-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 03 Sep 2022 12:26:12 +0200 Source: curl Architecture: source Version: 7.74.0-1.3+deb11u3 Distribution: bullseye Urgency: medium Maintainer: Alessandro Ghedini <ghedo@debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 1018831 Changes: curl (7.74.0-1.3+deb11u3) bullseye; urgency=medium . * cookie: reject cookies with "control bytes" (CVE-2022-35252) (Closes: #1018831) * test8: verify that "ctrl-byte cookies" are ignored Checksums-Sha1: 49d34465c24ce2355ff60d2f545519fe3392c18e 2854 curl_7.74.0-1.3+deb11u3.dsc b513663628e8db1cffa3f10913072cabb1000b66 57680 curl_7.74.0-1.3+deb11u3.debian.tar.xz Checksums-Sha256: 7aadaae34631b7422de02c2fd2b7e5dff0fd9753bcc34a38c62c75bba4abe211 2854 curl_7.74.0-1.3+deb11u3.dsc 6a4691f76b22a702d667079de7cb79c420b3a56b95ab9e9f1ee37c9b07a051dd 57680 curl_7.74.0-1.3+deb11u3.debian.tar.xz Files: 239dfe1e05903fd3aa05a09f6e14a017 2854 web optional curl_7.74.0-1.3+deb11u3.dsc 085e2524d35d5d974b11975df66d5409 57680 web optional curl_7.74.0-1.3+deb11u3.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmMTObtfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EVhsP/1Wej485pPqqoDvn1yDAij3dIozExaJc atTyKQnUUiyjD0/Dq6MX0JDQjDmgMRPsRRQRp+bEO0AXw4phukl3nDj/tnet7QQ4 r8pkq3l5D0Jm6Tko/HiN9UgEA1CQv61E1y1xxjxVitw8UvNQnf6Mngrp8J2uxYB8 a5KT55pU683ifort4KnvLDbWLynJsOTKIAxbkraL5Oz2AZAUDpReSSmPFYAWUSl5 No1h5b+45T7taQJCU09hfVl7Kq9IBHBh/KML429ybArkSscL3dtWZHJ62FQ2KlYU i6ZOgoGUeStoAAEad5z1TFjwGsRw3mH6Bel06WEOhsWI9CH04AeVsEHoPKX0YiJf RL132TyTNpGWG23/LZXxrf4PtLKJXD/vEaLrtkxa2NZ+6GrmBmuyrvADI0ot9iJf on6svAi589E4pm/+OKcrwCGg03HV5Rmsp+oMdr6Lw1B+C9P6RZJbT9ReDxTw1zFR qCiZxY/thRuuV2KtWAuCoJWazxtO5W2tXz8gbme6unecTZgrQssw4D14GKCXFe3j jZ7Xo2vaZjTrb0a8uwq1HzSLlrWS271XlHC/1cEFUhsIn3hAOeb1O+D5tc/ZryiT SIxGUPRXMGY4HNAPo1rtCCKqbNpHHWlOwgOvr2Q2SMNk+GHomVmVymexsFWDvTnL jxngr5aTdecu =Q2mS -----END PGP SIGNATURE-----