Ubuntu
curl package

curl 7.18.0-1ubuntu2.3 source package in Ubuntu

Changelog

curl (7.18.0-1ubuntu2.3) hardy-security; urgency=low

  * SECURITY UPDATE: libcurl unconditional credential delegation during
    GSSAPI authentication vulnerability.
    - debian/patches/0001-Curl_input_negotiate-do-not-delegate-credentials.patch:
      do not delegate credentials when doing GSSAPI authentication
    - CVE-2011-2192
  * SECURITY UPDATE: libcurl zlib automatic decompression callback
    data buffer overflow
    - debian/patches/libcurl-contentencoding.patch: restrict amount of
      callback data sent to an application
    - CVE-2010-0734
  * SECURITY UPDATE: SSL cert hostname checking bypass with NULL byte.
    - debian/patches/series: adjust patch ordering so that
      debian/patches/cert-null-cn gets applied at build time
    - CVE-2009-2417
 -- Steve Beattie <email address hidden>   Wed, 08 Jun 2011 16:51:02 -0700

Upload details

Uploaded by:
Steve Beattie
Uploaded to:
Hardy
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
web
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
curl_7.18.0.orig.tar.gz 2.2 MiB 0026f6c054c3c7f31f7fcc468070002c6f6db88a0c7f6059c905d57c637956f3
curl_7.18.0-1ubuntu2.3.diff.gz 24.6 KiB f8fb30b67cd92e673883d6af78ebf77dd6bf02558d9f999c7b6427db6c072f3b
curl_7.18.0-1ubuntu2.3.dsc 1.7 KiB b9a698f6cfe1b6e48c114c9d32f7c3275337ff97a20e2b28a246974dbce87ff9

View changes file

Binary packages built by this source

curl: No summary available for curl in ubuntu hardy.

No description available for curl in ubuntu hardy.

libcurl3: No summary available for libcurl3 in ubuntu hardy.

No description available for libcurl3 in ubuntu hardy.

libcurl3-dbg: No summary available for libcurl3-dbg in ubuntu hardy.

No description available for libcurl3-dbg in ubuntu hardy.

libcurl3-gnutls: No summary available for libcurl3-gnutls in ubuntu hardy.

No description available for libcurl3-gnutls in ubuntu hardy.

libcurl4-gnutls-dev: No summary available for libcurl4-gnutls-dev in ubuntu hardy.

No description available for libcurl4-gnutls-dev in ubuntu hardy.

libcurl4-openssl-dev: No summary available for libcurl4-openssl-dev in ubuntu hardy.

No description available for libcurl4-openssl-dev in ubuntu hardy.