-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 17 Sep 2024 16:29:24 -0300 Source: curl Architecture: source Version: 7.88.1-10+deb12u8 Distribution: bookworm Urgency: medium Maintainer: Alessandro Ghedini <ghedo@debian.org> Changed-By: Aquila Macedo Costa <aquilamacedo@riseup.net> Changes: curl (7.88.1-10+deb12u8) bookworm; urgency=medium . * Team upload. * Import patch for CVE-2024-8096 - CVE-2024-8096: When the TLS backend is GnuTLS, curl may incorrectly handle OCSP stapling. If the OCSP status reports an error other than "revoked" (e.g., "unauthorized"), it is not treated as a bad certificate, potentially allowing invalid certificates to be considered valid. Checksums-Sha1: 5d3fa24658cc23b050bd8dde713d735684dbe06d 3252 curl_7.88.1-10+deb12u8.dsc 34f23ba92c1018bcd5bcede27cc8c0f678b8a063 72136 curl_7.88.1-10+deb12u8.debian.tar.xz 2d6b653be9c6cf62ed28ea56d9759f0cfe7f6603 13603 curl_7.88.1-10+deb12u8_amd64.buildinfo Checksums-Sha256: af43477e1d778fdd9f7aef7d57070cf82fb9f68762833371c30bc4b328fec020 3252 curl_7.88.1-10+deb12u8.dsc 8b682af6698abe2020b7d209806cc7341cd60bde129c6bf344ca65514b4d0cf2 72136 curl_7.88.1-10+deb12u8.debian.tar.xz 6fe8c29dc64315e4902ad1b0ee68760a0d04e429379d3daf7127a1737473a5fc 13603 curl_7.88.1-10+deb12u8_amd64.buildinfo Files: 166f93a9c7df84019982744ed1fb5f48 3252 web optional curl_7.88.1-10+deb12u8.dsc 8d6c94c4f22869d971597246f90680f1 72136 web optional curl_7.88.1-10+deb12u8.debian.tar.xz b771570ad5982b66740d16ae9a97b46d 13603 web optional curl_7.88.1-10+deb12u8_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBdtqg34QX0sdAsVfu6n6rcz7RwcFAmcnkawACgkQu6n6rcz7 RweZ+A//cAjAsKU/EjOhhaedx2o8OJGhpTYVpcqepv7vCOq83eGKhmnw9GtgytP2 u3JRcBt5Afy9VGhJhEIDbPeCod8TtralAhcSdqSLlQFblb4SUAE5/8sQdKMDg8XO RItgApdzu1oNqM7g3+R6Kxn3hlWdN9mEC+buCwVAso/6UuPflAyymQJcI1KiS1Zi WWC0kXbYkouVFc5FhuHWB/hG7v0nwjVxcnVjgVv7WBeesh3POA7LyO4lT0shCiRs uM+MhCaveGd3vIxKN1n90tbM3Iis49eqYtjzr90vZ9APljT0Mn77Rr4JNX4Pr/4z +r62/Hg4fIf+AMUqgJeHDdPYw24nZbC+c3JKrUdD1BlF9DNYvEooPF2XyNhoBeKp I899aLWTWYBQj3busupx72VY+ouc/GY2YtMdkSBVhYt9je3rRCfF4WtBor2ENtPg 9EvzfzTS46XBxAnUHHu87JjUUh+KSkMLSSsaOLKy8dqJ12sjkkmttkfDSMXYqlA7 2/4V37ArZD/JRr/y2nI76v/vWOgd2Blj334b4IDE56+ju+GMTGpOjA6juKV7dFdP Xu+NgiY7Y9RU2f9UY3qYRdfHaX10PCiypVgWVeQi226oBvm3IBmgIsJOCB++Bg/m QTVu1tYYxlFaE8iutfur7wMeWxis+7RZ1QQgfBUENX1+6212d6c= =idKd -----END PGP SIGNATURE-----