-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 07 May 2026 18:36:52 -0700
Source: curl
Binary: curl curl-dbgsym libcurl3t64-gnutls libcurl3t64-gnutls-dbgsym libcurl4-gnutls-dev libcurl4-openssl-dev libcurl4t64 libcurl4t64-dbgsym
Architecture: amd64
Version: 8.14.1-2+deb13u4
Distribution: trixie
Urgency: medium
Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) <buildd_amd64-x86-grnet-03@buildd.debian.org>
Changed-By: Samuel Henrique <samueloph@debian.org>
Description:
 curl       - command line tool for transferring data with URL syntax
 libcurl3t64-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour)
 libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour)
 libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour)
 libcurl4t64 - easy-to-use client-side URL transfer library (OpenSSL flavour)
Changes:
 curl (8.14.1-2+deb13u4) trixie; urgency=medium
 .
   * Import upstream patches for 13 CVE fixes:
     - CVE-2025-14524
     - CVE-2025-14819
     - CVE-2026-1965
     - CVE-2026-3783
     - CVE-2026-3784
     - CVE-2026-3805
     - CVE-2026-4873
     - CVE-2026-5545
     - CVE-2026-5773
     - CVE-2026-6253
     - CVE-2026-6276
     - CVE-2026-6429
     - CVE-2026-7168
   * d/p/CVE-2025-10148.patch: drop format-patch artefacts
   * d/p/CVE-2025-13034.patch: refresh after gbp pq round-trip
   * d/p: refresh patch series after gbp pq round-trip
Checksums-Sha1:
 5a9393c3351e757dd30f6e4974bca65b7c967b56 216376 curl-dbgsym_8.14.1-2+deb13u4_amd64.deb
 4f54b2326e9ec01c2c631e20f316f5afd2395a50 12152 curl_8.14.1-2+deb13u4_amd64-buildd.buildinfo
 7ba41bdcd2ca506a7d43c424db9cde0662a868ca 269904 curl_8.14.1-2+deb13u4_amd64.deb
 3d803a116b2bd33803b55647e60d9b070d4a32cd 1314824 libcurl3t64-gnutls-dbgsym_8.14.1-2+deb13u4_amd64.deb
 fc9862af999f25dc56621d2654b95f17b267d991 384336 libcurl3t64-gnutls_8.14.1-2+deb13u4_amd64.deb
 cebf39cdc7f8b903daf70f09309500d333799bbd 503932 libcurl4-gnutls-dev_8.14.1-2+deb13u4_amd64.deb
 7fb48083fc82bdfea301c14b82655f7bac55d6fd 511220 libcurl4-openssl-dev_8.14.1-2+deb13u4_amd64.deb
 d664711685013f2f32d6c572b4cce4bffb98e6b0 1352004 libcurl4t64-dbgsym_8.14.1-2+deb13u4_amd64.deb
 4a4f00f2bb5053fd158d5e3f2866d12c46079ced 391576 libcurl4t64_8.14.1-2+deb13u4_amd64.deb
Checksums-Sha256:
 335bf6865e65f138ad449326624386f4640b2c4173c36e105c02690fd4a66511 216376 curl-dbgsym_8.14.1-2+deb13u4_amd64.deb
 5cbc6ddddeb26e57d3bc9703ac4bbd1f85a0db8dd4b133ddc4c62ae1772c5c27 12152 curl_8.14.1-2+deb13u4_amd64-buildd.buildinfo
 7bd23df36e65ca32a5bbd81f67ca311b9e0c122212c70d0733f4e45d745789d2 269904 curl_8.14.1-2+deb13u4_amd64.deb
 e1f9140f800a8a1547de464e3f567c733e22a20dd825d509eb4d7f5167dea4b4 1314824 libcurl3t64-gnutls-dbgsym_8.14.1-2+deb13u4_amd64.deb
 351bf3bb1c816c1d88900cbfe59dc79433f20fb962947d78313028a00f97c856 384336 libcurl3t64-gnutls_8.14.1-2+deb13u4_amd64.deb
 a6908b7cb7318437aaeff90c919126fb03c874b144f6d833e687df3cd3eeb35b 503932 libcurl4-gnutls-dev_8.14.1-2+deb13u4_amd64.deb
 8dd19979f8bccf67ddbf4baffeb6c01a2c12089d950ae4e2b593017c00c32836 511220 libcurl4-openssl-dev_8.14.1-2+deb13u4_amd64.deb
 0d9aa617b2db5b9e49ea4f389773fb545a078e1a750785d138db1e53b19b6dce 1352004 libcurl4t64-dbgsym_8.14.1-2+deb13u4_amd64.deb
 9a28a1f9cd78e2ff07c436e78a76bc114d491404dbe3a836a83e385d496ab4f2 391576 libcurl4t64_8.14.1-2+deb13u4_amd64.deb
Files:
 4ac05e12d9e931059b7a209199035667 216376 debug optional curl-dbgsym_8.14.1-2+deb13u4_amd64.deb
 20c85b56619cf6c5c5bdb5ea80b706af 12152 web optional curl_8.14.1-2+deb13u4_amd64-buildd.buildinfo
 fd49b0bc9f606f0743122c199fad9e2b 269904 web optional curl_8.14.1-2+deb13u4_amd64.deb
 8724d6d7006d78a43c1da38900669c2a 1314824 debug optional libcurl3t64-gnutls-dbgsym_8.14.1-2+deb13u4_amd64.deb
 9afc089158cea4cbc7cf26c951b600bf 384336 libs optional libcurl3t64-gnutls_8.14.1-2+deb13u4_amd64.deb
 bdd194ab3c24f7f410fa20abe95bde4e 503932 libdevel optional libcurl4-gnutls-dev_8.14.1-2+deb13u4_amd64.deb
 31c4457ec225daa74963972bf3fbe245 511220 libdevel optional libcurl4-openssl-dev_8.14.1-2+deb13u4_amd64.deb
 0525f19882575ce2c92b0c24d654cf13 1352004 debug optional libcurl4t64-dbgsym_8.14.1-2+deb13u4_amd64.deb
 1ce441ba039d03e1f68100922946691b 391576 libs optional libcurl4t64_8.14.1-2+deb13u4_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=M73P
-----END PGP SIGNATURE-----