Format: 1.8 Date: Mon, 09 May 2022 14:12:53 -0400 Source: curl Binary: curl libcurl4 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl4-doc Architecture: arm64 Version: 7.58.0-2ubuntu3.18 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: curl - command line tool for transferring data with URL syntax libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl4-doc - documentation for libcurl libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.58.0-2ubuntu3.18) bionic-security; urgency=medium . * SECURITY UPDATE: CERTINFO never-ending busy-loop - debian/patches/CVE-2022-27781.patch: return error if seemingly stuck in a cert loop in lib/vtls/nss.c. - CVE-2022-27781 * SECURITY UPDATE: TLS and SSH connection too eager reuse - debian/patches/CVE-2022-27782.patch: check more TLS details for connection reuse in lib/setopt.c, lib/url.c, lib/urldata.h, lib/vtls/gtls.c, lib/vtls/openssl.c, lib/vtls/nss.c, lib/vtls/vtls.c. - CVE-2022-27782 Checksums-Sha1: 2502bf4d403ab1f5bcd5cbfd726399a5109082d2 144836 curl-dbgsym_7.58.0-2ubuntu3.18_arm64.ddeb 0bbc34e301d116edda0872f2513711af3a831ccd 11753 curl_7.58.0-2ubuntu3.18_arm64.buildinfo 10b7650101dd3d599be11422ffed81bb2a8af5e0 151960 curl_7.58.0-2ubuntu3.18_arm64.deb 6bfdbd7180ceafd761dfcba32ed2be8add385631 1338612 libcurl3-gnutls-dbgsym_7.58.0-2ubuntu3.18_arm64.ddeb e10cd9358f2dd59dd54ea7c997566c11a6a06fb0 184216 libcurl3-gnutls_7.58.0-2ubuntu3.18_arm64.deb bae0700b31a819c62cf21c613a525a23305df00b 1371600 libcurl3-nss-dbgsym_7.58.0-2ubuntu3.18_arm64.ddeb d729361a012d57ba4881c8d13e27938a7d309a9b 190412 libcurl3-nss_7.58.0-2ubuntu3.18_arm64.deb edc879ed4cb57ae383f99c05397980e3377e29e9 1346364 libcurl4-dbgsym_7.58.0-2ubuntu3.18_arm64.ddeb 3dd2efc587cb3182cb15ca1ec0e7ab490da20b04 274580 libcurl4-gnutls-dev_7.58.0-2ubuntu3.18_arm64.deb a9d4a21bd6fa07e6cdb84fa0f91d3c8b55cb000f 281112 libcurl4-nss-dev_7.58.0-2ubuntu3.18_arm64.deb d9d2b9006c597e1ceef330989ca4ef9c3c939c99 275524 libcurl4-openssl-dev_7.58.0-2ubuntu3.18_arm64.deb 9fda24ab29b8c1207a452c64cbf4eafb50975355 184940 libcurl4_7.58.0-2ubuntu3.18_arm64.deb Checksums-Sha256: 105fba549f3a42c5ac5d61d3c604762eb6ed3a6dd6cf48b4737479f4f91c79c6 144836 curl-dbgsym_7.58.0-2ubuntu3.18_arm64.ddeb 58e49f06ceb28761ae35032cb5db8f9c5d137520c9aa9ca6af114b3540650370 11753 curl_7.58.0-2ubuntu3.18_arm64.buildinfo 497459a78fe66b912790928351403d4cb4f4907f7091b98a9e71b892798d94f0 151960 curl_7.58.0-2ubuntu3.18_arm64.deb 0d3b408aa62425d64b7eec22670efed998e3cd0a1bf1527a2ff91f54047b478c 1338612 libcurl3-gnutls-dbgsym_7.58.0-2ubuntu3.18_arm64.ddeb 915b3ac1234aa0edb1a59120ccda31c7377b67b9583716cc94c2afd7cde202ce 184216 libcurl3-gnutls_7.58.0-2ubuntu3.18_arm64.deb 05476a070a5a002a3fb3286bb990e5dcf43dc970a00ca600d19b3269753a5b22 1371600 libcurl3-nss-dbgsym_7.58.0-2ubuntu3.18_arm64.ddeb 6dfd8a23cf7eb81575123dd55a62587605d1d49b6bf67e598f17ec018c4d48e5 190412 libcurl3-nss_7.58.0-2ubuntu3.18_arm64.deb 5207a70400d84cb517874e508cc883684d2f87a3eca687309dd4c4adeb0ce784 1346364 libcurl4-dbgsym_7.58.0-2ubuntu3.18_arm64.ddeb c60b80f073886327df3e1009effe8103633455c536e5adaac0207fb9266b67db 274580 libcurl4-gnutls-dev_7.58.0-2ubuntu3.18_arm64.deb a3afcc0b2ca5d38af3b1464af816f4008f6d7f0a85a78a37f4648a6dd3a3aa3c 281112 libcurl4-nss-dev_7.58.0-2ubuntu3.18_arm64.deb 382c28ebc6fb452dd39346ca939e6c86c7632dc80f4ba4b677fc5ea92c795974 275524 libcurl4-openssl-dev_7.58.0-2ubuntu3.18_arm64.deb af1e9d371fc14e0717db87418bb96152996fbbf7d9310cc1a36957b83e7561b5 184940 libcurl4_7.58.0-2ubuntu3.18_arm64.deb Files: 3f71dd29d0161cf6a3e7b092c62facfc 144836 debug optional curl-dbgsym_7.58.0-2ubuntu3.18_arm64.ddeb f34fa938ac5e3b89adf75689fa469a8c 11753 web optional curl_7.58.0-2ubuntu3.18_arm64.buildinfo 87e9cb1604a33082f918c991d6146a90 151960 web optional curl_7.58.0-2ubuntu3.18_arm64.deb cc64edc625eb6bcd42920debe3e53067 1338612 debug optional libcurl3-gnutls-dbgsym_7.58.0-2ubuntu3.18_arm64.ddeb 828903e576247561e8bbd95b000e650c 184216 libs optional libcurl3-gnutls_7.58.0-2ubuntu3.18_arm64.deb 0b7a5f1672693888a4463ec6ed014833 1371600 debug optional libcurl3-nss-dbgsym_7.58.0-2ubuntu3.18_arm64.ddeb 8c2aca8cfbab7f7a4490a7c75c249252 190412 libs optional libcurl3-nss_7.58.0-2ubuntu3.18_arm64.deb d5ea58ae34322c4eb6c176ac4a19ff69 1346364 debug optional libcurl4-dbgsym_7.58.0-2ubuntu3.18_arm64.ddeb 7ebff6251598f9a678889f1a3c6fc577 274580 libdevel optional libcurl4-gnutls-dev_7.58.0-2ubuntu3.18_arm64.deb c03433e1865f9d53c0d2c94a5e768ddc 281112 libdevel optional libcurl4-nss-dev_7.58.0-2ubuntu3.18_arm64.deb e763341cf5580a3e5617e306a45d7320 275524 libdevel optional libcurl4-openssl-dev_7.58.0-2ubuntu3.18_arm64.deb 7c6c2beb13fb54e1ae1f2dd8c69b7d7e 184940 libs optional libcurl4_7.58.0-2ubuntu3.18_arm64.deb Original-Maintainer: Alessandro Ghedini