Ubuntu
curl package

curl 7.22.0-3ubuntu4.16 source package in Ubuntu

Changelog

curl (7.22.0-3ubuntu4.16) precise-security; urgency=medium

  * SECURITY UPDATE: TLS session resumption client cert bypass
    - debian/patches/CVE-2016-5419.patch: switch off SSL session id when
      client cert is used in lib/url.c, lib/urldata.h, lib/sslgen.c.
    - CVE-2016-5419
  * SECURITY UPDATE: re-using connections with wrong client cert
    - debian/patches/CVE-2016-5420.patch: only reuse connections with the
      same client cert in lib/sslgen.c.
    - CVE-2016-5420

 -- Marc Deslauriers <email address hidden>  Fri, 05 Aug 2016 11:27:56 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Precise
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
web
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
curl_7.22.0.orig.tar.gz 2.8 MiB 8fa54fdb229b5a014f454e67502fcca2516121f4d078e0be19103998a736279c
curl_7.22.0-3ubuntu4.16.debian.tar.gz 52.1 KiB e6ba40d16191439b2488cf7ded374466932c10d3ba1ef7b7163acb2a07866631
curl_7.22.0-3ubuntu4.16.dsc 2.7 KiB 48f5861b843614062d38c7cf0137b0808a61c58ef0f351c0f5b2f6ca9e2ce347

View changes file

Binary packages built by this source

curl: Get a file from an HTTP, HTTPS or FTP server

 curl is a client to get files from servers using any of the supported
 protocols. The command is designed to work without user interaction
 or any kind of interactivity.
 .
 curl offers a busload of useful tricks like proxy support, user
 authentication, FTP upload, HTTP post, file transfer resume and more.

curl-udeb: Get a file from an HTTP, HTTPS or FTP server

 curl is a client to get files from servers using any of the supported
 protocols. The command is designed to work without user interaction
 or any kind of interactivity.
 .
 curl offers a busload of useful tricks like proxy support, user
 authentication, FTP upload, HTTP post, file transfer resume and more.
 .
 This package contains the curl binary for the Debian Installer (udeb)

libcurl3: Multi-protocol file transfer library (OpenSSL)

 libcurl is designed to be a solid, usable, reliable and portable
 multi-protocol file transfer library.
 .
 SSL support is provided by OpenSSL.
 .
 This is the shared version of libcurl.

libcurl3-dbg: libcurl compiled with debug symbols

 This contains the debug symbols of both the OpenSSL, GnuTLS and NSS versions
 of libcurl3. It might be useful in debug sessions of software which uses
 libcurl.

libcurl3-gnutls: Multi-protocol file transfer library (GnuTLS)

 libcurl is designed to be a solid, usable, reliable and portable
 multi-protocol file transfer library.
 .
 SSL support is provided by GnuTLS.
 .
 This is the shared version of libcurl.

libcurl3-nss: Multi-protocol file transfer library (NSS)

 libcurl is designed to be a solid, usable, reliable and portable
 multi-protocol file transfer library.
 .
 SSL support is provided by NSS.
 .
 This is the shared version of libcurl.

libcurl3-udeb: Multi-protocol file transfer library (OpenSSL)

 libcurl is designed to be a solid, usable, reliable and portable
 multi-protocol file transfer library.
 .
 SSL support is provided by OpenSSL.
 .
 This package contains the minimal runtime libraries for the Debian Installer
 (udeb).

libcurl4-gnutls-dev: Development files and documentation for libcurl (GnuTLS)

 These files (ie. includes, static library, manual pages) allow to
 build software which uses libcurl.
 .
 SSL support is provided by GnuTLS.
 .
 HTML and PDF versions of all the manual pages are also provided.

libcurl4-nss-dev: Development files and documentation for libcurl (NSS)

 These files (ie. includes, static library, manual pages) allow to
 build software which uses libcurl.
 .
 SSL support is provided by NSS.
 .
 HTML and PDF versions of all the manual pages are also provided.

libcurl4-openssl-dev: Development files and documentation for libcurl (OpenSSL)

 These files (ie. includes, static library, manual pages) allow to
 build software which uses libcurl.
 .
 SSL support is provided by OpenSSL.
 .
 HTML and PDF versions of all the manual pages are also provided.