Format: 1.8 Date: Tue, 08 May 2018 13:47:34 -0400 Source: curl Binary: curl libcurl4 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl4-doc Architecture: amd64 all Version: 7.58.0-2ubuntu3.1 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: curl - command line tool for transferring data with URL syntax libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl4-doc - documentation for libcurl libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.58.0-2ubuntu3.1) bionic-security; urgency=medium . * SECURITY UPDATE: FTP shutdown response buffer overflow - debian/patches/CVE-2018-1000300.patch: check data size in lib/pingpong.c. - CVE-2018-1000303 * SECURITY UPDATE: RTSP bad headers buffer over-read - debian/patches/CVE-2018-1000301.patch: restore buffer pointer when bad response-line is parsed in lib/http.c. - CVE-2018-1000301 Checksums-Sha1: 32c824636e71314c64d97bb44ff4eac5ec1a522d 141876 curl-dbgsym_7.58.0-2ubuntu3.1_amd64.ddeb 8ae80c1cf6803f1c0e477c4853abda84eb1f514b 11493 curl_7.58.0-2ubuntu3.1_amd64.buildinfo c8101b41b80146371fde3ded2eaff2b612e23983 158668 curl_7.58.0-2ubuntu3.1_amd64.deb b891a372c6a392459635203d396c9e1e3b44288a 1279072 libcurl3-gnutls-dbgsym_7.58.0-2ubuntu3.1_amd64.ddeb ccefc9ddfe94d3e2206d6bf66022c03baedd928a 212960 libcurl3-gnutls_7.58.0-2ubuntu3.1_amd64.deb 3051a39c88d4ea0fa701766d0c5fecea853dbbb4 1309388 libcurl3-nss-dbgsym_7.58.0-2ubuntu3.1_amd64.ddeb 7447f37f3652affaf46a48c2530884d5f8be0758 218856 libcurl3-nss_7.58.0-2ubuntu3.1_amd64.deb 448b3576c82f1cd31ce248d9cd33454215a75c9a 1287516 libcurl4-dbgsym_7.58.0-2ubuntu3.1_amd64.ddeb 74cfbb9a586d6ac0f0f937aff6b9764467e0abb1 834576 libcurl4-doc_7.58.0-2ubuntu3.1_all.deb 0729b2b4dee126cfa5cef0df65b7cbbc744562f2 293440 libcurl4-gnutls-dev_7.58.0-2ubuntu3.1_amd64.deb d670119701372668d9d272a2cd14e6cfdb513935 300112 libcurl4-nss-dev_7.58.0-2ubuntu3.1_amd64.deb b19a5d066fe556d4d328ad88f029d6c4726d3d0a 294492 libcurl4-openssl-dev_7.58.0-2ubuntu3.1_amd64.deb d7ad7a271592dc59fe2871e5d7a6eaa98aa4e8ec 213948 libcurl4_7.58.0-2ubuntu3.1_amd64.deb Checksums-Sha256: 35619c6bc47f2e9d1d6f8b994ef00b23da96ab837873658f6b89de4c0ce54ad3 141876 curl-dbgsym_7.58.0-2ubuntu3.1_amd64.ddeb 9379597815643cf7a748dfc7ef5c35c0c18410470acbcd24e9fcd08378253e0b 11493 curl_7.58.0-2ubuntu3.1_amd64.buildinfo b253a466d81d63e74d93b788cea03d01c89979ccd5cbcee4cca28551b1ec6fe3 158668 curl_7.58.0-2ubuntu3.1_amd64.deb e625bc77e0a8d0c5c39e5111463e640bf6291b73c110e32e8a6a47af601776ed 1279072 libcurl3-gnutls-dbgsym_7.58.0-2ubuntu3.1_amd64.ddeb b0ff472fd97fceb78055b7b617e1f8913e0456c9db21368d21ef2f3d0de193a7 212960 libcurl3-gnutls_7.58.0-2ubuntu3.1_amd64.deb a2f665d7fe62ea18f231f65e94fbb714cffcdef2c2c044f9397fba4b79833180 1309388 libcurl3-nss-dbgsym_7.58.0-2ubuntu3.1_amd64.ddeb 60577d563bc2a3b4f31142d4e108e4dfc98108ca469236d16f6069b95ff6573e 218856 libcurl3-nss_7.58.0-2ubuntu3.1_amd64.deb fd55f10e661efccbc1c4354bebd67689655a5cf32517b35956dd321938b54694 1287516 libcurl4-dbgsym_7.58.0-2ubuntu3.1_amd64.ddeb 91603da08c7d81b676a14ee17b16e535602fd55d0c1d8bf77eddcffddcb1e471 834576 libcurl4-doc_7.58.0-2ubuntu3.1_all.deb 8f69478096d1971fd218d9549015fa3333b17d9dcee54bcabbb6fbf4ccbf7291 293440 libcurl4-gnutls-dev_7.58.0-2ubuntu3.1_amd64.deb 80102ebc6b067e198c813c84322687afc9791bc3a4382d74f03179e9adedeea8 300112 libcurl4-nss-dev_7.58.0-2ubuntu3.1_amd64.deb e353cc94966da3310ec4b00e537ad195f2c4ebabc466377a7b49d07b96cc42c6 294492 libcurl4-openssl-dev_7.58.0-2ubuntu3.1_amd64.deb 9bdf8115f768eb591c5dff71f6a11fce1032a648a804f6ea8677b4c3b2cc1d42 213948 libcurl4_7.58.0-2ubuntu3.1_amd64.deb Files: 1a878b4e60aecfc8592fba6f3aa0ed0f 141876 debug optional curl-dbgsym_7.58.0-2ubuntu3.1_amd64.ddeb 5060441a25d259a06100523da8f28eb3 11493 web optional curl_7.58.0-2ubuntu3.1_amd64.buildinfo ad6ae8a394eb30f21a79d71a1a876c73 158668 web optional curl_7.58.0-2ubuntu3.1_amd64.deb 1e232529f30aaa685860532ef6dc4489 1279072 debug optional libcurl3-gnutls-dbgsym_7.58.0-2ubuntu3.1_amd64.ddeb 00de57f022602c480b2c4b64cd6eaa4f 212960 libs optional libcurl3-gnutls_7.58.0-2ubuntu3.1_amd64.deb 9b91b122d7a299cef10988dbd278ee16 1309388 debug optional libcurl3-nss-dbgsym_7.58.0-2ubuntu3.1_amd64.ddeb e3d382819e0657590864cb2c0c869793 218856 libs optional libcurl3-nss_7.58.0-2ubuntu3.1_amd64.deb 65afb0cabd1f29f0373f7a0e069a82c9 1287516 debug optional libcurl4-dbgsym_7.58.0-2ubuntu3.1_amd64.ddeb dbfab8fa32bc7f7998ee42b334d2d619 834576 doc optional libcurl4-doc_7.58.0-2ubuntu3.1_all.deb edbb5cd55f930542387e2cb8bf76e9dc 293440 libdevel optional libcurl4-gnutls-dev_7.58.0-2ubuntu3.1_amd64.deb 093a27dd2fd796706201c2eae012000f 300112 libdevel optional libcurl4-nss-dev_7.58.0-2ubuntu3.1_amd64.deb 301577cbdbb2863c50b4d474ba7f5e09 294492 libdevel optional libcurl4-openssl-dev_7.58.0-2ubuntu3.1_amd64.deb 0097994167e78b6e03fba1bb7a7db67e 213948 libs optional libcurl4_7.58.0-2ubuntu3.1_amd64.deb Original-Maintainer: Alessandro Ghedini