Publishing details

Published on 2023-11-02
Copied from Backports - various (Xenial & newer) by Peter J. Mello
Originally uploaded to ubuntu focal in Curl 3 & 4 - both in one (Xenial & newer)

Changelog

curl (7.88.1-11+20.04.sav1) focal; urgency=medium

  * SECURITY UPDATE: SOCKS5 heap buffer overflow
    - debian/patches/CVE-2023-38545.patch: return error if hostname too
      long for remote resolve in lib/socks.c, tests/data/Makefile.inc,
      tests/data/test728.
    - CVE-2023-38545
  * SECURITY UPDATE: cookie injection with none file
    - debian/patches/CVE-2023-38546.patch: remove unnecessary struct fields
      in lib/cookie.c, lib/cookie.h, lib/easy.c.
    - CVE-2023-38546
    [ patches thanks to Marc Deslauriers <email address hidden> ]

 -- Rob Savoury <email address hidden>  Fri, 20 Oct 2023 06:47:26 -0700

Available diffs

diff from 7.88.1-10~20.04.sav0 to 7.88.1-11+20.04.sav1 (12.3 KiB)
diff from 7.88.1-11+20.04.sav0 to 7.88.1-11+20.04.sav1 (4.0 KiB)

Builds

Built packages

curl command line tool for transferring data with URL syntax

curl-dbgsym debug symbols for curl

libcurl3-gnutls easy-to-use client-side URL transfer library (GnuTLS flavour)

libcurl3-gnutls-dbgsym debug symbols for libcurl3-gnutls

libcurl3-nss easy-to-use client-side URL transfer library (NSS flavour)

libcurl3-nss-dbgsym debug symbols for libcurl3-nss

libcurl4 easy-to-use client-side URL transfer library (OpenSSL flavour)

libcurl4-dbgsym debug symbols for libcurl4

libcurl4-doc documentation for libcurl

libcurl4-gnutls-dev development files and documentation for libcurl (GnuTLS flavour)

libcurl4-nss-dev development files and documentation for libcurl (NSS flavour)

libcurl4-openssl-dev development files and documentation for libcurl (OpenSSL flavour)

Package files

curl-dbgsym_7.88.1-11+20.04.sav1_arm64.deb (148.9 KiB)
curl-dbgsym_7.88.1-11+20.04.sav1_armhf.deb (147.3 KiB)
curl_7.88.1-11+20.04.sav1.debian.tar.xz (67.1 KiB)
curl_7.88.1-11+20.04.sav1.dsc (3.2 KiB)
curl_7.88.1-11+20.04.sav1_amd64.deb (326.4 KiB)
curl_7.88.1-11+20.04.sav1_arm64.deb (302.2 KiB)
curl_7.88.1-11+20.04.sav1_armhf.deb (298.8 KiB)
curl_7.88.1-11+20.04.sav1_i386.deb (331.6 KiB)
curl_7.88.1.orig.tar.gz (4.1 MiB)
curl_7.88.1.orig.tar.gz.asc (488 bytes)
libcurl3-gnutls-dbgsym_7.88.1-11+20.04.sav1_arm64.deb (925.0 KiB)
libcurl3-gnutls-dbgsym_7.88.1-11+20.04.sav1_armhf.deb (911.2 KiB)
libcurl3-gnutls_7.88.1-11+20.04.sav1_amd64.deb (390.1 KiB)
libcurl3-gnutls_7.88.1-11+20.04.sav1_arm64.deb (350.9 KiB)
libcurl3-gnutls_7.88.1-11+20.04.sav1_armhf.deb (334.9 KiB)
libcurl3-gnutls_7.88.1-11+20.04.sav1_i386.deb (422.5 KiB)
libcurl3-nss-dbgsym_7.88.1-11+20.04.sav1_arm64.deb (964.7 KiB)
libcurl3-nss-dbgsym_7.88.1-11+20.04.sav1_armhf.deb (951.5 KiB)
libcurl3-nss_7.88.1-11+20.04.sav1_amd64.deb (398.6 KiB)
libcurl3-nss_7.88.1-11+20.04.sav1_arm64.deb (359.5 KiB)
libcurl3-nss_7.88.1-11+20.04.sav1_armhf.deb (342.6 KiB)
libcurl3-nss_7.88.1-11+20.04.sav1_i386.deb (430.1 KiB)
libcurl4-dbgsym_7.88.1-11+20.04.sav1_arm64.deb (956.7 KiB)
libcurl4-dbgsym_7.88.1-11+20.04.sav1_armhf.deb (943.4 KiB)
libcurl4-doc_7.88.1-11+20.04.sav1_all.deb (1.1 MiB)
libcurl4-gnutls-dev_7.88.1-11+20.04.sav1_amd64.deb (488.8 KiB)
libcurl4-gnutls-dev_7.88.1-11+20.04.sav1_arm64.deb (457.4 KiB)
libcurl4-gnutls-dev_7.88.1-11+20.04.sav1_armhf.deb (438.5 KiB)
libcurl4-gnutls-dev_7.88.1-11+20.04.sav1_i386.deb (534.4 KiB)
libcurl4-nss-dev_7.88.1-11+20.04.sav1_amd64.deb (497.0 KiB)
libcurl4-nss-dev_7.88.1-11+20.04.sav1_arm64.deb (466.3 KiB)
libcurl4-nss-dev_7.88.1-11+20.04.sav1_armhf.deb (447.0 KiB)
libcurl4-nss-dev_7.88.1-11+20.04.sav1_i386.deb (543.3 KiB)
libcurl4-openssl-dev_7.88.1-11+20.04.sav1_amd64.deb (494.4 KiB)
libcurl4-openssl-dev_7.88.1-11+20.04.sav1_arm64.deb (462.7 KiB)
libcurl4-openssl-dev_7.88.1-11+20.04.sav1_armhf.deb (443.9 KiB)
libcurl4-openssl-dev_7.88.1-11+20.04.sav1_i386.deb (541.1 KiB)
libcurl4_7.88.1-11+20.04.sav1_amd64.deb (395.0 KiB)
libcurl4_7.88.1-11+20.04.sav1_arm64.deb (354.1 KiB)
libcurl4_7.88.1-11+20.04.sav1_armhf.deb (339.5 KiB)
libcurl4_7.88.1-11+20.04.sav1_i386.deb (427.6 KiB)