-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 02 Jan 2025 21:11:56 -0300 Source: curl Binary: curl curl-dbgsym libcurl3-gnutls libcurl3-gnutls-dbgsym libcurl3-nss libcurl3-nss-dbgsym libcurl4 libcurl4-dbgsym libcurl4-gnutls-dev libcurl4-nss-dev libcurl4-openssl-dev Architecture: mipsel Version: 7.88.1-10+deb12u9 Distribution: bookworm Urgency: medium Maintainer: mipsel Build Daemon (mipsel-osuosl-05) Changed-By: Aquila Macedo Costa Description: curl - command line tool for transferring data with URL syntax libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.88.1-10+deb12u9) bookworm; urgency=medium . * Team upload. * Import patches for CVE-2024-9681 - A vulnerability in curl's HSTS handling allows a subdomain’s expiry time to overwrite its parent domain’s cache entry. This can lead to unintended HTTPS upgrades or premature reversion to HTTP when both subdomains and parent domains are used. Affects applications with HSTS enabled, potentially disrupting access when a domain stops supporting HTTPS. * d/patches: - CVE-2024-9681-*.patch: Backport patches. - CVE-2024-9681-1: fix backport inconsistencies - large-time-testable-feature.patch: Import 'large-time' feature for tests - dont-stop-stunnel-before-retry.patch: Import patch to avoid stopping stunnel before retrying Checksums-Sha1: 87948acb064c2a3615b26beb7179254af02b69c0 162772 curl-dbgsym_7.88.1-10+deb12u9_mipsel.deb 8015e8075df07db6e1feed253bacfeab44dd9ebb 12910 curl_7.88.1-10+deb12u9_mipsel-buildd.buildinfo ac03e35033b149c8e0b937eb3efd315f77eb044b 311596 curl_7.88.1-10+deb12u9_mipsel.deb 185e009b0385ae2639461fa6995d682f35e3c856 1034128 libcurl3-gnutls-dbgsym_7.88.1-10+deb12u9_mipsel.deb fafa595663215c630fe5638ebfa01ef92ce34d7d 363908 libcurl3-gnutls_7.88.1-10+deb12u9_mipsel.deb 193f9133e6664c8c55f879d9fd4d906fb746d1a8 1081568 libcurl3-nss-dbgsym_7.88.1-10+deb12u9_mipsel.deb 221144f9ff10c332d605386c0d6bfef9376c465c 372244 libcurl3-nss_7.88.1-10+deb12u9_mipsel.deb 6b8c2cfdea7ecb0760f9c69170c76ade19b54d49 1061132 libcurl4-dbgsym_7.88.1-10+deb12u9_mipsel.deb af18717ec3b17d4fcd528e1c11cfd3b9db5db544 502760 libcurl4-gnutls-dev_7.88.1-10+deb12u9_mipsel.deb e9dec6973f515d1b2c80afc27a985a6553ce873c 512600 libcurl4-nss-dev_7.88.1-10+deb12u9_mipsel.deb 4a5250e7bacb15f5f43d99fc7f992f729a1b54b7 509468 libcurl4-openssl-dev_7.88.1-10+deb12u9_mipsel.deb be415b07c8b34194ecc14e4ba4136779719b3a8d 369184 libcurl4_7.88.1-10+deb12u9_mipsel.deb Checksums-Sha256: 5fc716bd51c248d6e73f61d4f19598abc450310e0bc1bc720d2f436afb9e7490 162772 curl-dbgsym_7.88.1-10+deb12u9_mipsel.deb 98f5ab0fd33e5c3f3ab38e1775c6a754c9b622ca2d7de91ace6eeaff5c27bc2c 12910 curl_7.88.1-10+deb12u9_mipsel-buildd.buildinfo e38d5042c20d8f052ee8a2855a1c1569e7db3168cbba8a9e6151230b000190c0 311596 curl_7.88.1-10+deb12u9_mipsel.deb 625d2929453560b14292fe82bef7670c2c2e477927f8253ae01c72cf8aed03b2 1034128 libcurl3-gnutls-dbgsym_7.88.1-10+deb12u9_mipsel.deb e9d8e9c072815d3edc2cf3aeb31fb42554e6aa05892b1d641feeea801ca3ee30 