-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 18 May 2023 23:43:40 +0100 Source: curl Built-For-Profiles: nocheck Architecture: source Version: 7.88.1-10 Distribution: unstable Urgency: medium Maintainer: Alessandro Ghedini <ghedo@debian.org> Changed-By: Samuel Henrique <samueloph@debian.org> Closes: 1036239 Changes: curl (7.88.1-10) unstable; urgency=medium . * Add new patches to fix CVEs (closes: #1036239): - CVE-2023-28319: UAF in SSH sha256 fingerprint check - CVE-2023-28320: siglongjmp race condition - CVE-2023-28321: IDN wildcard match - CVE-2023-28322: more POST-after-PUT confusion * d/libcurl*.symbols: Drop curl_jmpenv, not built anymore due to CVE-2023-28320 Checksums-Sha1: 3f2d5285cf65569050453888ccdf9e447adb1f55 3163 curl_7.88.1-10.dsc 717a0b98c9b6bc273a81dc9a240c143c37d43b16 55392 curl_7.88.1-10.debian.tar.xz e5a757cceeae14205992a337c370c7403590fe98 11048 curl_7.88.1-10_amd64.buildinfo Checksums-Sha256: 717ed30766b1ccf951685627c910dea11b021da5f1c3e6f465517981d62ef0fe 3163 curl_7.88.1-10.dsc fc3976de8659cd016d9f3c3523dc801294651c895026193e07a6c3ce358c13d1 55392 curl_7.88.1-10.debian.tar.xz 57083f4c6f401c0b3e54e0edf0d83e7a9d48cb3af84c9a7d69340d6ae70e1740 11048 curl_7.88.1-10_amd64.buildinfo Files: 625c11be1661922d233dd14527988a73 3163 web optional curl_7.88.1-10.dsc 917fbd7585dd33eef719b51beeef462b 55392 web optional curl_7.88.1-10.debian.tar.xz 55db644ca2b943c2d300c81629f30773 11048 web optional curl_7.88.1-10_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBdtqg34QX0sdAsVfu6n6rcz7RwcFAmRmq6cACgkQu6n6rcz7 RwedexAAw0pBT010Cd+66zvEY7v4P88nyQWDbY6C5sZSyDVXmrUDGHn2PeEGGTTH /1ZH25JUdOenWMVYPIQbfOig7+mrfCe9qdthpjWFImc4LrQ31OlZyM7tl+20PSmi Cgi2eXCQ+bw0gS+huU12bvr01y5qkBistgfPCtmFo5JaPFe0uQ2n3BUtnjDEhEI2 jfXQFP7R2LJ7+H51B+gL5bPynpYoSXoImBf4iuYnnqA3B/qzk4WvbP6r5j37duv5 AOAT+M2+5GyHYeMIrbKkPCh94zNvLmDquaYVwQZJu1ND3gU6tso/XIiO9jmXQm0O 5lZ4mAEgjvywyU64YIq4DbDQ5cnlSmwBsVCuGqWoLuG85cFDnJXawTWDdYNUNvWS PAY5OfEVVZynSFA3X+IaOe8j1ZCOTmmRdvWdyB+Ix7hr+gZb8b48PskCn0Xh3pUF F7PbiOp9wXIZbRldxKTrzEMZPtNpbokBI6QIHjyLHEthOFhsA1Q1XvqyiovZ3sNa 4P+6WPQF3FZkoN4apNnOW0g6csYJ2mffMhXHNDX0TajFigXiu0MSjwqTgI4fLt9w oB4Y8Xt53dW85rGyKmNMuPTlo84sZoiHmG5FWXOAAdW+VhRfy6AcEEzJKilqoBtS r5jlztyL2eKADm5bzKSzH5mv0HJY8l6zVS61uMzQlgQQdGbLPHs= =uQjj -----END PGP SIGNATURE-----