Format: 1.8
Date: Mon, 29 Oct 2018 08:10:57 -0400
Source: curl
Binary: curl libcurl4 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl4-doc
Architecture: arm64
Version: 7.58.0-2ubuntu3.5
Distribution: bionic
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos02-arm64-024.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 curl       - command line tool for transferring data with URL syntax
 libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour)
 libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour)
 libcurl4   - easy-to-use client-side URL transfer library (OpenSSL flavour)
 libcurl4-doc - documentation for libcurl
 libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour)
 libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour)
 libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour)
Changes:
 curl (7.58.0-2ubuntu3.5) bionic-security; urgency=medium
 .
   * SECURITY UPDATE: SASL password overflow via integer overflow
     - debian/patches/CVE-2018-16839-pre.patch: fix integer overflow check
       in lib/curl_ntlm_core.c, lib/curl_setup.h, lib/vauth/cleartext.c.
     - debian/patches/CVE-2018-16839.patch: fix check in
       lib/vauth/cleartext.c.
     - CVE-2018-16839
   * SECURITY UPDATE: warning message out-of-buffer read
     - debian/patches/oob-read.patch: fix bad arithmetic in src/tool_msgs.c.
     - CVE number pending
Checksums-Sha1:
 6d66d68aba68849c19c5e61b0731dae507f179fd 144952 curl-dbgsym_7.58.0-2ubuntu3.5_arm64.ddeb
 5bd64ad904a0d5a65b7e0b76e7b666c5437ac620 11229 curl_7.58.0-2ubuntu3.5_arm64.buildinfo
 0fb2818462ea0aa0c915a56a411a066cdb8d31ec 151840 curl_7.58.0-2ubuntu3.5_arm64.deb
 9e53459d30d2fa955d51f1801dfbeb34a0a3d7d9 1311244 libcurl3-gnutls-dbgsym_7.58.0-2ubuntu3.5_arm64.ddeb
 9d95abed5d2762b04ac5ce2d6d47d7518a75f79e 179008 libcurl3-gnutls_7.58.0-2ubuntu3.5_arm64.deb
 06161beaf4a6c8e932dcaa47e4a5c6885bcc764e 1344512 libcurl3-nss-dbgsym_7.58.0-2ubuntu3.5_arm64.ddeb
 0ff5606ef4113be3985199eef3329a4af51951a5 185092 libcurl3-nss_7.58.0-2ubuntu3.5_arm64.deb
 a0c0b6c5c4347b4926b31ad5f3fc208be50905f4 1318552 libcurl4-dbgsym_7.58.0-2ubuntu3.5_arm64.ddeb
 81ff9b4489f939e0a4a528483e4e7b1123cbf677 267908 libcurl4-gnutls-dev_7.58.0-2ubuntu3.5_arm64.deb
 fce242ee1202e0d69e07d37fd54b944f27b53411 274488 libcurl4-nss-dev_7.58.0-2ubuntu3.5_arm64.deb
 dc7dc21084d89828f5447de8de90f518d023a8de 268764 libcurl4-openssl-dev_7.58.0-2ubuntu3.5_arm64.deb
 56a16d50ae3b39cc499d15b6427c0675cd305ac7 180296 libcurl4_7.58.0-2ubuntu3.5_arm64.deb
Checksums-Sha256:
 433141929a02d1a55a31f41bb67204af5bc5b1fccf4b2be9fb8a0949c401fb8a 144952 curl-dbgsym_7.58.0-2ubuntu3.5_arm64.ddeb
