-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 02 Apr 2023 20:34:17 +0100 Source: curl Binary: curl curl-dbgsym libcurl3-gnutls libcurl3-gnutls-dbgsym libcurl3-nss libcurl3-nss-dbgsym libcurl4 libcurl4-dbgsym libcurl4-gnutls-dev libcurl4-nss-dev libcurl4-openssl-dev Architecture: mips64el Version: 7.74.0-1.3+deb11u8 Distribution: bullseye Urgency: medium Maintainer: mips64el Build Daemon (mipsel-osuosl-01) Changed-By: Samuel Henrique Description: curl - command line tool for transferring data with URL syntax libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.74.0-1.3+deb11u8) bullseye; urgency=medium . * Backport upstream patches to fix 5 CVEs: - CVE-2023-27533: TELNET option IAC injection - CVE-2023-27534: SFTP path ~ resolving discrepancy - CVE-2023-27535: FTP too eager connection reuse - CVE-2023-27536: GSS delegation too eager connection re-use - CVE-2023-27538: SSH connection too eager reuse still * d/p/add_Curl_timestrcmp.patch: New patch to backport Curl_timestrcmp(), required for CVE-2023-27535. Checksums-Sha1: e8af31aebc585036ed9dd70c48c1487cc83985b3 149328 curl-dbgsym_7.74.0-1.3+deb11u8_mips64el.deb 380b8ca5541d360f4c3e050453d8f8ba583a2170 12390 curl_7.74.0-1.3+deb11u8_mips64el-buildd.buildinfo 352110b30291fa2ddfcc01a7daa79f3bc2183a0b 264208 curl_7.74.0-1.3+deb11u8_mips64el.deb ab4c35657a0dce8752ceb2039e7a0c6ce774a9ef 856672 libcurl3-gnutls-dbgsym_7.74.0-1.3+deb11u8_mips64el.deb 985a6fe7942155cabebca8955009ac390aa927f3 318148 libcurl3-gnutls_7.74.0-1.3+deb11u8_mips64el.deb 2dac425305ce0530959e214269797f41ce3641d2 901092 libcurl3-nss-dbgsym_7.74.0-1.3+deb11u8_mips64el.deb 4e33ae66d4b652cd17c09d98ca918c3316304b3e 326004 libcurl3-nss_7.74.0-1.3+deb11u8_mips64el.deb 855b99c0d59de9031b28f07d187c41934b89e234 876092 libcurl4-dbgsym_7.74.0-1.3+deb11u8_mips64el.deb bf94b628ab790f7d70dec57a889775a8665d1320 449192 libcurl4-gnutls-dev_7.74.0-1.3+deb11u8_mips64el.deb 9cbfabf436cd8778c094c5466b556bc496696ce6 458032 libcurl4-nss-dev_7.74.0-1.3+deb11u8_mips64el.deb 3bdab859689d9d9651cd26a76d6a7fc36ac71756 452756 libcurl4-openssl-dev_7.74.0-1.3+deb11u8_mips64el.deb fe060c93ad6aa128589bbd7e553fa97f0377111b 321232 libcurl4_7.74.0-1.3+deb11u8_mips64el.deb Checksums-Sha256: 28159374dd2ff90749bf509870bd63c3ab505c532b565bbb9044cb8653ffda7d 149328 curl-dbgsym_7.74.0-1.3+deb11u8_mips64el.deb 10478f50f699ba0a0f80a7e8419514219f8beb871150503fafd77aaf735af682 12390 curl_7.74.0-1.3+deb11u8_mips64el-buildd.buildinfo fbc4084ceeae91655cddbfea11bf469d763863cd2b28b0764c24ea170d5f82b9 264208 curl_7.74.0-1.3+deb11u8_mips64el.deb ff95bf1bbc272c528d51ded086ab7649cce260c890330d8f5fae64c66848e527 856672 libcurl3-gnutls-dbgsym_7.74.0-1.3+deb11u8_mips64el.deb 97b90ce6cc0e794119cd6340210e944c2dcafd674e7855dac40f5df0c8cd1082 318148 libcurl3-gnutls_7.74.0-1.3+deb11u8_mips64el.deb 74680c29ecdb911b425aaa03d9f2709433ab23e7f4c7ca66ba3e27dba3fd2c09 