-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 17 Sep 2024 16:29:24 -0300
Source: curl
Architecture: source
Version: 7.88.1-10+deb12u8
Distribution: bookworm
Urgency: medium
Maintainer: Alessandro Ghedini <ghedo@debian.org>
Changed-By: Aquila Macedo Costa <aquilamacedo@riseup.net>
Changes:
curl (7.88.1-10+deb12u8) bookworm; urgency=medium
.
* Team upload.
* Import patch for CVE-2024-8096
- CVE-2024-8096: When the TLS backend is GnuTLS, curl may incorrectly
handle OCSP stapling. If the OCSP status reports an error other than
"revoked" (e.g., "unauthorized"), it is not treated as a bad certificate,
potentially allowing invalid certificates to be considered valid.
Checksums-Sha1:
5d3fa24658cc23b050bd8dde713d735684dbe06d 3252 curl_7.88.1-10+deb12u8.dsc
34f23ba92c1018bcd5bcede27cc8c0f678b8a063 72136 curl_7.88.1-10+deb12u8.debian.tar.xz
2d6b653be9c6cf62ed28ea56d9759f0cfe7f6603 13603 curl_7.88.1-10+deb12u8_amd64.buildinfo
Checksums-Sha256:
af43477e1d778fdd9f7aef7d57070cf82fb9f68762833371c30bc4b328fec020 3252 curl_7.88.1-10+deb12u8.dsc
8b682af6698abe2020b7d209806cc7341cd60bde129c6bf344ca65514b4d0cf2 72136 curl_7.88.1-10+deb12u8.debian.tar.xz
6fe8c29dc64315e4902ad1b0ee68760a0d04e429379d3daf7127a1737473a5fc 13603 curl_7.88.1-10+deb12u8_amd64.buildinfo
Files:
166f93a9c7df84019982744ed1fb5f48 3252 web optional curl_7.88.1-10+deb12u8.dsc
8d6c94c4f22869d971597246f90680f1 72136 web optional curl_7.88.1-10+deb12u8.debian.tar.xz
b771570ad5982b66740d16ae9a97b46d 13603 web optional curl_7.88.1-10+deb12u8_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=idKd
-----END PGP SIGNATURE-----
Attachment:
pgpiJzB90GQeI.pgp
Description: PGP signature