-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 12 Oct 2026 21:42:41 -0700 Source: curl Architecture: source Version: 8.14.1-2+deb13u7 Distribution: trixie-security Urgency: medium Maintainer: Debian Curl Maintainers Changed-By: Samuel Henrique Changes: curl (8.14.1-2+deb13u7) trixie-security; urgency=medium . * Fix CVE-2026-92392 . curl (8.14.1-2+deb13u6) trixie; urgency=medium . [ Rafael Passos ] * Team upload. * Import upstream patches for 3 CVE fixes: - CVE-2026-8286 - CVE-2026-8924 - CVE-2026-8927 . [ Samuel Henrique ] * d/watch: Fix regex for release tarball (cherry-pick from debian/sid 116dd318 by Rafael Passos) Checksums-Sha1: a52b26b71ab211b478dbcd7c1399578b52d912d4 3263 curl_8.14.1-2+deb13u7.dsc d84a4b8baf1baaca33e31e809f5e770deb727c2f 4250332 curl_8.14.1.orig.tar.gz c892a3257a40081f754b33e6a10eca2453860307 488 curl_8.14.1.orig.tar.gz.asc 9fa1a72b0d02518e702f769134015c878717c56c 75756 curl_8.14.1-2+deb13u7.debian.tar.xz 66688dfa8000c515b7bf4a75706351a8b57fa56f 12902 curl_8.14.1-2+deb13u7_amd64.buildinfo Checksums-Sha256: a559b829ff852b2ee1ac0e448b5d9c18e0f94875bc820d037609d4d807ac6f57 3263 curl_8.14.1-2+deb13u7.dsc 6766ada7101d292b42b8b15681120acd68effa4a9660935853cf6d61f0d984d4 4250332 curl_8.14.1.orig.tar.gz 39cc2ec8ddc39d04e3e7101bbed46d858d0875cbb297a6bfa20959fa2bc7d5c7 488 curl_8.14.1.orig.tar.gz.asc e0f627ee2b9ae61078b2835edc25c8b94a0b57e180a1bc72dd8636ef260c370b 75756 curl_8.14.1-2+deb13u7.debian.tar.xz c143eb77a001e0a2a045e2eb34502d49c44e844084df264a00ca84444f39e831 12902 curl_8.14.1-2+deb13u7_amd64.buildinfo Files: 8ccac33cd3cee853931db1f292157cc4 3263 web optional curl_8.14.1-2+deb13u7.dsc 745dfc1da8c44eb9ce6ede16fd102c32 4250332 web optional curl_8.14.1.orig.tar.gz e90da3c198bfec67be08392e2a974103 488 web optional curl_8.14.1.orig.tar.gz.asc 65d0a16929c6dc1d0030d27cbc65893b 75756 web optional curl_8.14.1-2+deb13u7.debian.tar.xz 3e7d6661534e37e1d725b84094f1f554 12902 web optional curl_8.14.1-2+deb13u7_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBdtqg34QX0sdAsVfu6n6rcz7RwcFAmrNzhsACgkQu6n6rcz7 Rwe7eg//Z1r3WPySm0f6653LHtC5LNrFz3jVn0J22XJGi57zbVsVW7geczaxi8eB wKvOrgtfH7fGHV/X5NPZce3wrVfdI9Ks56E2f8pD0C+6xt0LH5Yw09wIYLShLzX3 mJYJLXLPthn1qVOzG4yIm1zfenZQpGv4D72rQ0RVskhVcP1f3lxGs6y5m4WR4igM O4gBiehItorc/Hkb0r1A/CAQ43IzwMgpFlHbFDfpvQjCGKs0obO1I1ipDOmSBHQG SjUrgH0beOJplNKoxdXxQM4+HrIC3/DNUXY8fXXFX/wKIIYvh9QZfPmPufEjkVSO /xENkr3e9zdptRcILY/yYn2NtMsLt+y42lO2lSjNrOCYIBfgVjlcr49rDcKsRAur qw6Ttjtm3QUO1pLh0m53w1DFBdaIvg84WDLrlMNLfPBY+8zGh7ExUcMMXK9ux2Vb 3MFqq7cG6TJvj3ol480JLpZ3TqW7gTbNk29SIhnW8ypZIDUx0INU8RuD6zLt5C1s U3qr7YojcN6gNFgE+4YOEKTK3xYXN9wO63wUDayI2fbgDk58i+dP6x+8XvteBxGG w/Su1n3V0+LwDb6z05CA0iKRB7cXGVdoITl4+nvC5lWLv6VU9aDa3LBr0OER8Xfv 9NOv94S0a0fwLIewHQ5n/FdCi47BByBBDWKt5VjnO9XgvxPtcko= =P8r4 -----END PGP SIGNATURE-----