-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 09 Oct 2023 21:28:05 +0100 Source: curl Built-For-Profiles: nocheck Architecture: source Version: 7.88.1-10+deb12u3~bpo11+1 Distribution: bullseye-backports Urgency: medium Maintainer: Alessandro Ghedini <ghedo@debian.org> Changed-By: Samuel Henrique <samueloph@debian.org> Closes: 1041964 Changes: curl (7.88.1-10+deb12u3~bpo11+1) bullseye-backports; urgency=medium . * Rebuild for bullseye-backports. * Import changes from 7.88.1-10+deb12u4 so we can push them to backports before they migrate from bookworm-security to bookworm: - Add patches to fix CVE-2023-38545 and CVE-2023-38546 . curl (7.88.1-10+deb12u3) bookworm; urgency=medium . * Team upload. . [ Andreas Hasenack ] * Move ldap-test to a script and add retry logic. . [ Carlos Henrique Lima Melara ] * Fix CVE-2023-38039: HTTP headers eat all memory. - Done by debian/patches/CVE-2023-38039.patch. . curl (7.88.1-10+deb12u2) bookworm; urgency=medium . * Team upload. * LDAP backend: correct the usage of OpenLDAP-specific functionality being disabled with an upstream patch (Closes: #1041964) This corrects the improper fetching of binary attributes. * debian/tests: add a DEP-8 test that getting binary LDAP attributes works now Checksums-Sha1: 83d20419e0dbd0c01eb66f80eec73f0f313e897b 3284 curl_7.88.1-10+deb12u3~bpo11+1.dsc 6ae5229c36badb822641bb14958e7d227c57611d 4343562 curl_7.88.1.orig.tar.gz 9222035242431a3ef31d33a2ca3d881bcf4572fe 488 curl_7.88.1.orig.tar.gz.asc 40ccdfd798cb81e9568353f801c536fdd2aeb5af 64644 curl_7.88.1-10+deb12u3~bpo11+1.debian.tar.xz d5baf34f7ba87beba8266430b5d1dd3c7d20cc1b 11807 curl_7.88.1-10+deb12u3~bpo11+1_amd64.buildinfo Checksums-Sha256: 1d7744fd7de92d20569cdf53ec1ca58894c89d444dd375b5981e7e710a4f5d47 3284 curl_7.88.1-10+deb12u3~bpo11+1.dsc cdb38b72e36bc5d33d5b8810f8018ece1baa29a8f215b4495e495ded82bbf3c7 4343562 curl_7.88.1.orig.tar.gz 7a5a55d7123149a1b357f298cf895bd0a601e3a2807005ef6c95f3752803485f 488 curl_7.88.1.orig.tar.gz.asc afe993d937b5d5320fbbaf2e6cfb1f48e172a9fb37afdc93e230a67fcc044f70 64644 curl_7.88.1-10+deb12u3~bpo11+1.debian.tar.xz eb559134d7dabd989eb0cd2209146bb849c7a7ecc47d8c959ddcbece5d04dacd 11807 curl_7.88.1-10+deb12u3~bpo11+1_amd64.buildinfo Files: 6ddf883411884025025fbea2ce14e854 3284 web optional curl_7.88.1-10+deb12u3~bpo11+1.dsc 1211d641ae670cebce361ab6a7c6acff 4343562 web optional curl_7.88.1.orig.tar.gz 08b846caa2ce56ccb4b4caa268b30dc2 488 web optional curl_7.88.1.orig.tar.gz.asc 4c6dcee4071fd80181104d535cdc1cf2 64644 web optional curl_7.88.1-10+deb12u3~bpo11+1.debian.tar.xz 2537a0c32e7f840097b2a7150eb91b3f 11807 web optional curl_7.88.1-10+deb12u3~bpo11+1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBdtqg34QX0sdAsVfu6n6rcz7RwcFAmUmPC0ACgkQu6n6rcz7 RwfBow/8DxZOiWKhYHSXurPkzTswU+KTX5M/gC3Vzg9LsZ7U/5ZI8ilbOfK7V1e+ NXJwTuN9WpYmWbRWDGdo2hoGdG7CL7E+QLGku546lyHdstb5MNOF+MU1XfkgVGLW bW4hlPi3k0IMeLWYCWzQcgPOhQKhwf6qMNvH7lNIP42aR1YHaLns7o17tpfgIfqs 8+AfiXgtFEWiwX9y0wA0WBTjlcQau9bvuBdWG7kkzaKp9CTMZQZIYgLCIBLly5oZ ZlptkyNct1EAhEHSKKhyUJQ5aREOCKTp+f8OZ0iYqRPT9knaQoVbNM+5Y1ajHZe9 Hyk00oeyO235j5pvM0U7FSKZWuIkQ6Wla8nx//vYFcTKpJPpddMMiH/bsf+jotcE 2I8Lr7jKbPYmZnonGNljGwPcgX1yy+Wxd4M1TlNQZzRA92aYNUE7HuTvWbcKHr6v BOwDVaTgqWe/0KljHY73asbkjM9c7/sbAGmcEfrAU5QFfN1EkgRldY341WSq1LBO eamjlTk05EgW5TwhbSCh4tXPbWHaZ34KbRb5xWEmcC6HWuRXq+LkC3tNwMjamyvW 0OLNRVAbHeMfGV/ZKathhboiPF8RrIubmSYddJy0jrQVxKA+KV5wb1+QK6oeHJ7W +tPxiO/ZOzzXHmDd9Jmi4Vncdu6OT7DoUFGI+Yb8SJFHnUF4noo= =Qlv6 -----END PGP SIGNATURE-----