Format: 1.8 Date: Fri, 06 Sep 2019 15:00:31 +0930 Source: curl Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc Architecture: powerpc Version: 7.47.0-1ubuntu2.14 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Alex Murray Description: curl - command line tool for transferring data with URL syntax libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4-doc - documentation for libcurl libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.47.0-1ubuntu2.14) xenial-security; urgency=medium . * SECURITY UPDATE: double-free when using kerberos over FTP may cause denial-of-service - debian/patches/CVE-2019-5481.patch: update lib/security.c to avoid double-free on large memory allocation failures - CVE-2019-5481 * SECURITY UPDATE: heap buffer overflow when receiving TFTP data may cause denial-of-service or remote code-execution - debian/patches/CVE-2019-5482.patch: ensure to use the correct block size when calling recvfrom() if the server returns an OACK without specifying a block size in lib/tftp.c - CVE-2019-5482 Checksums-Sha1: 7c2f50202ac75745b46bd26ff90c8e92ecdd4070 1088 curl-dbgsym_7.47.0-1ubuntu2.14_powerpc.ddeb 95a8da8522ce090d99404ada2de7eb5e4e106d59 135124 curl_7.47.0-1ubuntu2.14_powerpc.deb a8602eef874e6320709e51e96d17901668dd6821 3612070 libcurl3-dbg_7.47.0-1ubuntu2.14_powerpc.deb 05da17e0d4666f7e62d9a4ef9c1f04755d9efdb7 1208 libcurl3-dbgsym_7.47.0-1ubuntu2.14_powerpc.ddeb 28af2a077a5847724d820f8b97defa03bfcd896f 1212 libcurl3-gnutls-dbgsym_7.47.0-1ubuntu2.14_powerpc.ddeb e5aa4abcdc2771b0d92018dcb580599ed01c9caa 167488 libcurl3-gnutls_7.47.0-1ubuntu2.14_powerpc.deb 0e18a655484bda73f114df3bb53dca55685f4f7b 1210 libcurl3-nss-dbgsym_7.47.0-1ubuntu2.14_powerpc.ddeb 5e185d93cad27d6d46b8ca9fa478b1b51235fb7f 173592 libcurl3-nss_7.47.0-1ubuntu2.14_powerpc.deb a707b78c50e565a452c99c8b2d6f9f9fb4ba31dd 169528 libcurl3_7.47.0-1ubuntu2.14_powerpc.deb 8050deb715cdf8ecc2fa98ff37634aeda01aec60 1294 libcurl4-gnutls-dev-dbgsym_7.47.0-1ubuntu2.14_powerpc.ddeb 9a537aa237057c8a1d225427edac5b6aa207efbe 234896 libcurl4-gnutls-dev_7.47.0-1ubuntu2.14_powerpc.deb ca0347f99c225788da04b94a7955862b42ef3870 1290 libcurl4-nss-dev-dbgsym_7.47.0-1ubuntu2.14_powerpc.ddeb ae40c6e8c2fbc731c9ea20d372ff18f72faf664c 240948 libcurl4-nss-dev_7.47.0-1ubuntu2.14_powerpc.deb 934556058bff9938c22a3fb2979e722bb33bc10c 1294 libcurl4-openssl-dev-dbgsym_7.47.0-1ubuntu2.14_powerpc.ddeb 1a8647c63ceb7ae7f45d3557954f4377500d868a 236022 libcurl4-openssl-dev_7.47.0-1ubuntu2.14_powerpc.deb Checksums-Sha256: 80cc160742fb1a641d40e0ed0822ddea3fbe14dadbcfa36f7c94cb7189e3f40a 1088 curl-dbgsym_7.47.0-1ubuntu2.14_powerpc.ddeb ddac66811dac287d63836988e372f2a0f554d459deabe4f4c5405ee01add6112 135124 curl_7.47.0-1ubuntu2.14_powerpc.deb c919a7be337230b473b51339c5a949a02c5fc8dc7c53d5eaa24facf1fb2cc29b 3612070 libcurl3-dbg_7.47.0-1ubuntu2.14_powerpc.deb 66cd048eec5a0ebafb2fdb6ee54167a8e55a66f6079791fcc94638f59f3c8653 1208 libcurl3-dbgsym_7.47.0-1ubuntu2.14_powerpc.ddeb 