Format: 1.8 Date: Mon, 29 Jan 2018 16:06:08 -0300 Source: curl Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc Architecture: powerpc Version: 7.47.0-1ubuntu2.6 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Leonidas S. Barbosa Description: curl - command line tool for transferring data with URL syntax libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4-doc - documentation for libcurl libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.47.0-1ubuntu2.6) xenial-security; urgency=medium . * SECURITY UPDATE: Out of bounds read in code handling HTTP/2 - debian/patches/CVE-2018-1000005.patch: fix incorrect trailer buffer size in lib/http2.c. - CVE-2018-1000005 * SECURITY UPDATE: leak authentication data - debian/patches/CVE-2018-1000007.patch: prevent custom authorization headers in redirects in lib/http.c, lib/url.c, lib/urldata.h, tests/data/Makefile.in, tests/data/test317, tests/data/test318. - CVE-2018-1000007 Checksums-Sha1: 4362649cc98fd49e4708da5942320d461bc5ec51 1086 curl-dbgsym_7.47.0-1ubuntu2.6_powerpc.ddeb 5e68aaeb777df92ce448d6bb942e988f7aafb644 135272 curl_7.47.0-1ubuntu2.6_powerpc.deb 7ce32809184f354e6023a09cae1328fad23c204a 3609378 libcurl3-dbg_7.47.0-1ubuntu2.6_powerpc.deb 4ca884f5010b7763c1e600c811a1c9fae5fd0d30 1204 libcurl3-dbgsym_7.47.0-1ubuntu2.6_powerpc.ddeb 92ae97f9147fae53ddb346ebe27787fae90970b7 1210 libcurl3-gnutls-dbgsym_7.47.0-1ubuntu2.6_powerpc.ddeb 0a8738d9f1d25bd41a4e728204e73ce655a00d11 167782 libcurl3-gnutls_7.47.0-1ubuntu2.6_powerpc.deb 9fb898c650c2fe749135e683d51d07aa0a12e48e 1208 libcurl3-nss-dbgsym_7.47.0-1ubuntu2.6_powerpc.ddeb 519e5bef4c8a6806ae4dadd1fd500f3af22a2ba8 174162 libcurl3-nss_7.47.0-1ubuntu2.6_powerpc.deb 835f5b335164c3e3433e507c906ad0f801ec1df6 170258 libcurl3_7.47.0-1ubuntu2.6_powerpc.deb 2b54fc29781f3d273431777a0bcffd017c201e2a 1290 libcurl4-gnutls-dev-dbgsym_7.47.0-1ubuntu2.6_powerpc.ddeb f22504d6c2dd6cf2919e237f005f3e2e59540f89 234556 libcurl4-gnutls-dev_7.47.0-1ubuntu2.6_powerpc.deb b1e8f3bacbd3922c9ad2a49bfd241c181e274fca 1286 libcurl4-nss-dev-dbgsym_7.47.0-1ubuntu2.6_powerpc.ddeb 939943d547260a758cc58b43e22c63294e4450cf 240722 libcurl4-nss-dev_7.47.0-1ubuntu2.6_powerpc.deb 3fdb9a782724a14dd8b48c1d8d6565d22996ec03 1292 libcurl4-openssl-dev-dbgsym_7.47.0-1ubuntu2.6_powerpc.ddeb a4705d7806bc02da5347331c2dc7b5e6935ff97f 235760 libcurl4-openssl-dev_7.47.0-1ubuntu2.6_powerpc.deb Checksums-Sha256: 7a0b78c4bbbcecc514c1af9f9fe95fb21e3de323b0bc15aed896d1fab294a4f6 1086 curl-dbgsym_7.47.0-1ubuntu2.6_powerpc.ddeb 7acd4d8a4eec4693214745ee54fdbfd8db4cc653d50987a78a138f029af448a7 135272 curl_7.47.0-1ubuntu2.6_powerpc.deb 5c913672fd75bd5a60b4761338af2b377021c48ffe71146d0b0eab28d17c08a4 3609378 libcurl3-dbg_7.47.0-1ubuntu2.6_powerpc.deb fe72444cf828b24cd96600c4e51582aea05c9b7407ce551f1f376cca95603b96 1204 libcurl3-dbgsym_7.47.0-1ubuntu2.6_powerpc.ddeb 