-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 09 Oct 2023 21:10:37 +0100 Source: curl Built-For-Profiles: nocheck Architecture: source Version: 8.3.0-2~bpo12+1 Distribution: bookworm-backports Urgency: medium Maintainer: Alessandro Ghedini <ghedo@debian.org> Changed-By: Samuel Henrique <samueloph@debian.org> Changes: curl (8.3.0-2~bpo12+1) bookworm-backports; urgency=medium . * Rebuild for bookworm-backports. * Import changes from 8.3.0-3 so we can push them to backports before they migrate to testing: - Add patches to fix CVE-2023-38545 and CVE-2023-38546 . curl (8.3.0-2) unstable; urgency=medium . * d/rules: Add test 3102 to TESTS_FAILS_ON_IPV6_ONLY_MACHINES * d/patches: Import two upstream patches to try to fix FTBFS on armel/armhf - test650_fix_an_end_tag_typo.patch - tests_increase_the_default_server_logs_lock_timeout.patch * d/p/lib_use_wrapper_for_curl_mime_data_fseek_callback.patch: New patch to fix armel/armhf FTBFS . curl (8.3.0-1) unstable; urgency=medium . * New upstream version 8.3.0 - Fix CVE-2023-38039: HTTP headers eat all memory * debian/: Remove files used for the nss packaging * d/patches: - Refresh patches - gen_pl_escape_all_dashes.patch: Drop merged patch - 90_gnutls.patch: Update patch * d/libcurl*.symbols: New symbol curl_global_trace Checksums-Sha1: a843284642d7a5830d32b3518f211d0026c46c85 3076 curl_8.3.0-2~bpo12+1.dsc f3d6d1f9612a6416816d070e53798f2c0459c12b 4404620 curl_8.3.0.orig.tar.gz 67211bebe8bca2d703c09178cd38fc47485aef99 488 curl_8.3.0.orig.tar.gz.asc 8c620fefbe04216f3a214d4a25ff0ca1600b9f85 49932 curl_8.3.0-2~bpo12+1.debian.tar.xz ec9c6966bc9212dd63f189ccfa0fdc15faf59cb2 10138 curl_8.3.0-2~bpo12+1_amd64.buildinfo Checksums-Sha256: fd83cf622464b74a954df8896a521539ca167af6c5bdb535be5254030ee69cbe 3076 curl_8.3.0-2~bpo12+1.dsc d3a19aeea301085a56c32bc0f7d924a818a7893af253e41505d1e26d7db8e95a 4404620 curl_8.3.0.orig.tar.gz 3612f9b0f6cb45a0cbf8a5c7f2f018297920e4f9e26a6e3a61d1f452f9ebda42 488 curl_8.3.0.orig.tar.gz.asc 959b0fcaa9cef6bc7183b67c32b0b21502a032e2983e6eca9c51130dfcf45390 49932 curl_8.3.0-2~bpo12+1.debian.tar.xz da9e331640e4b9782b7c2a08a92227e0e8951da1b6b121718de67e46d9a6473a 10138 curl_8.3.0-2~bpo12+1_amd64.buildinfo Files: dc73cbb59a5f0be2e9306f2728d94bf1 3076 web optional curl_8.3.0-2~bpo12+1.dsc 7e614827c4165bf30f9770577259561e 4404620 web optional curl_8.3.0.orig.tar.gz 221e3d01d812ead588f100f3a0a6d525 488 web optional curl_8.3.0.orig.tar.gz.asc 8998d750cda1852694051ff40356c4c8 49932 web optional curl_8.3.0-2~bpo12+1.debian.tar.xz 775352f925525c770f04f747398b01da 10138 web optional curl_8.3.0-2~bpo12+1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBdtqg34QX0sdAsVfu6n6rcz7RwcFAmUl5YYACgkQu6n6rcz7 RwdGSw/+JA1hd3tLxr5c0nLwRsMp1yBdruFUEHFGLcaf/hBl8O5jDVx0LVCVwrs9 9jkfeHXs/qmQjGkCMGOI4xWD0qPr/gt3JEBuFFs5cSLc0K6R9mIwRp+FiWuRqqLN mqjmDPAaY8bkR/eJ5qQTZ3lkAWKLfOXhKCLk7Zl1rAJPGS4XNZShPZEx+HbQ3JyT p8RuOLBBVwb7jzTWIr9wLQEvRt0lF6LDLEVTBLDEX+iYDMcNvfkjyhk0LFG0dpJ5 PC733UuLtuHCbQv1dvE36+56VwYZC5/5THGfSrPrdSprcibEi06FLkk2kFjyAoAa DlnK22JhJbK/Qe/h0CxvGpqq9C7Hb3DqDGRV+o362oZ29Kqwp1qlYTzRJ/HnhrIU 8oLP+dduH8K8Wk6wn0/GgJLAktHMOgvCJdPG6IheJ34LYuKbCxChzDxRJ69A6lz+ sS1jyTnkR7ggBN5SSaTjhRVmuzNX5IqA1UU3bJHcI5YDKeAMecOZAY50GdaLZIRL EB19A7IMDNM2sQTvSQYD684KW2XhdX3XmlxfB6sopw1cbclosjW+UmxncLIpogK0 qEqR5DkZD4c68LDQSsnIzaJuXqf9S1DmmHHPoB+SmdB5WI8jPtxhfZhXl7xevOHA +DN8tdx5UW2hJmMRMz8ENfRB4SZp98wdc+1+wLmH81EAZu8eUqw= =9ur+ -----END PGP SIGNATURE-----