-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 13 Jan 2026 21:26:48 -0800
Source: curl
Architecture: source
Version: 8.14.1-2+deb13u2~bpo13+1
Distribution: bookworm-backports
Urgency: medium
Maintainer: Debian Curl Maintainers <team+curl@tracker.debian.org>
Changed-By: Samuel Henrique <samueloph@debian.org>
Changes:
curl (8.14.1-2+deb13u2~bpo13+1) bookworm-backports; urgency=medium
.
* Rebuild for bookworm-backports.
.
curl (8.14.1-2+deb13u2) trixie; urgency=medium
.
* d/p/wcurl-CVE-2025-11563.patch: Pull upstream changes to actually fix
CVE-2025-11563
.
curl (8.14.1-2+deb13u1) trixie; urgency=medium
.
[ Alex ]
* Team upload.
* d/p/cookie-don-t-treat-the-leading-slash-as-trailing: import upstream
patch to fix CVE-2025-9086
* d/p/CVE-2025-10148.patch: backport upstream patch for CVE-2025-10148
.
[ Samuel Henrique ]
* Import wcurl patches.
* wcurl-CVE-2025-11563.patch: Fix CVE-2025-11563
* wcurl-Fix-example-for-continue-at.patch: Fix example in manpage
* wcurl-Set-CURL_OPTIONS-right-before-the-url.patch: Fix to allow
--output to be overwritten with --curl-options
Checksums-Sha1:
9e712a9b038027d6d82724abfc92580d7a020725 3261 curl_8.14.1-2+deb13u2~bpo13+1.dsc
d84a4b8baf1baaca33e31e809f5e770deb727c2f 4250332 curl_8.14.1.orig.tar.gz
c892a3257a40081f754b33e6a10eca2453860307 488 curl_8.14.1.orig.tar.gz.asc
b774df858e6b6d67bc32da988a889fb40e8e873c 56788 curl_8.14.1-2+deb13u2~bpo13+1.debian.tar.xz
3ce2420cbdcce031f0832dbe9f56e0a59fa0f5e9 13256 curl_8.14.1-2+deb13u2~bpo13+1_amd64.buildinfo
Checksums-Sha256:
de799d9ed7fe2a09e81bccc1571f34a0376c7a144df850df08a8302c6d1aa3da 3261 curl_8.14.1-2+deb13u2~bpo13+1.dsc
6766ada7101d292b42b8b15681120acd68effa4a9660935853cf6d61f0d984d4 4250332 curl_8.14.1.orig.tar.gz
39cc2ec8ddc39d04e3e7101bbed46d858d0875cbb297a6bfa20959fa2bc7d5c7 488 curl_8.14.1.orig.tar.gz.asc
05e09e9eb989b3f8c47799e6fdb1fdfc3bbd916dec079eae5e21de6f21a1d831 56788 curl_8.14.1-2+deb13u2~bpo13+1.debian.tar.xz
3f2774f6127ab26e321360f59f5f2aa5d51144f48eca66a45bf4a03d80b5e32d 13256 curl_8.14.1-2+deb13u2~bpo13+1_amd64.buildinfo
Files:
7b547ca2881bf1e929014c1e5ab141be 3261 web optional curl_8.14.1-2+deb13u2~bpo13+1.dsc
745dfc1da8c44eb9ce6ede16fd102c32 4250332 web optional curl_8.14.1.orig.tar.gz
e90da3c198bfec67be08392e2a974103 488 web optional curl_8.14.1.orig.tar.gz.asc
e03de655e2a36b5ff2af0e8c89af13df 56788 web optional curl_8.14.1-2+deb13u2~bpo13+1.debian.tar.xz
7e6f9a3f67be8462653c6bcb709935f4 13256 web optional curl_8.14.1-2+deb13u2~bpo13+1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEBdtqg34QX0sdAsVfu6n6rcz7RwcFAmlnK3QACgkQu6n6rcz7
RwfU6xAAhsehkgngIAFqQvR1PYiQOEQb1pY5/dWlSuxusb3IvPJZdcx/hRGO+/rk
4CeA73o925pm1IaznPz3GqeYAUpYbepTqvhrnG05T/9XTYM5L0SO7upu3jwGt40C
R3U4Wd7WCVf3r17VOpfBoIwN/lgJW75PYW3he7NTSms+A4Giy2Zp3LlMO79niH/w
nNEBxtNTlglKHjA9bCvlXkNmzNRn4SQkOFvGlseyNHPl9N7uKMw3kL3Gfug/MVoM
veV71m+YZn8mButsP6TcEfItVoqMyV5u6Pd/LjGlMUzh0WvNaMWJvrKLRbEgfZ7E
oMrygwe1rkNl0HrcquTEEyR+IGwrwcl5AHgctX3ZhZLEpV5ttBfFrPaaZgrk3B9x
niKKLLmAyGsI1tt2RSCBj/OGCPQqlZxDxzwAVtx5SQ5javLLcDoECt0ngPWJeVw8
Gy7JZnZAf3c7G6zsYoH8L4kqZ+UUClFmr5TRUw5ZZYQZS65V7ovMTuMKgWFxDOoY
J8Okz6WDeOuHd2tuDVCoiYWTPXNIAhs2pCafB5gJnrNY5kpdjcQy3p7BFhKVEpGg
gEWO8qyKmZBaaWr6iiAle6um/o9PVj4EzjaXXlrBQlW193R/xKCNLk/Zf4N24YK8
wfPHxScDpipU3Og5Eo1masIC+Y1BWEiv8MFAa0Yqr822XKnnO3Q=
=idzq
-----END PGP SIGNATURE-----
