Publishing details

• Published on 2021-03-31
• Copied from ubuntu xenial in Private PPA for Ubuntu Security Team by Marc Deslauriers

Changelog

curl (7.47.0-1ubuntu2.19) xenial-security; urgency=medium

  * SECURITY UPDATE: data leak via referer header field
    - debian/patches/urlapi.patch: backport url api support in
      include/curl/Makefile.am, include/curl/curl.h, include/curl/urlapi.h,
      lib/Makefile.inc, lib/urlapi-int.h, lib/urlapi.c,
      lib/curl_setup_once.h, lib/url.c, lib/url.h, lib/escape.c,
      lib/escape.h, docs/libcurl/symbols-in-versions.
    - debian/libcurl*.symbols: added new symbols.
    - debian/patches/CVE-2021-22876.patch: strip credentials from the
      auto-referer header field in lib/transfer.c.
    - CVE-2021-22876

 -- Marc Deslauriers <email address hidden>  Tue, 23 Mar 2021 09:16:53 -0400

Builds

• amd64
• arm64
• armhf
• i386
• powerpc
• ppc64el
• s390x

Built packages

• curl command line tool for transferring data with URL syntax

• curl-dbgsym debug symbols for package curl

• libcurl3 easy-to-use client-side URL transfer library (OpenSSL flavour)

• libcurl3-dbg debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours)

• libcurl3-dbgsym debug symbols for package libcurl3

• libcurl3-gnutls easy-to-use client-side URL transfer library (GnuTLS flavour)

• libcurl3-gnutls-dbgsym debug symbols for package libcurl3-gnutls

• libcurl3-nss easy-to-use client-side URL transfer library (NSS flavour)

• libcurl3-nss-dbgsym debug symbols for package libcurl3-nss

• libcurl4-doc documentation for libcurl

• libcurl4-gnutls-dev development files and documentation for libcurl (GnuTLS flavour)

• libcurl4-gnutls-dev-dbgsym debug symbols for package libcurl4-gnutls-dev

• libcurl4-nss-dev development files and documentation for libcurl (NSS flavour)

• libcurl4-nss-dev-dbgsym debug symbols for package libcurl4-nss-dev

• libcurl4-openssl-dev development files and documentation for libcurl (OpenSSL flavour)