6cf76d6e3732d53137432232875ed2a743488a0c033be9c94d118692ab971129 1212 libcurl3-gnutls-dbgsym_7.47.0-1ubuntu2.14_powerpc.ddeb 4869f4669287dd29d5001f10816c34bad374583478c0018e6357cdbadbea6d13 167488 libcurl3-gnutls_7.47.0-1ubuntu2.14_powerpc.deb 5722973bfa72d76b9c97fd738670e9e832dd5ef68bfb00717446fac7d4b3aae6 1210 libcurl3-nss-dbgsym_7.47.0-1ubuntu2.14_powerpc.ddeb b3cfd4482bd5fdb7dcabb3cd29624d034b7287c087f013f4ccf467d0147132d3 173592 libcurl3-nss_7.47.0-1ubuntu2.14_powerpc.deb eb96044e6316b520b0e5ffa9287be74cc22924bef547c1d3dae5493f5b6ac026 169528 libcurl3_7.47.0-1ubuntu2.14_powerpc.deb 5ba836f801efbe562967ce0606bdbfa4fdbe99e0d047008f3390eb55d562aac5 1294 libcurl4-gnutls-dev-dbgsym_7.47.0-1ubuntu2.14_powerpc.ddeb ebaee558fa389c2501dedce9115c888f84b76841dccb1469fc4dbe4f325f8772 234896 libcurl4-gnutls-dev_7.47.0-1ubuntu2.14_powerpc.deb 610e9385cbc00f3e6fdaf7bd6182472f1cd71f61640e23f7c81d84a4ea83a1d6 1290 libcurl4-nss-dev-dbgsym_7.47.0-1ubuntu2.14_powerpc.ddeb ec9597bc8e4ef0b02035276e68a711b3e2a991f39298c698fd4a9d097e0bbafe 240948 libcurl4-nss-dev_7.47.0-1ubuntu2.14_powerpc.deb cf4fc89a6433f032b5e40d649bb39126277adcdfac8c92d3f26d422d297c95e8 1294 libcurl4-openssl-dev-dbgsym_7.47.0-1ubuntu2.14_powerpc.ddeb b9f176d098ae14a98c5cf6644ded958a91d7afc35c25c1e8d25bccb1a5442835 236022 libcurl4-openssl-dev_7.47.0-1ubuntu2.14_powerpc.deb Files: 34013003d78a42bfeb64d0e4f6d17af2 1088 web extra curl-dbgsym_7.47.0-1ubuntu2.14_powerpc.ddeb 79574379cb81ea0478999bbfbb044533 135124 web optional curl_7.47.0-1ubuntu2.14_powerpc.deb 5f08ae7c90042459401896dec04440dd 3612070 debug extra libcurl3-dbg_7.47.0-1ubuntu2.14_powerpc.deb 388882eb7b9d22daf6ffbcf845def0ac 1208 libs extra libcurl3-dbgsym_7.47.0-1ubuntu2.14_powerpc.ddeb efb7a47e48c20d3cae5d88ab6b13dcac 1212 libs extra libcurl3-gnutls-dbgsym_7.47.0-1ubuntu2.14_powerpc.ddeb 102044e25d8a625dd450ce2b0a65f08c 167488 libs optional libcurl3-gnutls_7.47.0-1ubuntu2.14_powerpc.deb 57d5ed03f992e2f50a1796a187c903a2 1210 libs extra libcurl3-nss-dbgsym_7.47.0-1ubuntu2.14_powerpc.ddeb 375017cb95df9e7f364bcee7a5d7751c 173592 libs optional libcurl3-nss_7.47.0-1ubuntu2.14_powerpc.deb 4158661c49d7529ff946cb17744ad6c5 169528 libs optional libcurl3_7.47.0-1ubuntu2.14_powerpc.deb c991085f9752d636772d13e015a0fee0 1294 libdevel extra libcurl4-gnutls-dev-dbgsym_7.47.0-1ubuntu2.14_powerpc.ddeb 145a1f99ec939b2c69efc3efc96d5b50 234896 libdevel optional libcurl4-gnutls-dev_7.47.0-1ubuntu2.14_powerpc.deb 44bd48e3828abfbd2f0a6415b1293932 1290 libdevel extra libcurl4-nss-dev-dbgsym_7.47.0-1ubuntu2.14_powerpc.ddeb 15df4707cb2f9a08a15b31ae20b963bd 240948 libdevel optional libcurl4-nss-dev_7.47.0-1ubuntu2.14_powerpc.deb 73b61bc31df4bacb49d2c9eb1b5475f7 1294 libdevel extra libcurl4-openssl-dev-dbgsym_7.47.0-1ubuntu2.14_powerpc.ddeb 2b82e1c35ab2681f0cafbb28a29b6f2b 236022 libdevel optional libcurl4-openssl-dev_7.47.0-1ubuntu2.14_powerpc.deb Original-Maintainer: Alessandro Ghedini