- curl (7.88.1-9+rpi1) bookworm-staging; urgency=medium
++curl (7.88.1-10+rpi1) bookworm-staging; urgency=medium
+
++ [changes brought forward from 7.88.1-9+rpi1 by Peter Michael Green <plugwash@raspbian.org> at Sat, 20 May 2023 09:55:44 +0000]
+ * Disable testsuite.
+
- -- Peter Michael Green <plugwash@raspbian.org> Sat, 20 May 2023 09:55:44 +0000
++ -- Raspbian forward porter <root@raspbian.org> Mon, 05 Jun 2023 04:33:19 +0000
++
+ curl (7.88.1-10) unstable; urgency=medium
+
+ * Add new patches to fix CVEs (closes: #1036239):
+ - CVE-2023-28319: UAF in SSH sha256 fingerprint check
+ - CVE-2023-28320: siglongjmp race condition
+ - CVE-2023-28321: IDN wildcard match
+ - CVE-2023-28322: more POST-after-PUT confusion
+ * d/libcurl*.symbols: Drop curl_jmpenv, not built anymore due to
+ CVE-2023-28320
+
+ -- Samuel Henrique <samueloph@debian.org> Thu, 18 May 2023 23:43:40 +0100
curl (7.88.1-9) unstable; urgency=medium