 4a2c6a9bf9183ed490f1a8f0603296a3b7bdacf7c7fb6df7034dfb36f3ed6cdb 11229 curl_7.58.0-2ubuntu3.5_arm64.buildinfo
 5067d2bba9f6b4e9ac788c91634cbd6e552acbc8657288f9cb5052d61d9a5adf 151840 curl_7.58.0-2ubuntu3.5_arm64.deb
 ead1bf6670abc45771f09537f8b9002da91f10705efa89e2689cc098eefd2fe0 1311244 libcurl3-gnutls-dbgsym_7.58.0-2ubuntu3.5_arm64.ddeb
 5cf1884efeb4762be822c8676b057b9a37fd04ed589b07005049cb1a273a63b0 179008 libcurl3-gnutls_7.58.0-2ubuntu3.5_arm64.deb
 da42f2ac3274cf7f51fdfb29222f466bf4bd03dc81c863a015037675d987009d 1344512 libcurl3-nss-dbgsym_7.58.0-2ubuntu3.5_arm64.ddeb
 11567b07b569c7649b5d5572d0122fa97f8bc169600ac8a570b7e33719ac84ac 185092 libcurl3-nss_7.58.0-2ubuntu3.5_arm64.deb
 5089f45bd3a29c39b6950ffaa3ff9ee8448fd8c3d2392ca149f718d64021f26b 1318552 libcurl4-dbgsym_7.58.0-2ubuntu3.5_arm64.ddeb
 086db3064df277a33828a11b840080ddd94a3baad9bbaaee132425823ec4ab7d 267908 libcurl4-gnutls-dev_7.58.0-2ubuntu3.5_arm64.deb
 5c089fbaf992d06bede4cf356dbd49b09b92261721c98c6e3d5eae692b3dae90 274488 libcurl4-nss-dev_7.58.0-2ubuntu3.5_arm64.deb
 3f1af7a957b1fb8c7489f4b64d3b2cb7db153e6ca6d9aa35165bef5ab948b9ee 268764 libcurl4-openssl-dev_7.58.0-2ubuntu3.5_arm64.deb
 d77ed02466c46670bdac78ce58b7d1a1a2eb67fb74c56d73c3883b0d5aad2cb0 180296 libcurl4_7.58.0-2ubuntu3.5_arm64.deb
Files:
 5a346a6706d2780d89d680a746612092 144952 debug optional curl-dbgsym_7.58.0-2ubuntu3.5_arm64.ddeb
 2ba2e46a71fcec49c64cdee176a01c05 11229 web optional curl_7.58.0-2ubuntu3.5_arm64.buildinfo
 45239668d869d51400ab8abe809f33ae 151840 web optional curl_7.58.0-2ubuntu3.5_arm64.deb
 b62f57cf8b74f491b8c9986bf154ad03 1311244 debug optional libcurl3-gnutls-dbgsym_7.58.0-2ubuntu3.5_arm64.ddeb
 f27e32ad56ae225e4d5e3097214b615e 179008 libs optional libcurl3-gnutls_7.58.0-2ubuntu3.5_arm64.deb
 85679d6d44be3dd0a2a51142f4c5a7f2 1344512 debug optional libcurl3-nss-dbgsym_7.58.0-2ubuntu3.5_arm64.ddeb
 99b5b7c5a48bf181fe4786272681b542 185092 libs optional libcurl3-nss_7.58.0-2ubuntu3.5_arm64.deb
 194afefdb956c2861c7b1d3d36b37683 1318552 debug optional libcurl4-dbgsym_7.58.0-2ubuntu3.5_arm64.ddeb
 c954eca65c7aa22c1538fd62d22e20fd 267908 libdevel optional libcurl4-gnutls-dev_7.58.0-2ubuntu3.5_arm64.deb
 b26cc1c770594ebe5c491ace35e49114 274488 libdevel optional libcurl4-nss-dev_7.58.0-2ubuntu3.5_arm64.deb
 1f54299a5ba0463d023bec68ff3918ee 268764 libdevel optional libcurl4-openssl-dev_7.58.0-2ubuntu3.5_arm64.deb
 c0464736728a6f116a0ccce88bec18c2 180296 libs optional libcurl4_7.58.0-2ubuntu3.5_arm64.deb
Original-Maintainer: Alessandro Ghedini <ghedo@debian.org>