• libcurl4-openssl-dev-dbgsym debug symbols for package libcurl4-openssl-dev

Package files

• curl-dbgsym_7.47.0-1ubuntu2.19_amd64.ddeb (1.1 KiB)
• curl-dbgsym_7.47.0-1ubuntu2.19_arm64.ddeb (1.1 KiB)
• curl-dbgsym_7.47.0-1ubuntu2.19_armhf.ddeb (1.1 KiB)
• curl-dbgsym_7.47.0-1ubuntu2.19_i386.ddeb (1.1 KiB)
• curl-dbgsym_7.47.0-1ubuntu2.19_powerpc.ddeb (1.1 KiB)
• curl-dbgsym_7.47.0-1ubuntu2.19_ppc64el.ddeb (1.1 KiB)
• curl-dbgsym_7.47.0-1ubuntu2.19_s390x.ddeb (1.1 KiB)
• curl_7.47.0-1ubuntu2.19.debian.tar.xz (72.1 KiB)
• curl_7.47.0-1ubuntu2.19.dsc (2.7 KiB)
• curl_7.47.0-1ubuntu2.19_amd64.deb (135.3 KiB)
• curl_7.47.0-1ubuntu2.19_arm64.deb (129.8 KiB)
• curl_7.47.0-1ubuntu2.19_armhf.deb (131.7 KiB)
• curl_7.47.0-1ubuntu2.19_i386.deb (138.4 KiB)
• curl_7.47.0-1ubuntu2.19_powerpc.deb (131.9 KiB)
• curl_7.47.0-1ubuntu2.19_ppc64el.deb (132.9 KiB)
• curl_7.47.0-1ubuntu2.19_s390x.deb (133.7 KiB)
• curl_7.47.0.orig.tar.gz (4.4 MiB)
• libcurl3-dbg_7.47.0-1ubuntu2.19_amd64.deb (3.4 MiB)
• libcurl3-dbg_7.47.0-1ubuntu2.19_arm64.deb (3.5 MiB)
• libcurl3-dbg_7.47.0-1ubuntu2.19_armhf.deb (3.3 MiB)
• libcurl3-dbg_7.47.0-1ubuntu2.19_i386.deb (3.1 MiB)
• libcurl3-dbg_7.47.0-1ubuntu2.19_powerpc.deb (3.5 MiB)
• libcurl3-dbg_7.47.0-1ubuntu2.19_ppc64el.deb (3.6 MiB)
• libcurl3-dbg_7.47.0-1ubuntu2.19_s390x.deb (3.5 MiB)
• libcurl3-dbgsym_7.47.0-1ubuntu2.19_amd64.ddeb (1.2 KiB)
• libcurl3-dbgsym_7.47.0-1ubuntu2.19_arm64.ddeb (1.2 KiB)
• libcurl3-dbgsym_7.47.0-1ubuntu2.19_armhf.ddeb (1.2 KiB)
• libcurl3-dbgsym_7.47.0-1ubuntu2.19_i386.ddeb (1.2 KiB)
• libcurl3-dbgsym_7.47.0-1ubuntu2.19_powerpc.ddeb (1.2 KiB)
• libcurl3-dbgsym_7.47.0-1ubuntu2.19_ppc64el.ddeb (1.2 KiB)
• libcurl3-dbgsym_7.47.0-1ubuntu2.19_s390x.ddeb (1.2 KiB)
• libcurl3-gnutls-dbgsym_7.47.0-1ubuntu2.19_amd64.ddeb (1.2 KiB)
• libcurl3-gnutls-dbgsym_7.47.0-1ubuntu2.19_arm64.ddeb (1.2 KiB)
• libcurl3-gnutls-dbgsym_7.47.0-1ubuntu2.19_armhf.ddeb (1.2 KiB)
• libcurl3-gnutls-dbgsym_7.47.0-1ubuntu2.19_i386.ddeb (1.2 KiB)
• libcurl3-gnutls-dbgsym_7.47.0-1ubuntu2.19_powerpc.ddeb (1.2 KiB)
• libcurl3-gnutls-dbgsym_7.47.0-1ubuntu2.19_ppc64el.ddeb (1.2 KiB)
• libcurl3-gnutls-dbgsym_7.47.0-1ubuntu2.19_s390x.ddeb (1.2 KiB)
• libcurl3-gnutls_7.47.0-1ubuntu2.19_amd64.deb (185.0 KiB)
• libcurl3-gnutls_7.47.0-1ubuntu2.19_arm64.deb (152.4 KiB)
• libcurl3-gnutls_7.47.0-1ubuntu2.19_armhf.deb (160.0 KiB)
• libcurl3-gnutls_7.47.0-1ubuntu2.19_i386.deb (206.0 KiB)
• libcurl3-gnutls_7.47.0-1ubuntu2.19_powerpc.deb (167.7 KiB)
• libcurl3-gnutls_7.47.0-1ubuntu2.19_ppc64el.deb (177.1 KiB)
• libcurl3-gnutls_7.47.0-1ubuntu2.19_s390x.deb (174.6 KiB)
• libcurl3-nss-dbgsym_7.47.0-1ubuntu2.19_amd64.ddeb (1.2 KiB)
• libcurl3-nss-dbgsym_7.47.0-1ubuntu2.19_arm64.ddeb (1.2 KiB)
• libcurl3-nss-dbgsym_7.47.0-1ubuntu2.19_armhf.ddeb (1.2 KiB)
• libcurl3-nss-dbgsym_7.47.0-1ubuntu2.19_i386.ddeb (1.2 KiB)
• libcurl3-nss-dbgsym_7.47.0-1ubuntu2.19_powerpc.ddeb (1.2 KiB)
• libcurl3-nss-dbgsym_7.47.0-1ubuntu2.19_ppc64el.ddeb (1.2 KiB)
• libcurl3-nss-dbgsym_7.47.0-1ubuntu2.19_s390x.ddeb (1.2 KiB)
• libcurl3-nss_7.47.0-1ubuntu2.19_amd64.deb (191.3 KiB)
• libcurl3-nss_7.47.0-1ubuntu2.19_arm64.deb (158.2 KiB)
• libcurl3-nss_7.47.0-1ubuntu2.19_armhf.deb (165.8 KiB)
• libcurl3-nss_7.47.0-1ubuntu2.19_i386.deb (212.0 KiB)
• libcurl3-nss_7.47.0-1ubuntu2.19_powerpc.deb (174.0 KiB)
