Format: 1.8 Date: Tue, 05 May 2015 14:17:51 -0400 Source: curl Binary: curl curl-udeb libcurl3 libcurl3-udeb libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc Architecture: arm64 Version: 7.38.0-3ubuntu3 Distribution: wily-proposed Urgency: medium Maintainer: Ubuntu Build Daemon Changed-By: Marc Deslauriers Description: curl - command line tool for transferring data with URL syntax curl-udeb - Get a file from an HTTP, HTTPS or FTP server (udeb) libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl3-udeb - Multi-protocol file transfer library (OpenSSL) (udeb) libcurl4-doc - documentation for libcurl libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.38.0-3ubuntu3) wily; urgency=medium . * SECURITY UPDATE: NTLM connection reuse when unauthenticated - debian/patches/CVE-2015-3143.patch: require credentials to match in lib/url.c. - CVE-2015-3143 * SECURITY UPDATE: host name out of boundary memory access - debian/patches/CVE-2015-3144.patch: check for valid length in lib/url.c. - CVE-2015-3144 * SECURITY UPDATE: cookie parser out of boundary memory access - debian/patches/CVE-2015-3145.patch: properly handle a single double quote in lib/cookie.c. - CVE-2015-3145 * SECURITY UPDATE: negotiate not treated as connection-oriented - debian/patches/CVE-2015-3148.patch: close Negotiate connections when done in lib/http.c. - CVE-2015-3148 * SECURITY UPDATE: sensitive HTTP server headers disclosure to proxies - debian/patches/CVE-2015-3153.patch: make HTTP headers separated in docs/libcurl/opts/CURLOPT_HEADEROPT.3, lib/url.c, tests/data/test1527, tests/data/test287, tests/libtest/lib1527.c. - CVE-2015-3153 Checksums-Sha1: 47f2a4ccaa30ddaa3521142f2ace5931e61eab36 122920 curl_7.38.0-3ubuntu3_arm64.deb 419f94f587765150182c2a095be0812930f18efa 1000 curl-udeb_7.38.0-3ubuntu3_arm64.udeb da37233906a26c299b53cf47088f54817f681ab6 148162 libcurl3_7.38.0-3ubuntu3_arm64.deb 309a53f4e083ebf86c016630d4505314a58a7bdf 886 libcurl3-udeb_7.38.0-3ubuntu3_arm64.udeb e00b1107b4e99acab7617f53adecbd7079bc657e 141322 libcurl3-gnutls_7.38.0-3ubuntu3_arm64.deb 0f33e30b2f459e2f9c36aaffcddc3876ce327b4a 150956 libcurl3-nss_7.38.0-3ubuntu3_arm64.deb bc3ef996b33986acf4ce82d741dbfa1cd65bc146 227792 libcurl4-openssl-dev_7.38.0-3ubuntu3_arm64.deb cb217e5877fef85d6070bc628617c887295b11a0 220094 libcurl4-gnutls-dev_7.38.0-3ubuntu3_arm64.deb 12b98f8db7e1685e36459016b3a0e89ac6ac2054 231650 libcurl4-nss-dev_7.38.0-3ubuntu3_arm64.deb fbb2a6989382d9cb722ef8048f96532c796ba665 3356902 