363908 libcurl3-gnutls_7.88.1-10+deb12u9_mipsel.deb f5cc755fb208fad78ff838d920edc36cc4185c8e5e5232ef0faa53dbd97be7ae 1081568 libcurl3-nss-dbgsym_7.88.1-10+deb12u9_mipsel.deb 8d64ad503e2ac7a29c669c62a3633fec24494abecf3038bb642d85c15cec4d23 372244 libcurl3-nss_7.88.1-10+deb12u9_mipsel.deb dc72a1cc24a6b79af1f76d5995c57604371ae33e13301a1f3e04e45b22a0d0c3 1061132 libcurl4-dbgsym_7.88.1-10+deb12u9_mipsel.deb 6aad3b04741d0f66eac7208f573398abcc5250c8d35e6ca892412b1e6ec10d72 502760 libcurl4-gnutls-dev_7.88.1-10+deb12u9_mipsel.deb c63d67416164ae391119ee0928bf7bb1906a2070c370036dbbaa3006f6b57b3d 512600 libcurl4-nss-dev_7.88.1-10+deb12u9_mipsel.deb 514f3036b22b7766e42c01a39856857fee10b3e7f38b5fa89e91b3158cc7fb43 509468 libcurl4-openssl-dev_7.88.1-10+deb12u9_mipsel.deb f12da6f372136aea8f43d956ecbd7132026a4ce3700dbd84c9ae452bc687312e 369184 libcurl4_7.88.1-10+deb12u9_mipsel.deb Files: 921cf9f4a150c4ca2a6f683849519b5d 162772 debug optional curl-dbgsym_7.88.1-10+deb12u9_mipsel.deb b463380c93bfb3f4614bd314420123f4 12910 web optional curl_7.88.1-10+deb12u9_mipsel-buildd.buildinfo 53318c69260db5604dda177da233f5af 311596 web optional curl_7.88.1-10+deb12u9_mipsel.deb d11bbc83969c850e09f57b7496445ddd 1034128 debug optional libcurl3-gnutls-dbgsym_7.88.1-10+deb12u9_mipsel.deb 4f13bc30df0d78d3343d0116e2861894 363908 libs optional libcurl3-gnutls_7.88.1-10+deb12u9_mipsel.deb 522df4074daccbea1be151c7fe1c7888 1081568 debug optional libcurl3-nss-dbgsym_7.88.1-10+deb12u9_mipsel.deb 75abc4763302e31293a5e0be69f0b006 372244 libs optional libcurl3-nss_7.88.1-10+deb12u9_mipsel.deb 879bd27c4f4ee5a911745f0af019acd9 1061132 debug optional libcurl4-dbgsym_7.88.1-10+deb12u9_mipsel.deb 0488dd3d777bb38f14c8a68535ee8ee8 502760 libdevel optional libcurl4-gnutls-dev_7.88.1-10+deb12u9_mipsel.deb 395006c69e6dedcb8f9de0f1ede3637d 512600 libdevel optional libcurl4-nss-dev_7.88.1-10+deb12u9_mipsel.deb 14b7a0dc55e88d8272032762f950a93d 509468 libdevel optional libcurl4-openssl-dev_7.88.1-10+deb12u9_mipsel.deb ef6974a5aa1069001cc3e1c9f53bf009 369184 libs optional libcurl4_7.88.1-10+deb12u9_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEuQAPGkYIXAAfq7z1C2Vm2FYVKKAFAmeVLXkACgkQC2Vm2FYV KKDj2g/+Jdc3+lUCCzdK8/ea5dzwXyai/eCw4WFxSCo1lx7LbTd5LyF72AZBuBIy 91eFES+TxIdBoI14wlttdKyVskJMnWUTOJCbJQ81rJ+Vybx7wFvfA6ab8wxOXL3m 1rhCbyOOtBDJqKOJMmCEpvg5FcGG9JOb9TASyle8x+0SyHPahSFr62aqAfanNFWD eIYJgu7NJrA1xkSyVNwTAjMDZ7YURzp/6zVO+ShyqsMy6E5HteaEiDHBxzv+99sH C+3SZgNDW4eNPD0hTkgqf9K9Xfsw+0oxC2qyHlqbk+qxvYFKqzNr+LoDMytyPAtT hX05Rylnpe14zZtItMIsp+K3ZlOkdZnh571JSN1ShoufXYowLg1uqkUQUR3b/kmO kefEC5XcCUSe2XFB7eJd4e0TGhKH9FiD8cFmp4tuBU3khwQ5xVzPc6ncHCQ+F0vi b2vUsj+VkOP2Cas4j2nRgKp9SxS2/ukp1BfbTCmP3yC+PdgiJWZPhiEMycPqmtpC N9+qIz1mlbN9bFRBfZ07cqmMXZW9gyOVnVlXN46kAhSwrSoNg4vtEIeNVhVEFHuP tFQ0CTc5OQ123ztm8MyWxdlqUf1dtZR34rKaN08G0mbJXdVrgK2rpAKxvXgE8HNq 41Obyah7HFpTDMEE+BtsDoGLIvdzHyEMf/SM13rUbEdEcaVwCR4= =aBHQ -----END PGP SIGNATURE-----