901092 libcurl3-nss-dbgsym_7.74.0-1.3+deb11u8_mips64el.deb 2457ba00ecf5d88bdfb930ed05bc0897c3a838e37d339a897f73bf39bcd4b278 326004 libcurl3-nss_7.74.0-1.3+deb11u8_mips64el.deb 3dd0cc55cd7ef339f680fe3377b227c8636a2103a5cd6e6f8790dc9f93c2dfa5 876092 libcurl4-dbgsym_7.74.0-1.3+deb11u8_mips64el.deb 0ddb3d642dba8ce393f39b1b2af38f7ea3a9ced63d4ef65cd928576b9600ca7b 449192 libcurl4-gnutls-dev_7.74.0-1.3+deb11u8_mips64el.deb 9edf978cc92e3356adaab2f39898a920e29eeb5844483d57250bc0507a1d7a73 458032 libcurl4-nss-dev_7.74.0-1.3+deb11u8_mips64el.deb ba2a50da1fa69e45910845b8b3ac0757733852cf8b65a486ee1664129836ac1f 452756 libcurl4-openssl-dev_7.74.0-1.3+deb11u8_mips64el.deb 29a60bc109c8b3625cfc07b5e753c5b724c23dd5331b9fed31eea289ee26de95 321232 libcurl4_7.74.0-1.3+deb11u8_mips64el.deb Files: c5aa89426f22577c5bd3b0d8a098513b 149328 debug optional curl-dbgsym_7.74.0-1.3+deb11u8_mips64el.deb d5761fc3c49da8c95a5736f9479d5e6a 12390 web optional curl_7.74.0-1.3+deb11u8_mips64el-buildd.buildinfo d708138f85d135a701049c0dfce740f9 264208 web optional curl_7.74.0-1.3+deb11u8_mips64el.deb 468c162bdde4654d0c29fba5bc9d7634 856672 debug optional libcurl3-gnutls-dbgsym_7.74.0-1.3+deb11u8_mips64el.deb 20ec52be2001d8d925bba4d7e7429906 318148 libs optional libcurl3-gnutls_7.74.0-1.3+deb11u8_mips64el.deb fa99c2d12b7b505cd7c13524298e2fac 901092 debug optional libcurl3-nss-dbgsym_7.74.0-1.3+deb11u8_mips64el.deb ff04655fccc278864ad679e401ae9a38 326004 libs optional libcurl3-nss_7.74.0-1.3+deb11u8_mips64el.deb b39cae69b13d281b8a7e12f9fd49a37d 876092 debug optional libcurl4-dbgsym_7.74.0-1.3+deb11u8_mips64el.deb 7162105b60eb2660765be8c59b251f8f 449192 libdevel optional libcurl4-gnutls-dev_7.74.0-1.3+deb11u8_mips64el.deb 59234a5c6352d8ac1fbb1fb2dc9c4c74 458032 libdevel optional libcurl4-nss-dev_7.74.0-1.3+deb11u8_mips64el.deb 331dcbebf57bba31526773e9219f079c 452756 libdevel optional libcurl4-openssl-dev_7.74.0-1.3+deb11u8_mips64el.deb 1d7c9c639065e0e731bf90970cc58aea 321232 libs optional libcurl4_7.74.0-1.3+deb11u8_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7gvl9o8phoQDAS3o7Lbsjpk9n6sFAmSeYfMACgkQ7Lbsjpk9 n6tzhw/+MKScbf45WInyTU1dIhAKVv546SoracyvwyghLriLbkEewr7fX62F8qtO A9BonQshoc3Ya64ZnYxV7TOoG1hUcnYjKAvLeNa9QGFD3DVAl0x4DZGEpq3iyc79 vYt6gPBYJmFgMQ+0BQAWmYO6wtWv0y3TQqbvuVMN8xqsQPGgMAM9+qfXBzLKCQ8J VULL3HrRrxBobZPhwFOiYxPZUq/LVw5U88nqnjtSxuVE8kz3RzgT3Xh/zKBBBdlH +Ww0VB09BbxY/VAOy+VBUdfc5AQ8SPGB6yaoCVL+cp2iJ7tA4bDNQqJpNWuCv6dx xvevR6UYq3uXTV7tHBhqXgaKtB0cz23pmbzrqbkAQTBPVog3ZQoin/IT1D00RGQf hUbHK/u/uskVe/ijRkQTOMt/zspobmuLUkawMg0zKGvyGKT7VDTQsODf+VlTrBG8 Eoh0+cLblHjTMDjEidkHT+trk4nZkriu74rPuOFB6CRCX1/lOnMjJ8JEX2yXaFKD sucDJnQDNSlz1f07WAfoUgL5UzzKYLHU8VmjsPQTW92ZU1mJUXSKBae43bo2PscW 9DyPHClPGy961G4qtJ66/WIScH3/6P+5leEfEXwmU5Y65fdGCE2afykdXnQd1dn4 EIw6GAQfcPWRyuhrx5jUvvFPER15N7O3o0Y31gyCD58mGFjKtLs= =avXH -----END PGP SIGNATURE-----