-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 07 May 2026 18:36:52 -0700
Source: curl
Architecture: source
Version: 8.14.1-2+deb13u4
Distribution: trixie
Urgency: medium
Maintainer: Debian Curl Maintainers <team+curl@tracker.debian.org>
Changed-By: Samuel Henrique <samueloph@debian.org>
Changes:
curl (8.14.1-2+deb13u4) trixie; urgency=medium
.
* Import upstream patches for 13 CVE fixes:
- CVE-2025-14524
- CVE-2025-14819
- CVE-2026-1965
- CVE-2026-3783
- CVE-2026-3784
- CVE-2026-3805
- CVE-2026-4873
- CVE-2026-5545
- CVE-2026-5773
- CVE-2026-6253
- CVE-2026-6276
- CVE-2026-6429
- CVE-2026-7168
* d/p/CVE-2025-10148.patch: drop format-patch artefacts
* d/p/CVE-2025-13034.patch: refresh after gbp pq round-trip
* d/p: refresh patch series after gbp pq round-trip
Checksums-Sha1:
98e40d7915ed81c14a68b73f00819a80d31a77bb 3263 curl_8.14.1-2+deb13u4.dsc
d84a4b8baf1baaca33e31e809f5e770deb727c2f 4250332 curl_8.14.1.orig.tar.gz
c892a3257a40081f754b33e6a10eca2453860307 488 curl_8.14.1.orig.tar.gz.asc
0ec1460dd39eefc1f1d8eb7f3098ea6dc6a21fff 71840 curl_8.14.1-2+deb13u4.debian.tar.xz
ec3368996859a49ffd0349360aba00656b6666e3 12689 curl_8.14.1-2+deb13u4_amd64.buildinfo
Checksums-Sha256:
8e05fef7cf1528804d050d8df215bb81df0a1e13f9a2c86801ff334dce2b6be9 3263 curl_8.14.1-2+deb13u4.dsc
6766ada7101d292b42b8b15681120acd68effa4a9660935853cf6d61f0d984d4 4250332 curl_8.14.1.orig.tar.gz
39cc2ec8ddc39d04e3e7101bbed46d858d0875cbb297a6bfa20959fa2bc7d5c7 488 curl_8.14.1.orig.tar.gz.asc
7234af1270610927f24c5c4b74c661451af2b7f28c6207e9133c2b354ee988c5 71840 curl_8.14.1-2+deb13u4.debian.tar.xz
ca084f71ef16552881bea93dd6713aa01db75907dbb19a2fe27237a445e4fc12 12689 curl_8.14.1-2+deb13u4_amd64.buildinfo
Files:
848dd745164e49010c2ba2df4f4384e7 3263 web optional curl_8.14.1-2+deb13u4.dsc
745dfc1da8c44eb9ce6ede16fd102c32 4250332 web optional curl_8.14.1.orig.tar.gz
e90da3c198bfec67be08392e2a974103 488 web optional curl_8.14.1.orig.tar.gz.asc
77f56fb3436190b379ba0722399f16a7 71840 web optional curl_8.14.1-2+deb13u4.debian.tar.xz
da3c8f1f423c10d316c2737d4eb9273a 12689 web optional curl_8.14.1-2+deb13u4_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=MYn+
-----END PGP SIGNATURE-----
