Format: 1.8 Date: Mon, 09 May 2022 14:12:53 -0400 Source: curl Binary: curl libcurl4 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl4-doc Architecture: ppc64el Version: 7.58.0-2ubuntu3.18 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: curl - command line tool for transferring data with URL syntax libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl4-doc - documentation for libcurl libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.58.0-2ubuntu3.18) bionic-security; urgency=medium . * SECURITY UPDATE: CERTINFO never-ending busy-loop - debian/patches/CVE-2022-27781.patch: return error if seemingly stuck in a cert loop in lib/vtls/nss.c. - CVE-2022-27781 * SECURITY UPDATE: TLS and SSH connection too eager reuse - debian/patches/CVE-2022-27782.patch: check more TLS details for connection reuse in lib/setopt.c, lib/url.c, lib/urldata.h, lib/vtls/gtls.c, lib/vtls/openssl.c, lib/vtls/nss.c, lib/vtls/vtls.c. - CVE-2022-27782 Checksums-Sha1: 0d3548a92226a9d23ef6140f81a1ac3acc525ee9 147276 curl-dbgsym_7.58.0-2ubuntu3.18_ppc64el.ddeb 7cf9ec0c6f40da80683b11e924e99908f39dcb01 11827 curl_7.58.0-2ubuntu3.18_ppc64el.buildinfo 89e72abb9fc0f6ecef2cc58660ff11c683a993a6 158340 curl_7.58.0-2ubuntu3.18_ppc64el.deb 70c533269d8b8f7a220b44c9251004de64aa7edb 1414344 libcurl3-gnutls-dbgsym_7.58.0-2ubuntu3.18_ppc64el.ddeb bbe1632673a607ddc489092e282bcce70527fa98 224248 libcurl3-gnutls_7.58.0-2ubuntu3.18_ppc64el.deb 03335727c9322313f8d95732b2be80150cec12e0 1449988 libcurl3-nss-dbgsym_7.58.0-2ubuntu3.18_ppc64el.ddeb 51c8a2d8d6b8779dd7fec1697a3604121f465fea 231876 libcurl3-nss_7.58.0-2ubuntu3.18_ppc64el.deb da6c03a0e2dbbfeb53c607d907ffe87d596e8c0b 1418576 libcurl4-dbgsym_7.58.0-2ubuntu3.18_ppc64el.ddeb d87514c36e01bdea132be80d8a23d1cb36f30268 322668 libcurl4-gnutls-dev_7.58.0-2ubuntu3.18_ppc64el.deb 78c7736047851ca12785ba744e3cbd3edb6ad10c 330864 libcurl4-nss-dev_7.58.0-2ubuntu3.18_ppc64el.deb 344d3fab152e14cf4a46b47c4199c1c28392ce5b 319836 libcurl4-openssl-dev_7.58.0-2ubuntu3.18_ppc64el.deb b65c943f26b12e388161a303bb96424878f2fcf5 223612 libcurl4_7.58.0-2ubuntu3.18_ppc64el.deb Checksums-Sha256: de6b086725870c95ec16d493168f5b626e72f623db93c526441a9beb4350ef67 147276 curl-dbgsym_7.58.0-2ubuntu3.18_ppc64el.ddeb 562e507378cde078a62d4500ca9f50ed5b2c5fc4b5fc5e8756870f8c27e98ac8 11827 curl_7.58.0-2ubuntu3.18_ppc64el.buildinfo c86f2cc4a015afe0b1ac20a4460d37a6b56aa8117d3f0b5ba212581d5f01ee1c 158340 curl_7.58.0-2ubuntu3.18_ppc64el.deb b016bfcd9c4933053534bc3782866f621f0be8b4586d810e6b5f20540a481037 1414344 libcurl3-gnutls-dbgsym_7.58.0-2ubuntu3.18_ppc64el.ddeb 0287266e0dc294a91907d5e728381ac5b9731eb53e5fde53d552c58924d4c836 224248 libcurl3-gnutls_7.58.0-2ubuntu3.18_ppc64el.deb 35e3199654e266a7a53b7cfdac1ed6a75b3b6a7508fd6af8879245cbaa47fac1 1449988 libcurl3-nss-dbgsym_7.58.0-2ubuntu3.18_ppc64el.ddeb 945432e1caed74f227dde2b65db6d9304151a1d518482f57995ac8603880c8cb 231876 libcurl3-nss_7.58.0-2ubuntu3.18_ppc64el.deb 7e3ebf70c6608f61db80cba133ee1e8c11396f13b6d008cc4b3efc96e38f552c 1418576 libcurl4-dbgsym_7.58.0-2ubuntu3.18_ppc64el.ddeb 6316fbcaaaa1efd7c238e26e52d30100f1e0831d88d5bdfdec5a26977cecedc4 322668 libcurl4-gnutls-dev_7.58.0-2ubuntu3.18_ppc64el.deb c40480a19103b3b1fca926bcab864f87559ffbe133eaaa8782c4281461a82a3d 330864 libcurl4-nss-dev_7.58.0-2ubuntu3.18_ppc64el.deb 32bc4384a00a77f9d02fc92b14554a4f876f32eff4e0b90171587c11cf25f9ae 319836 libcurl4-openssl-dev_7.58.0-2ubuntu3.18_ppc64el.deb 63dac3def3e96c5ca02ce7d56b00590bb5b82a2021fa44a8cb0dc4dec01fbb02 223612 libcurl4_7.58.0-2ubuntu3.18_ppc64el.deb Files: c72b77a9f47177805f8c35d70c8ad4c4 147276 debug optional curl-dbgsym_7.58.0-2ubuntu3.18_ppc64el.ddeb 6df24dd259cd6194f9388b8e0f3faa97 11827 web optional curl_7.58.0-2ubuntu3.18_ppc64el.buildinfo f3dd4e8a3acd1386ef138d8cb0d977db 158340 web optional curl_7.58.0-2ubuntu3.18_ppc64el.deb fdddef01fb509e16d2027b82c5172c60 1414344 debug optional libcurl3-gnutls-dbgsym_7.58.0-2ubuntu3.18_ppc64el.ddeb b1bcfde007c35e481e8c4b6a9a163767 224248 libs optional libcurl3-gnutls_7.58.0-2ubuntu3.18_ppc64el.deb f6ee048d37b75bc674afcc7820ef3d72 1449988 debug optional libcurl3-nss-dbgsym_7.58.0-2ubuntu3.18_ppc64el.ddeb e1400c24432609fb454caba855bafcb1 231876 libs optional libcurl3-nss_7.58.0-2ubuntu3.18_ppc64el.deb 2a77908f95d301ccd17d68be844e64e1 1418576 debug optional libcurl4-dbgsym_7.58.0-2ubuntu3.18_ppc64el.ddeb e408f749011f86bf6a7d55a04672dea9 322668 libdevel optional libcurl4-gnutls-dev_7.58.0-2ubuntu3.18_ppc64el.deb d04e8b9d828933623849f34799cf2068 330864 libdevel optional libcurl4-nss-dev_7.58.0-2ubuntu3.18_ppc64el.deb f3144edb8952a19f3e526385907ccaa3 319836 libdevel optional libcurl4-openssl-dev_7.58.0-2ubuntu3.18_ppc64el.deb c468eabcf4769995875fb017b685b077 223612 libs optional libcurl4_7.58.0-2ubuntu3.18_ppc64el.deb Original-Maintainer: Alessandro Ghedini