-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 09 Nov 2024 17:34:22 +0000 Source: curl Architecture: source Version: 8.11.0-1 Distribution: unstable Urgency: medium Maintainer: Debian Curl Maintainers <team+curl@tracker.debian.org> Changed-By: Samuel Henrique <samueloph@debian.org> Closes: 1086804 Changes: curl (8.11.0-1) unstable; urgency=medium . [ Samuel Henrique ] * New upstream version 8.11.0 * Fix CVE-2024-9681: HSTS subdomain overwrites parent cache entry (closes: #1086804) * Update patches for the new release * d/rules: Drop '--enable-websockets', it's enabled by default now * d/libcurl*.symbols: Remove HIDDEN@HIDDEN 7.16.2 * Add 5 upstream patches to fix regressions: - cmdline_ech_md_formatting_cleanups.patch - duphandle_also_init_netrc.patch - libssh_when_using_IPv6_numerical_address_add_brackets.patch - netrc_support_large_file_longer_lines_longer_tokens.patch - setopt_fix_CURLOPT_HTTP_CONTENT_DECODING.patch . [ Carlos Henrique Lima Melara ] * d/rules: add sed rule to make curl-config get CPPFLAGS in run-time * d/control: move libldap2-dev to Depends and use newer libldap-dev name * d/control: move libkrb5-dev from Suggests to Depends for -dev packages Checksums-Sha1: cef155a118c4b3600d6b44c105cff3a38753e06e 3252 curl_8.11.0-1.dsc 9648c31756362343f1a0daba881e189d6fe8b4f4 4167839 curl_8.11.0.orig.tar.gz f4280d937e832fbd7667be1022f24adb2296151a 488 curl_8.11.0.orig.tar.gz.asc ee418c80e020b7b812771689c6619d1f0be743b6 55384 curl_8.11.0-1.debian.tar.xz df6bd6bd390d751dcf665415634f3a181378fb2f 12372 curl_8.11.0-1_amd64.buildinfo Checksums-Sha256: 1fa81ff7d58c593cd65fd8ea60dc225aa4aa4b196ed23bfcfb0bfdad02953dab 3252 curl_8.11.0-1.dsc 264537d90e58d2b09dddc50944baf3c38e7089151c8986715e2aaeaaf2b8118f 4167839 curl_8.11.0.orig.tar.gz b709d6115f2dbf47e3bfb1bbb5b70b235476f8b1bd46973a8b3afe7b74149c52 488 curl_8.11.0.orig.tar.gz.asc e46ebcfb907ba6929770ff0e0b3a8a4a8019e8ed2f7d3491b10ccf2e6e9b4006 55384 curl_8.11.0-1.debian.tar.xz e36a0ab5c0933250f96f713db18fca139059a46ce9dd14cd625453bcfa971e06 12372 curl_8.11.0-1_amd64.buildinfo Files: 4a90379f100c74337c78d458ea559782 3252 web optional curl_8.11.0-1.dsc 7b6b3613ed9be7b6c010e0750b2c48bb 4167839 web optional curl_8.11.0.orig.tar.gz f364acc2699870da6de43c123570d97b 488 web optional curl_8.11.0.orig.tar.gz.asc 4b5f522447b3e8cf7fca8fc6321f23c2 55384 web optional curl_8.11.0-1.debian.tar.xz f0e357a44313d9c53f44a8c406d0c773 12372 web optional curl_8.11.0-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEv66eMxqGenyA2Ot49OSs27jQi+AFAmcvq1EACgkQ9OSs27jQ i+BJzA//eVNabIqRn+mKmV6C/cX4ifaEfD2LSTpcem4fjs+6/4PM4etkaGYv4SJF Qz0wfFtLqRjesF11ngwP7gZOookl+NDegqiUiXbpANnq3nh4gzvuvXYl140Cl07J Yo/a7RWwfMx1BnusdeT6Exiubp4ixWZz7NRTCP9+QxkBPgp01t9Fty05382myICn KGaXKSO4Yb8Z8Pw7kB++e7LpIm5v1g2Hp/Z5rl/jc74hyJnBAColLrm0YcCzJzot toU1B+AO7a9hEDQvn/7A/18VqtQnrxPiaTBiQToUtLK9FQB1ro1YnaI7qR17P108 16PNRS05qypdlUxvQ2sTDlKo0nsGLsPauA6u80yRcYKgckgb1JqqcO/85a11uG/6 FSSmu5ceL0zbKPUqYcRzMQHM6LrHtVh2Qb+5chpSU9vn6Q2MebvpGv42iigt226N 02D+WCdvkBqSvV9yYPsFdtw0Q9je0bFqSxt86NWGUNg32GrJF0mjVNrKgM1hV9xn bphys4OpV1eKPuj3ZlYoY2NIzs5rBLleUsVVQBORxM9cn93TTbdlHcPseoPLnbSS cArVsIKzwED13BKxufTtimXkM9t2iLsfdZ7iIh2uHsKp/e8uezez2cdgBG7ToGuo SCSU0hYtw+o9abQ6Hf/uKLXTvodillMHiBz9oIUSyuSy/ZE1YT0= =kAwh -----END PGP SIGNATURE-----