curl 7.37.1-1ubuntu2 source package in Ubuntu

Changelog

curl (7.37.1-1ubuntu2) utopic; urgency=medium

  * SECURITY UPDATE: incorrect cookie handling via partial literal IP
    addresses
    - debian/patches/CVE-2014-3613.patch: only use full host matches for
      hosts used as IP address in lib/cookie.c, added tests to
      tests/data/test1105, tests/data/test31, tests/data/test8.
    - CVE-2014-3613
  * SECURITY UPDATE: incorrect cookie handling for TLDs
    - debian/patches/CVE-2014-3620.patch: reject incoming cookies set for
      TLDs in lib/cookie.c, added test to tests/data/test61.
    - CVE-2014-3620
 -- Marc Deslauriers <email address hidden>   Thu, 11 Sep 2014 08:15:47 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Utopic
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
web
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
curl_7.37.1.orig.tar.gz 3.9 MiB a32492a38c10a097344892f5fd2041e54698cb909696852311b1161e4aa979f3
curl_7.37.1-1ubuntu2.debian.tar.xz 28.7 KiB d2d0207eff3f11dbb87e701304c6bc04f9f99fbc139d09a83db94597dd0e33a4
curl_7.37.1-1ubuntu2.dsc 2.8 KiB bc1dd03616252dca2480757d0fc35a78ed0d6bc503797f5f64ec2925cbf852d5

View changes file

Binary packages built by this source

curl: No summary available for curl in ubuntu utopic.

No description available for curl in ubuntu utopic.

curl-udeb: No summary available for curl-udeb in ubuntu utopic.

No description available for curl-udeb in ubuntu utopic.

libcurl3: No summary available for libcurl3 in ubuntu utopic.

No description available for libcurl3 in ubuntu utopic.

libcurl3-dbg: No summary available for libcurl3-dbg in ubuntu utopic.

No description available for libcurl3-dbg in ubuntu utopic.

libcurl3-gnutls: No summary available for libcurl3-gnutls in ubuntu utopic.

No description available for libcurl3-gnutls in ubuntu utopic.

libcurl3-nss: No summary available for libcurl3-nss in ubuntu utopic.

No description available for libcurl3-nss in ubuntu utopic.

libcurl3-udeb: No summary available for libcurl3-udeb in ubuntu utopic.

No description available for libcurl3-udeb in ubuntu utopic.

libcurl4-doc: No summary available for libcurl4-doc in ubuntu utopic.

No description available for libcurl4-doc in ubuntu utopic.

libcurl4-gnutls-dev: No summary available for libcurl4-gnutls-dev in ubuntu utopic.

No description available for libcurl4-gnutls-dev in ubuntu utopic.

libcurl4-nss-dev: No summary available for libcurl4-nss-dev in ubuntu utopic.

No description available for libcurl4-nss-dev in ubuntu utopic.

libcurl4-openssl-dev: No summary available for libcurl4-openssl-dev in ubuntu utopic.

No description available for libcurl4-openssl-dev in ubuntu utopic.