Format: 1.8 Date: Mon, 09 May 2022 14:12:53 -0400 Source: curl Binary: curl libcurl4 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl4-doc Architecture: armhf Version: 7.58.0-2ubuntu3.18 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: curl - command line tool for transferring data with URL syntax libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl4-doc - documentation for libcurl libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.58.0-2ubuntu3.18) bionic-security; urgency=medium . * SECURITY UPDATE: CERTINFO never-ending busy-loop - debian/patches/CVE-2022-27781.patch: return error if seemingly stuck in a cert loop in lib/vtls/nss.c. - CVE-2022-27781 * SECURITY UPDATE: TLS and SSH connection too eager reuse - debian/patches/CVE-2022-27782.patch: check more TLS details for connection reuse in lib/setopt.c, lib/url.c, lib/urldata.h, lib/vtls/gtls.c, lib/vtls/openssl.c, lib/vtls/nss.c, lib/vtls/vtls.c. - CVE-2022-27782 Checksums-Sha1: 040508a80eda23e307857fac639deb82b0b32d15 138788 curl-dbgsym_7.58.0-2ubuntu3.18_armhf.ddeb f126d0a87ca5deccd85ce8bf9d102470bca3bdfd 11687 curl_7.58.0-2ubuntu3.18_armhf.buildinfo 7de0782e998e5755ade4cd185c5da25ee162899d 152332 curl_7.58.0-2ubuntu3.18_armhf.deb 55e2c8d681630993788acf6d3427e28eabae94c5 1278752 libcurl3-gnutls-dbgsym_7.58.0-2ubuntu3.18_armhf.ddeb ff511053d1a77f6bd7927a88e49d73be2af56f62 187316 libcurl3-gnutls_7.58.0-2ubuntu3.18_armhf.deb 6aa593ba517dc1c5e05e1857fe18910eeb72b90d 1309148 libcurl3-nss-dbgsym_7.58.0-2ubuntu3.18_armhf.ddeb 604da9f9fab72c935b640575d82c1a657d32a3bf 192960 libcurl3-nss_7.58.0-2ubuntu3.18_armhf.deb bc0a6be4c3d234b99b9528eea8983e6d5a53ddbc 1289412 libcurl4-dbgsym_7.58.0-2ubuntu3.18_armhf.ddeb 8fe59c87b1aa4492e758e12f9fd0065129432c84 276412 libcurl4-gnutls-dev_7.58.0-2ubuntu3.18_armhf.deb 06702184f94662d97ebdc6de207b410d9c53c867 282440 libcurl4-nss-dev_7.58.0-2ubuntu3.18_armhf.deb 43eed24843fda3b7f8f011f71e605db60989322a 277680 libcurl4-openssl-dev_7.58.0-2ubuntu3.18_armhf.deb 7ec6e7cb55530aa39e35b65f5ba53e848ab1ed53 188648 libcurl4_7.58.0-2ubuntu3.18_armhf.deb Checksums-Sha256: fc34914b95846bb95ca4eb64afa9c47a9a7bd512933cea9533e648084e19fdd5 138788 curl-dbgsym_7.58.0-2ubuntu3.18_armhf.ddeb f7e349ef03c105d9e68e797c14dba06da6a853d74a11440605e6b2e676700023 11687 curl_7.58.0-2ubuntu3.18_armhf.buildinfo f92f94e8c814c1a5591d92ef8a3b5d2b5398357c10b99a08b909073896b66a99 152332 curl_7.58.0-2ubuntu3.18_armhf.deb ed2e5600a0d15f341cc97e10399ca59df500cd7db356daadf0bc022cc60ce79f 1278752 libcurl3-gnutls-dbgsym_7.58.0-2ubuntu3.18_armhf.ddeb c7d9d128d67661ab7243c4291525b82453e961f0803728e04a4ec76c0314e740 187316 libcurl3-gnutls_7.58.0-2ubuntu3.18_armhf.deb a70a32390c21cae1d2b88473a6c267ece16a782cabae7b572852eb7c3e300666 1309148 libcurl3-nss-dbgsym_7.58.0-2ubuntu3.18_armhf.ddeb 4f0d500820f22780e78142331974a877002a5c11eebc29675475bb3a3b42500e 192960 libcurl3-nss_7.58.0-2ubuntu3.18_armhf.deb 245b9a5895939ee6b79fc76695526cefbb0787938d70d75c47238c322fc6510d 1289412 libcurl4-dbgsym_7.58.0-2ubuntu3.18_armhf.ddeb dce1b4e1150fb5213fb7b2bbdd62cd2394e60d7014b589e23eab3fb80fc66cbb 276412 libcurl4-gnutls-dev_7.58.0-2ubuntu3.18_armhf.deb a41c792990ccc57407d39552eafeff4f136847bd296e0bfe24b9efafb29c7224 282440 libcurl4-nss-dev_7.58.0-2ubuntu3.18_armhf.deb ac6738f0d41b61318d41f230f223b7c0777353ccfd19d16e8e72da10f9ce6b73 277680 libcurl4-openssl-dev_7.58.0-2ubuntu3.18_armhf.deb ed12f07c788ae25a73f7e14d47ea8c746fa6124d38d6706ca502819759c5f94c 188648 libcurl4_7.58.0-2ubuntu3.18_armhf.deb Files: c6f0c5f2b228a74ef22793a1b7eb114d 138788 debug optional curl-dbgsym_7.58.0-2ubuntu3.18_armhf.ddeb dafe97144d74ca3a7a27f47e1e80b783 11687 web optional curl_7.58.0-2ubuntu3.18_armhf.buildinfo 458d07df2e8090bf00fa1d63736e9295 152332 web optional curl_7.58.0-2ubuntu3.18_armhf.deb 339bfe18ac7f2e2a1822037dffaf011a 1278752 debug optional libcurl3-gnutls-dbgsym_7.58.0-2ubuntu3.18_armhf.ddeb 029e40f6c6c57afc793fbaec2300f627 187316 libs optional libcurl3-gnutls_7.58.0-2ubuntu3.18_armhf.deb e2b2c09cd0f09170c2440624ddd72b44 1309148 debug optional libcurl3-nss-dbgsym_7.58.0-2ubuntu3.18_armhf.ddeb 5a41ee9d60ff20ca83d8f3a4df640e70 192960 libs optional libcurl3-nss_7.58.0-2ubuntu3.18_armhf.deb 73b6cb41f0b7601db75dbf0292cd19da 1289412 debug optional libcurl4-dbgsym_7.58.0-2ubuntu3.18_armhf.ddeb 11eca60135cf26e6bdc510087c081c30 276412 libdevel optional libcurl4-gnutls-dev_7.58.0-2ubuntu3.18_armhf.deb 80bb412f69c9d596188e9db70629ea5c 282440 libdevel optional libcurl4-nss-dev_7.58.0-2ubuntu3.18_armhf.deb 664ef7f812cca5f9dd50513f4e2c41a4 277680 libdevel optional libcurl4-openssl-dev_7.58.0-2ubuntu3.18_armhf.deb b6318eeabaee9554dbeea771b4e6bfa5 188648 libs optional libcurl4_7.58.0-2ubuntu3.18_armhf.deb Original-Maintainer: Alessandro Ghedini