-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 10 Dec 2023 06:07:30 +0000 Source: curl Architecture: source Version: 7.88.1-10+deb12u5 Distribution: bookworm-security Urgency: high Maintainer: Alessandro Ghedini <ghedo@debian.org> Changed-By: Samuel Henrique <samueloph@debian.org> Changes: curl (7.88.1-10+deb12u5) bookworm-security; urgency=high . * Add patches to fix CVE-2023-46218 and CVE-2023-46219 * d/rules: set CURL_PATCHSTAMP to package's version, so it shows up in "--version" output Checksums-Sha1: 1c2a3537761fcf6f28e46a2b04936e374e7af561 3252 curl_7.88.1-10+deb12u5.dsc 6ae5229c36badb822641bb14958e7d227c57611d 4343562 curl_7.88.1.orig.tar.gz 9222035242431a3ef31d33a2ca3d881bcf4572fe 488 curl_7.88.1.orig.tar.gz.asc fed9ae9df3c78c1180238ccaf6337e6091f4cd42 66024 curl_7.88.1-10+deb12u5.debian.tar.xz 7153c7d031c40d3617e37d84f46ec9ac7adb24d2 13480 curl_7.88.1-10+deb12u5_amd64.buildinfo Checksums-Sha256: b9128cbe8251c58ad5d1374af55c716b5946d3a47b3e575810fb0cf38f24cfc0 3252 curl_7.88.1-10+deb12u5.dsc cdb38b72e36bc5d33d5b8810f8018ece1baa29a8f215b4495e495ded82bbf3c7 4343562 curl_7.88.1.orig.tar.gz 7a5a55d7123149a1b357f298cf895bd0a601e3a2807005ef6c95f3752803485f 488 curl_7.88.1.orig.tar.gz.asc 688fbc081e03115d360e93267a7e5231b11a01b82c3c7254ea1e9509f2989c93 66024 curl_7.88.1-10+deb12u5.debian.tar.xz 795df286937a45b3c2d161ae696ba34c57b27ee0fdaaccd7d64a36b1f563ce51 13480 curl_7.88.1-10+deb12u5_amd64.buildinfo Files: c658fc37a6546edff6d26c5d8796b876 3252 web optional curl_7.88.1-10+deb12u5.dsc 1211d641ae670cebce361ab6a7c6acff 4343562 web optional curl_7.88.1.orig.tar.gz 08b846caa2ce56ccb4b4caa268b30dc2 488 web optional curl_7.88.1.orig.tar.gz.asc ccdfd4dc83843a4fc00eb62ff90faef6 66024 web optional curl_7.88.1-10+deb12u5.debian.tar.xz 00156d706bd00a074ca12adc32e8fe5a 13480 web optional curl_7.88.1-10+deb12u5_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBdtqg34QX0sdAsVfu6n6rcz7RwcFAmWFgScACgkQu6n6rcz7 Rwc3oQ/8CQ2jR6kbN/CK0+d0ZMSa6c5sbwRV77ye6kB4qtmjQ8Auqd4stpCSmj1v J30WLJHe9H6A4McMenSAUz3IRSXR3WkM9jolZoQ7tNbKrxMw2BhuEwGCdCneZqFf Sb+1j9lqjwQvKOJVZ9gIY/pqQjVely3gM4gT9u68oVsdyriwoCAuuA7eXUbLwGNz VYei+bU6v2JpPLg4oXIFBVNGwFb1A7NBjnROY5KMZ+pV8ee751PARsB+VDIEF6Ws L7imdGdJr6B0eKPYpfFhvPiBTlIIW6lBFm92XDZvfxxBDolhUycugWKvD6eRZ9MN b5gZvsKjrDsDx3sAEGJ2qo+R5DZLMZRYk2vFKnnyDSGHIDBsHQ+Jq1xbJs1Q7pGY 7HyO9EcIA46ZtFB/L/xnJmFrbQlGut00NwtpfPjPVGe8cuS5RLf/B668GFyObVmb 0yExGnvIsj6qp2VrhF4jhHTYUIYC+1YCQuJfNSesfIQJFBIudmSK5JJfyVuroS7V HDSHqa5c6PkvwVMdkIJLuxzK5qw7mIDfN1URpP/O9Dvrzi76k/SA9+IFNlYCrrAc 8Zo1iyQiVYMBH7WvdSBNVEvenpaIaFIAUO/S9kJlgTYGbn/vDOYxMuphowiSfrIH CirtSjl8imSzPQgzn3eGNT0vs6mWsoemp5T5iqNpzpAS8ylJuW0= =Sbta -----END PGP SIGNATURE-----