7673c3fb21a233 1093924 libcurl3-nss-dbgsym_7.88.1-10+deb12u11_ppc64el.deb 1eb80486c979d4e5929287c5a0b28e5d1846fecb0396b8fdcbeacf413a8af5f2 417668 libcurl3-nss_7.88.1-10+deb12u11_ppc64el.deb e69b2d54714da0c18c2ece95f89e2bc75827d67b8347ba41bc4675ab54d373ad 1078004 libcurl4-dbgsym_7.88.1-10+deb12u11_ppc64el.deb 1513eb90c1bb5cb8159e4b2448469d3fe2e9719b13f8eba80a67014c70a2f46e 518204 libcurl4-gnutls-dev_7.88.1-10+deb12u11_ppc64el.deb 1e5971635669453170aebc208eadb8e9345db945491a8b83ac99a9496a225dd3 529140 libcurl4-nss-dev_7.88.1-10+deb12u11_ppc64el.deb 6d0694ccdeb3948a8cdda03070fee2c383e277e9e28f7a6a374da00bcb95a0a5 522704 libcurl4-openssl-dev_7.88.1-10+deb12u11_ppc64el.deb da8911c7bb86af7f7724e52c4f8a6e19290650972f6e9ef681fa228bdbaea853 411340 libcurl4_7.88.1-10+deb12u11_ppc64el.deb Files: 870f143603bb90614ff3c04961c7f1cf 163556 debug optional curl-dbgsym_7.88.1-10+deb12u11_ppc64el.deb 69a6ab9678021bc23da2b97ac140a73f 13143 web optional curl_7.88.1-10+deb12u11_ppc64el-buildd.buildinfo 80af469904e591b362986018cba6d3b3 316324 web optional curl_7.88.1-10+deb12u11_ppc64el.deb e6c8bd1862d5635ea61ff51b52fa1b74 1050692 debug optional libcurl3-gnutls-dbgsym_7.88.1-10+deb12u11_ppc64el.deb e19ca0b7be9421e5ff7cb07998985a26 406652 libs optional libcurl3-gnutls_7.88.1-10+deb12u11_ppc64el.deb e3398a0d6c78a41e13f9fe643b52dbb7 1093924 debug optional libcurl3-nss-dbgsym_7.88.1-10+deb12u11_ppc64el.deb 74c5486d9a3e3f95fd98d4e6d9b5a084 417668 libs optional libcurl3-nss_7.88.1-10+deb12u11_ppc64el.deb 623c7d61ad344ea23ea8110c9e802877 1078004 debug optional libcurl4-dbgsym_7.88.1-10+deb12u11_ppc64el.deb 7db0bd9bdc7fef9ac5be58e0826306b3 518204 libdevel optional libcurl4-gnutls-dev_7.88.1-10+deb12u11_ppc64el.deb f03d24540de588c3ef844640aee5ba38 529140 libdevel optional libcurl4-nss-dev_7.88.1-10+deb12u11_ppc64el.deb b1d04ef21b90a19fddad1dc886c44422 522704 libdevel optional libcurl4-openssl-dev_7.88.1-10+deb12u11_ppc64el.deb a95fb6b4d34df10e137798bc4d26366e 411340 libs optional libcurl4_7.88.1-10+deb12u11_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE5v3ycPFoB5xoBEprvMjydu+xvRMFAmfMswAACgkQvMjydu+x vRPRwA//R1pTVWtflwgLoiVBEJCOQnKxKlGJAddxpLKaW5y+kR70oBec9urGZE7Z cAUSuh26dyVqCKqq16EW1nieTd2mL/HYCUrwmqScPFGbGdh1bW0yl7ViK5YEYUKl jtZFfisG+y01ZMfQkBy/kFVTIAJ8y3NqfvwKRGi6NRATdsPz6a2kptnkrBeVn3sx jvQslUDwsGmG3Nkzh/+dO9Clqvd+Qwf1Txy18JCvl+u8EwzrHEfZJ0iwl9oHB6Sh 4/0maM6oQ+Aq0f+laa/fXD2goIHLYRzlmES3QsnzRO6kf3wBF4xidDiLvjtgDM5i 9s9YxoUI9N1YVbI7A7ggmibLZZL/vm/kMajmLDONk15r6cL+D30epxClqg6aAzt+ zcbN5TdGKLMqtFkAkG+r7a9vGRpGqLmO1IW7d4LUN7KMQkffltnaygBH/+oPRyfb P+Gdxxn0zwJDEhLG64nwVJYfIBSU4XLYRfava8Boawr1jobywHVybNe5ddYomPpU 845A7VgRchBHu+tXOAKzagYnD2T12P9mgYDynak+MzyA4dCiUDCNd6wtN4DNVIYT JWySnlXd8UvmvFCrmEYEKYrV+hUXh8Yaw0RjALtgjElc6m4J69rE7OxJkKZINjEb lpd6yMRDLvLVyh/zfkZYZd+SnuPRQB4U8s/NXPYwxIs6P1aqNAU= =ndl2 -----END PGP SIGNATURE-----