9ad995c448c5e7b9dff1301c93af3c307ef359716725e7311a6d393a54174290 1210 libcurl3-gnutls-dbgsym_7.47.0-1ubuntu2.6_powerpc.ddeb c60c427f84ce0938ff01ccd02935cb72157e99851373b176fc1bebaf2a34cbcf 167782 libcurl3-gnutls_7.47.0-1ubuntu2.6_powerpc.deb 682fd547ebad8dc4aecf8f45adc165612fe79b64b2553eae678763af4df61014 1208 libcurl3-nss-dbgsym_7.47.0-1ubuntu2.6_powerpc.ddeb 3972d2adc12c5d57f04da1249ec434faab2533c382101200717ae92c2302307c 174162 libcurl3-nss_7.47.0-1ubuntu2.6_powerpc.deb a0aa09b3c0fa292783e30467b9e2203f8e8049cb05aeec9d66e148efa87d79eb 170258 libcurl3_7.47.0-1ubuntu2.6_powerpc.deb b756af7d901ad415ca1c5e97abecd97dac948da995245dc9577661d17b64a2ee 1290 libcurl4-gnutls-dev-dbgsym_7.47.0-1ubuntu2.6_powerpc.ddeb e0609e7a52b2366fc13cda73007d75fe7d0e99d05d235344a2ca5910da06b3f3 234556 libcurl4-gnutls-dev_7.47.0-1ubuntu2.6_powerpc.deb a7392a302289ce807d7bb7aadc4149907826f21c149aa163641a99cea41b572a 1286 libcurl4-nss-dev-dbgsym_7.47.0-1ubuntu2.6_powerpc.ddeb e5c5991ecab507372451550a51302a12ae304b4557869e7e63daf78ffae9477d 240722 libcurl4-nss-dev_7.47.0-1ubuntu2.6_powerpc.deb ac51349c869333db2a57754af8ed3d12794cc63cc911180378e8d67768cb1b4a 1292 libcurl4-openssl-dev-dbgsym_7.47.0-1ubuntu2.6_powerpc.ddeb 08b5d4fbb0935425c51ffd7f3c2f0a943047c0fb61be94bc313c4e2748c8f0cd 235760 libcurl4-openssl-dev_7.47.0-1ubuntu2.6_powerpc.deb Files: 136169ab4c2fdc15581a54da23a8b42a 1086 web extra curl-dbgsym_7.47.0-1ubuntu2.6_powerpc.ddeb a54d845e00eb372e757233933f68887b 135272 web optional curl_7.47.0-1ubuntu2.6_powerpc.deb 11f8eff33266992654b96a49fb34d63a 3609378 debug extra libcurl3-dbg_7.47.0-1ubuntu2.6_powerpc.deb 0118b03243a378e68cc0e8fd5a2313e6 1204 libs extra libcurl3-dbgsym_7.47.0-1ubuntu2.6_powerpc.ddeb a299aa9c94480ebb52c1bdf5d6dd9f22 1210 libs extra libcurl3-gnutls-dbgsym_7.47.0-1ubuntu2.6_powerpc.ddeb b193c0e63d7c18dab9ef316e20d77c9e 167782 libs optional libcurl3-gnutls_7.47.0-1ubuntu2.6_powerpc.deb b8fafd38eafad99d9b7954e8ddf45b1f 1208 libs extra libcurl3-nss-dbgsym_7.47.0-1ubuntu2.6_powerpc.ddeb 5e1404d01c1735ca64a8373fc720d16d 174162 libs optional libcurl3-nss_7.47.0-1ubuntu2.6_powerpc.deb 070c28f761d46a21f449e00ab1cba275 170258 libs optional libcurl3_7.47.0-1ubuntu2.6_powerpc.deb 463272035950627433b819a8b3d5ba81 1290 libdevel extra libcurl4-gnutls-dev-dbgsym_7.47.0-1ubuntu2.6_powerpc.ddeb c2c18fc2c65fdd3f9f90e1690c1e90cc 234556 libdevel optional libcurl4-gnutls-dev_7.47.0-1ubuntu2.6_powerpc.deb 600d2fa49657ff09f80d3ac949626bcc 1286 libdevel extra libcurl4-nss-dev-dbgsym_7.47.0-1ubuntu2.6_powerpc.ddeb df81a167ed05949ca719bdb8d0cdca92 240722 libdevel optional libcurl4-nss-dev_7.47.0-1ubuntu2.6_powerpc.deb 27bb1af4119daa4aa1fe148831403f99 1292 libdevel extra libcurl4-openssl-dev-dbgsym_7.47.0-1ubuntu2.6_powerpc.ddeb 3d621c1bf947a8e782c78ab6f49a025f 235760 libdevel optional libcurl4-openssl-dev_7.47.0-1ubuntu2.6_powerpc.deb Original-Maintainer: Alessandro Ghedini