Ubuntu

“curl” 7.18.0-1ubuntu2.3 source package in Ubuntu

Changelog

curl (7.18.0-1ubuntu2.3) hardy-security; urgency=low

  * SECURITY UPDATE: libcurl unconditional credential delegation during
    GSSAPI authentication vulnerability.
    - debian/patches/0001-Curl_input_negotiate-do-not-delegate-credentials.patch:
      do not delegate credentials when doing GSSAPI authentication
    - CVE-2011-2192
  * SECURITY UPDATE: libcurl zlib automatic decompression callback
    data buffer overflow
    - debian/patches/libcurl-contentencoding.patch: restrict amount of
      callback data sent to an application
    - CVE-2010-0734
  * SECURITY UPDATE: SSL cert hostname checking bypass with NULL byte.
    - debian/patches/series: adjust patch ordering so that
      debian/patches/cert-null-cn gets applied at build time
    - CVE-2009-2417
 -- Steve Beattie <email address hidden>   Wed, 08 Jun 2011 16:51:02 -0700

Upload details

Uploaded by:
Steve Beattie on 2011-06-09
Uploaded to:
Hardy
Original maintainer:
Ubuntu Developers
Component:
main
Architectures:
any
Section:
web
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size MD5 Checksum
curl_7.18.0.orig.tar.gz 2.2 MiB 76ff5a7fa2e00b25ded5302885d4c3e2
curl_7.18.0-1ubuntu2.3.diff.gz 24.6 KiB 63e0f92fddd63372c131f67dd35b151f
curl_7.18.0-1ubuntu2.3.dsc 1.7 KiB f4c2e0ce1bdc60a06f142254fd0c6714

Binary packages built by this source

curl: Get a file from an HTTP, HTTPS or FTP server

 curl is a client to get files from servers using any of the supported
 protocols. The command is designed to work without user interaction
 or any kind of interactivity.
 .
 curl offers a busload of useful tricks like proxy support, user
 authentication, ftp upload, HTTP post, file transfer resume and more.

libcurl3: Multi-protocol file transfer library (OpenSSL)

 libcurl is designed to be a solid, usable, reliable and portable
 multi-protocol file transfer library.
 .
 SSL support is provided by OpenSSL.
 .
 This is the shared version of libcurl.

libcurl3-dbg: libcurl compiled with debug symbols

 This contains the debug symbols of both the OpenSSL and GnuTLS versions of
 libcurl3. It might be useful in debug sessions of software which uses libcurl.

libcurl3-gnutls: Multi-protocol file transfer library (GnuTLS)

 libcurl is designed to be a solid, usable, reliable and portable
 multi-protocol file transfer library.
 .
 SSL support is provided by GnuTLS.
 .
 This is the shared version of libcurl.

libcurl4-gnutls-dev: Development files and documentation for libcurl (GnuTLS)

 These files (ie. includes, static library, manual pages) allow to
 build software which uses libcurl.
 .
 SSL support is provided by GnuTLS.
 .
 HTML and PDF versions of all the manual pages are also provided.

libcurl4-openssl-dev: Development files and documentation for libcurl (OpenSSL)

 These files (ie. includes, static library, manual pages) allow to
 build software which uses libcurl.
 .
 SSL support is provided by OpenSSL.
 .
 HTML and PDF versions of all the manual pages are also provided.