• libcurl3-nss_7.47.0-1ubuntu2.19_ppc64el.deb (182.4 KiB)
• libcurl3-nss_7.47.0-1ubuntu2.19_s390x.deb (180.5 KiB)
• libcurl3_7.47.0-1ubuntu2.19_amd64.deb (187.1 KiB)
• libcurl3_7.47.0-1ubuntu2.19_arm64.deb (154.6 KiB)
• libcurl3_7.47.0-1ubuntu2.19_armhf.deb (162.6 KiB)
• libcurl3_7.47.0-1ubuntu2.19_i386.deb (208.8 KiB)
• libcurl3_7.47.0-1ubuntu2.19_powerpc.deb (170.0 KiB)
• libcurl3_7.47.0-1ubuntu2.19_ppc64el.deb (177.3 KiB)
• libcurl3_7.47.0-1ubuntu2.19_s390x.deb (176.4 KiB)
• libcurl4-doc_7.47.0-1ubuntu2.19_all.deb (1.1 MiB)
• libcurl4-gnutls-dev-dbgsym_7.47.0-1ubuntu2.19_amd64.ddeb (1.3 KiB)
• libcurl4-gnutls-dev-dbgsym_7.47.0-1ubuntu2.19_arm64.ddeb (1.3 KiB)
• libcurl4-gnutls-dev-dbgsym_7.47.0-1ubuntu2.19_armhf.ddeb (1.3 KiB)
• libcurl4-gnutls-dev-dbgsym_7.47.0-1ubuntu2.19_i386.ddeb (1.3 KiB)
• libcurl4-gnutls-dev-dbgsym_7.47.0-1ubuntu2.19_powerpc.ddeb (1.3 KiB)
• libcurl4-gnutls-dev-dbgsym_7.47.0-1ubuntu2.19_ppc64el.ddeb (1.3 KiB)
• libcurl4-gnutls-dev-dbgsym_7.47.0-1ubuntu2.19_s390x.ddeb (1.3 KiB)
• libcurl4-gnutls-dev_7.47.0-1ubuntu2.19_amd64.deb (261.5 KiB)
• libcurl4-gnutls-dev_7.47.0-1ubuntu2.19_arm64.deb (234.9 KiB)
• libcurl4-gnutls-dev_7.47.0-1ubuntu2.19_armhf.deb (239.7 KiB)
• libcurl4-gnutls-dev_7.47.0-1ubuntu2.19_i386.deb (290.4 KiB)
• libcurl4-gnutls-dev_7.47.0-1ubuntu2.19_powerpc.deb (234.4 KiB)
• libcurl4-gnutls-dev_7.47.0-1ubuntu2.19_ppc64el.deb (262.1 KiB)
• libcurl4-gnutls-dev_7.47.0-1ubuntu2.19_s390x.deb (253.7 KiB)
• libcurl4-nss-dev-dbgsym_7.47.0-1ubuntu2.19_amd64.ddeb (1.3 KiB)
• libcurl4-nss-dev-dbgsym_7.47.0-1ubuntu2.19_arm64.ddeb (1.3 KiB)
• libcurl4-nss-dev-dbgsym_7.47.0-1ubuntu2.19_armhf.ddeb (1.3 KiB)
• libcurl4-nss-dev-dbgsym_7.47.0-1ubuntu2.19_i386.ddeb (1.3 KiB)
• libcurl4-nss-dev-dbgsym_7.47.0-1ubuntu2.19_powerpc.ddeb (1.3 KiB)
• libcurl4-nss-dev-dbgsym_7.47.0-1ubuntu2.19_ppc64el.ddeb (1.3 KiB)
• libcurl4-nss-dev-dbgsym_7.47.0-1ubuntu2.19_s390x.ddeb (1.3 KiB)
• libcurl4-nss-dev_7.47.0-1ubuntu2.19_amd64.deb (267.9 KiB)
• libcurl4-nss-dev_7.47.0-1ubuntu2.19_arm64.deb (241.0 KiB)
• libcurl4-nss-dev_7.47.0-1ubuntu2.19_armhf.deb (245.8 KiB)
• libcurl4-nss-dev_7.47.0-1ubuntu2.19_i386.deb (296.8 KiB)
• libcurl4-nss-dev_7.47.0-1ubuntu2.19_powerpc.deb (240.4 KiB)
• libcurl4-nss-dev_7.47.0-1ubuntu2.19_ppc64el.deb (268.1 KiB)
• libcurl4-nss-dev_7.47.0-1ubuntu2.19_s390x.deb (260.8 KiB)
• libcurl4-openssl-dev-dbgsym_7.47.0-1ubuntu2.19_amd64.ddeb (1.3 KiB)
• libcurl4-openssl-dev-dbgsym_7.47.0-1ubuntu2.19_arm64.ddeb (1.3 KiB)
• libcurl4-openssl-dev-dbgsym_7.47.0-1ubuntu2.19_armhf.ddeb (1.3 KiB)
• libcurl4-openssl-dev-dbgsym_7.47.0-1ubuntu2.19_i386.ddeb (1.3 KiB)
• libcurl4-openssl-dev-dbgsym_7.47.0-1ubuntu2.19_powerpc.ddeb (1.3 KiB)
• libcurl4-openssl-dev-dbgsym_7.47.0-1ubuntu2.19_ppc64el.ddeb (1.3 KiB)
• libcurl4-openssl-dev-dbgsym_7.47.0-1ubuntu2.19_s390x.ddeb (1.3 KiB)
• libcurl4-openssl-dev_7.47.0-1ubuntu2.19_amd64.deb (263.6 KiB)
• libcurl4-openssl-dev_7.47.0-1ubuntu2.19_arm64.deb (236.6 KiB)
• libcurl4-openssl-dev_7.47.0-1ubuntu2.19_armhf.deb (241.9 KiB)
• libcurl4-openssl-dev_7.47.0-1ubuntu2.19_i386.deb (293.2 KiB)
• libcurl4-openssl-dev_7.47.0-1ubuntu2.19_powerpc.deb (235.8 KiB)
• libcurl4-openssl-dev_7.47.0-1ubuntu2.19_ppc64el.deb (260.7 KiB)
• libcurl4-openssl-dev_7.47.0-1ubuntu2.19_s390x.deb (255.5 KiB)