Format: 1.8
Date: Mon, 22 Apr 2024 12:00:57 -0400
Source: curl
Built-For-Profiles: noudeb
Architecture: source
Version: 8.5.0-2ubuntu10.1
Distribution: noble-security
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Changes:
 curl (8.5.0-2ubuntu10.1) noble-security; urgency=medium
 .
   * SECURITY UPDATE: Usage of disabled protocol
     - debian/patches/CVE-2024-2004-pre1.patch: test1474: removed.
     - debian/patches/CVE-2024-2004.patch: fix disabling all protocols in
       lib/setopt.c, tests/data/Makefile.inc, tests/data/test1474.
     - CVE-2024-2004
   * SECURITY UPDATE: HTTP/2 push headers memory-leak
     - debian/patches/CVE-2024-2398.patch: push headers better cleanup in
       lib/http2.c.
     - CVE-2024-2398
Checksums-Sha1:
 d40c27a9eae67f37330d4e5b390c12eca9bd07ca 3051 curl_8.5.0-2ubuntu10.1.dsc
 3dae44e5a8b6e35dd653a953ada58f613877630c 53468 curl_8.5.0-2ubuntu10.1.debian.tar.xz
 25da3662a20a3e16c842eaf2263af4d08a4346d7 10899 curl_8.5.0-2ubuntu10.1_source.buildinfo
Checksums-Sha256:
 d89896849daa5539e2b89b525fdcef2674e3c91d004fa39a7629da636b08ba92 3051 curl_8.5.0-2ubuntu10.1.dsc
 3a044e477bcd7af48487fb082039b64ea33ae867407bc32e93d0cd2585a1a194 53468 curl_8.5.0-2ubuntu10.1.debian.tar.xz
 f7ca5721b0c8d936adbfab8899a98f56fa21852e67386d610408f408666654ce 10899 curl_8.5.0-2ubuntu10.1_source.buildinfo
Files:
 0278903c6066742a9de39db496dbd88e 3051 web optional curl_8.5.0-2ubuntu10.1.dsc
 7fc553b73b3348eef5b18d6f3566f344 53468 web optional curl_8.5.0-2ubuntu10.1.debian.tar.xz
 498f75359c4dc124a5b6c446717baf56 10899 web optional curl_8.5.0-2ubuntu10.1_source.buildinfo
Original-Maintainer: Debian Curl Maintainers <team+curl@tracker.debian.org>