libcurl3-dbg_7.38.0-3ubuntu3_arm64.deb 4edd5536c51f225d5549cd3c4bbb71ac37de6356 1148 curl-dbgsym_7.38.0-3ubuntu3_arm64.ddeb d03293b48f48a087f95df0b954d6d13ffd3f5647 1044 curl-udeb-dbgsym_7.38.0-3ubuntu3_arm64.ddeb 87231c06b40f947025ac9d899a69a303ad7593f0 1254 libcurl3-dbgsym_7.38.0-3ubuntu3_arm64.ddeb 2d612519beeb3c4553e7c3a26224182d1703c7f8 952 libcurl3-udeb-dbgsym_7.38.0-3ubuntu3_arm64.ddeb 064901964b281ab803f4bc62e7858e019669da87 1260 libcurl3-gnutls-dbgsym_7.38.0-3ubuntu3_arm64.ddeb 92415cabb00c32f1d7b4e86b4dd44a8256824269 1254 libcurl3-nss-dbgsym_7.38.0-3ubuntu3_arm64.ddeb b7e6c6a528dbe89529e37de878881d42f68289e5 1340 libcurl4-openssl-dev-dbgsym_7.38.0-3ubuntu3_arm64.ddeb 27b3b54ee72f0d59ae602d99aac64261a4c3335c 1342 libcurl4-gnutls-dev-dbgsym_7.38.0-3ubuntu3_arm64.ddeb 063b5a2cb211580d172438986419ec41ff484e81 1336 libcurl4-nss-dev-dbgsym_7.38.0-3ubuntu3_arm64.ddeb Checksums-Sha256: 0de7d08fc2d05e733176d11e41fe11007e7a5ce0092cc1b62f66c6989757d3ba 122920 curl_7.38.0-3ubuntu3_arm64.deb 3613ee0f9146d25a2fb50f67fe337e69bda250e02f69d2c1a483eaac69674689 1000 curl-udeb_7.38.0-3ubuntu3_arm64.udeb e58b296fe1e1a772f339cc580e79b3797d951567f80ddf8fdc4ff22d9f4b5018 148162 libcurl3_7.38.0-3ubuntu3_arm64.deb f3f5ced840143dfef5edffb04338315180e6a6e7f783f7864bbce4ab2414fc60 886 libcurl3-udeb_7.38.0-3ubuntu3_arm64.udeb ddb6d98dd651a0fe5e21ca97ed01f80fb0624f4513f88ae6c1d5535b0ed5bfb2 141322 libcurl3-gnutls_7.38.0-3ubuntu3_arm64.deb fe123cb6829239c54837d39da9c8896961f0b396290508a36e36b4b3a403f7aa 150956 libcurl3-nss_7.38.0-3ubuntu3_arm64.deb 5c2d58552605a17f4e9f84dd7784dc1fd5045fc91b31378eb270c685d0ae8074 227792 libcurl4-openssl-dev_7.38.0-3ubuntu3_arm64.deb b94e2583a5e3183364c1619ae85e649bca3197c9fbf580bcfcc6628f4f7f0c8e 220094 libcurl4-gnutls-dev_7.38.0-3ubuntu3_arm64.deb bd68a51318190261f2bca3d3fd7c2da5227252d8bbfd29b5075c6906593347cb 231650 libcurl4-nss-dev_7.38.0-3ubuntu3_arm64.deb 3639b1d969f595ee692811dee3b0c1a6c66c324d6d997ffe562a98fa3b048fc4 3356902 libcurl3-dbg_7.38.0-3ubuntu3_arm64.deb ac0db195ec9a6bc30278a2878ff6d6328c43c31912eafa5d16d191975c0fe8d4 1148 curl-dbgsym_7.38.0-3ubuntu3_arm64.ddeb c76aa18c1427e94657a8cd90b9e84dae6ad98d46a50bf21659c1d17de7ba972d 1044 curl-udeb-dbgsym_7.38.0-3ubuntu3_arm64.ddeb d1a8530d20f880c598e44d16e28b3c6eb41276cdc19ce3065f73ae7c2aaea0da 1254 libcurl3-dbgsym_7.38.0-3ubuntu3_arm64.ddeb 0dbc054b0da77e2b971f8621dd631701476b49a51596d85aac6ed115754e6f0b 952 libcurl3-udeb-dbgsym_7.38.0-3ubuntu3_arm64.ddeb 0dcda437a86a270a17dada095d3187493cb1c712e2047eeca73b08dad3145334 