curl 7.18.0-1ubuntu2.3 source package in Ubuntu

Changelog

curl (7.18.0-1ubuntu2.3) hardy-security; urgency=low

  * SECURITY UPDATE: libcurl unconditional credential delegation during
    GSSAPI authentication vulnerability.
    - debian/patches/0001-Curl_input_negotiate-do-not-delegate-credentials.patch:
      do not delegate credentials when doing GSSAPI authentication
    - CVE-2011-2192
  * SECURITY UPDATE: libcurl zlib automatic decompression callback
    data buffer overflow
    - debian/patches/libcurl-contentencoding.patch: restrict amount of
      callback data sent to an application
    - CVE-2010-0734
  * SECURITY UPDATE: SSL cert hostname checking bypass with NULL byte.
    - debian/patches/series: adjust patch ordering so that
      debian/patches/cert-null-cn gets applied at build time
    - CVE-2009-2417
 -- Steve Beattie <email address hidden>   Wed, 08 Jun 2011 16:51:02 -0700

Upload details

Uploaded by:
Steve Beattie on 2011-06-09
Uploaded to:
Hardy
Original maintainer:
Ubuntu Developers
Component:
main
Architectures:
any
Section:
web
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size MD5 Checksum
curl_7.18.0.orig.tar.gz 2.2 MiB 76ff5a7fa2e00b25ded5302885d4c3e2
curl_7.18.0-1ubuntu2.3.diff.gz 24.6 KiB 63e0f92fddd63372c131f67dd35b151f
curl_7.18.0-1ubuntu2.3.dsc 1.7 KiB f4c2e0ce1bdc60a06f142254fd0c6714

View changes file

Binary packages built by this source

curl: No summary available for curl in ubuntu hardy.

No description available for curl in ubuntu hardy.

libcurl3: No summary available for libcurl3 in ubuntu hardy.

No description available for libcurl3 in ubuntu hardy.

libcurl3-dbg: No summary available for libcurl3-dbg in ubuntu hardy.

No description available for libcurl3-dbg in ubuntu hardy.

libcurl3-gnutls: No summary available for libcurl3-gnutls in ubuntu hardy.

No description available for libcurl3-gnutls in ubuntu hardy.

libcurl4-gnutls-dev: No summary available for libcurl4-gnutls-dev in ubuntu hardy.

No description available for libcurl4-gnutls-dev in ubuntu hardy.

libcurl4-openssl-dev: No summary available for libcurl4-openssl-dev in ubuntu hardy.

No description available for libcurl4-openssl-dev in ubuntu hardy.