1260 libcurl3-gnutls-dbgsym_7.38.0-3ubuntu3_arm64.ddeb e385d91516e17b331a5c0423cb55db4e625f2bb7012dbefea246b99d0d913785 1254 libcurl3-nss-dbgsym_7.38.0-3ubuntu3_arm64.ddeb d9616702d4f4a6e303b6b05cf0ee5e2d1f6d08d4474044a567d008942eb40e4e 1340 libcurl4-openssl-dev-dbgsym_7.38.0-3ubuntu3_arm64.ddeb cd72803ddb56865c703f1a12201009eb2316097eff1a50158fbbfbfce7925c0f 1342 libcurl4-gnutls-dev-dbgsym_7.38.0-3ubuntu3_arm64.ddeb d549725ab6d46cf12f9a035a9d3ca1a9016f4e5c1de0ccf0b75a29c902220828 1336 libcurl4-nss-dev-dbgsym_7.38.0-3ubuntu3_arm64.ddeb Files: dc07bb2ff31b8f3dcac2bd5ffdc43cd5 122920 web optional curl_7.38.0-3ubuntu3_arm64.deb f7c4086bc6acf12de264fff9efede8bb 1000 debian-installer optional curl-udeb_7.38.0-3ubuntu3_arm64.udeb b5de75b384be30272f64e5cfe0f82340 148162 libs optional libcurl3_7.38.0-3ubuntu3_arm64.deb 21b2471fb7eeae3c2f8a112d13c41518 886 debian-installer optional libcurl3-udeb_7.38.0-3ubuntu3_arm64.udeb 365a9f4ccad2acecb6eff3afc9024765 141322 libs optional libcurl3-gnutls_7.38.0-3ubuntu3_arm64.deb 34d6dfb0317c0e7d472f54707b437c67 150956 libs optional libcurl3-nss_7.38.0-3ubuntu3_arm64.deb 7b8714a3f2d4a672ae92394424ffe450 227792 libdevel optional libcurl4-openssl-dev_7.38.0-3ubuntu3_arm64.deb 97c931dbbd0af229e6b915300715e563 220094 libdevel optional libcurl4-gnutls-dev_7.38.0-3ubuntu3_arm64.deb 9581a6a9ff6e5d65d03d89d2a57951eb 231650 libdevel optional libcurl4-nss-dev_7.38.0-3ubuntu3_arm64.deb 2dddcd62d9d6946c13a4ae8e7134bc2c 3356902 debug extra libcurl3-dbg_7.38.0-3ubuntu3_arm64.deb ec889f7ff9b46a1569d5c7758d7d97c0 1148 web extra curl-dbgsym_7.38.0-3ubuntu3_arm64.ddeb dddbc26abd665f8b96618b690f08b6ed 1044 debian-installer extra curl-udeb-dbgsym_7.38.0-3ubuntu3_arm64.ddeb 19e4b7f3168c2f8b6f866c05d35eb83c 1254 libs extra libcurl3-dbgsym_7.38.0-3ubuntu3_arm64.ddeb 6ac1a2d5e6683537b254dff7f1a7cd2a 952 debian-installer extra libcurl3-udeb-dbgsym_7.38.0-3ubuntu3_arm64.ddeb 131e1bfc456ad665d6bf2da2e54a1988 1260 libs extra libcurl3-gnutls-dbgsym_7.38.0-3ubuntu3_arm64.ddeb e224999cd233c637a66ef1e766348c08 1254 libs extra libcurl3-nss-dbgsym_7.38.0-3ubuntu3_arm64.ddeb 738c2c83b336f697aa1f0a3f0daac4b6 1340 libdevel extra libcurl4-openssl-dev-dbgsym_7.38.0-3ubuntu3_arm64.ddeb dee359396e7d4606e11ae90e9e7e6d27 1342 libdevel extra libcurl4-gnutls-dev-dbgsym_7.38.0-3ubuntu3_arm64.ddeb 6b73e422acf51770b042617a103f2295 1336 libdevel extra libcurl4-nss-dev-dbgsym_7.38.0-3ubuntu3_arm64.ddeb Original-Maintainer: Alessandro Ghedini Package-Type: udeb