Format: 1.8 Date: Thu, 11 Sep 2014 08:15:47 -0400 Source: curl Binary: curl curl-udeb libcurl3 libcurl3-udeb libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc Architecture: amd64 Version: 7.37.1-1ubuntu2 Distribution: utopic-proposed Urgency: medium Maintainer: Ubuntu/amd64 Build Daemon Changed-By: Marc Deslauriers Description: curl - command line tool for transferring data with URL syntax curl-udeb - Get a file from an HTTP, HTTPS or FTP server (udeb) libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl3-udeb - Multi-protocol file transfer library (OpenSSL) (udeb) libcurl4-doc - documentation for libcurl libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.37.1-1ubuntu2) utopic; urgency=medium . * SECURITY UPDATE: incorrect cookie handling via partial literal IP addresses - debian/patches/CVE-2014-3613.patch: only use full host matches for hosts used as IP address in lib/cookie.c, added tests to tests/data/test1105, tests/data/test31, tests/data/test8. - CVE-2014-3613 * SECURITY UPDATE: incorrect cookie handling for TLDs - debian/patches/CVE-2014-3620.patch: reject incoming cookies set for TLDs in lib/cookie.c, added test to tests/data/test61. - CVE-2014-3620 Checksums-Sha1: 5fd4e1f7a4217205c9f0ffbb87f4e9b7358ad00a 125838 curl_7.37.1-1ubuntu2_amd64.deb bd06b0e378ecd0f2c97c9891a107106e66278abe 1002 curl-udeb_7.37.1-1ubuntu2_amd64.udeb f454c51c695f7fe4a3e0d1ed713e9d10b8d5d8f6 178042 libcurl3_7.37.1-1ubuntu2_amd64.deb 7c6f42a3f652db4d94f94a6551b1559003ff5b2e 886 libcurl3-udeb_7.37.1-1ubuntu2_amd64.udeb d097a25d76b089c5ee77340cddcf489f4b33030f 170016 libcurl3-gnutls_7.37.1-1ubuntu2_amd64.deb 5c2536911b8afef97395ed88cb887b07a8cee7c6 181304 libcurl3-nss_7.37.1-1ubuntu2_amd64.deb c9b1fb8822e5fb276dc409b65646c9f2a8273b75 251260 libcurl4-openssl-dev_7.37.1-1ubuntu2_amd64.deb f69458b590bc0ce0501dc8762a21d0ce2cc85960 242648 libcurl4-gnutls-dev_7.37.1-1ubuntu2_amd64.deb f05e93d92ef32292992639214568d428e8a448a8 255092 libcurl4-nss-dev_7.37.1-1ubuntu2_amd64.deb 05af5e9645e6172759f9a267efa7834231804e57 3060614 libcurl3-dbg_7.37.1-1ubuntu2_amd64.deb Checksums-Sha256: 3ef60297b0bc15fd1b5cc2aaffa5f43145daa244e19717aaa5a6dcb06bc9f273 125838 curl_7.37.1-1ubuntu2_amd64.deb 767d647c7fd5065cffc2646e46f6bc2c590fcd17ce87e9e25b8d3488e9f29cc2 1002 curl-udeb_7.37.1-1ubuntu2_amd64.udeb 0fd62dfe00360572ac6a7a5ee8a346ed0dfe9802e6960b79021dfb0b228c77db 178042 libcurl3_7.37.1-1ubuntu2_amd64.deb 458cfd8c4688b69872eca27f774bff4cfb6fa36417c33b971a1082ae83821bfc 886 libcurl3-udeb_7.37.1-1ubuntu2_amd64.udeb 558d2f02d19fafbdf75356c0795343d6193b05c7763bc5be2036834fe90ec547 170016 libcurl3-gnutls_7.37.1-1ubuntu2_amd64.deb bd7031f91b40dbdaca1a80d3bcfe38df684aa2cfa9b4360e7337fe0ca1a3807b 181304 libcurl3-nss_7.37.1-1ubuntu2_amd64.deb 80c09687c801acb35c8f4071db6a6360ead6259889d2dc4341dcbe5f29f3ee25 251260 libcurl4-openssl-dev_7.37.1-1ubuntu2_amd64.deb 60f23fce784a0590cc69b4f3d717ec77af654c23afcd43519b69bbbf75e2538b 242648 libcurl4-gnutls-dev_7.37.1-1ubuntu2_amd64.deb 00e3747c65afc316bd009a55a3231b0aa28921b8ae6fae68865dd23839cda36c 255092 libcurl4-nss-dev_7.37.1-1ubuntu2_amd64.deb f6400e8f3f4e87b1ea7e344aa9493b2385f422d68dad62ce4e82a8b918eb5f29 3060614 libcurl3-dbg_7.37.1-1ubuntu2_amd64.deb Files: 204597676259fafe05a9965e1bff850b 125838 web optional curl_7.37.1-1ubuntu2_amd64.deb 5b3ecc40367fc3013c773a02560d993a 1002 debian-installer optional curl-udeb_7.37.1-1ubuntu2_amd64.udeb 18f1da4ad65cf814f47073adf609fc80 178042 libs optional libcurl3_7.37.1-1ubuntu2_amd64.deb 1ab1ddda93fa69f95753dc9a2bfc5eee 886 debian-installer optional libcurl3-udeb_7.37.1-1ubuntu2_amd64.udeb 601898bc27ab19df71535d0735468638 170016 libs optional libcurl3-gnutls_7.37.1-1ubuntu2_amd64.deb 8994b953351de7b4fa7a026f78e174e8 181304 libs optional libcurl3-nss_7.37.1-1ubuntu2_amd64.deb 4ac0dc3de1e65d0eab08c5988d125137 251260 libdevel optional libcurl4-openssl-dev_7.37.1-1ubuntu2_amd64.deb 7a1ee26e6d3aee6e8f8f29c29b4d4822 242648 libdevel optional libcurl4-gnutls-dev_7.37.1-1ubuntu2_amd64.deb ecc3a1065f1e7af48117e683d922905d 255092 libdevel optional libcurl4-nss-dev_7.37.1-1ubuntu2_amd64.deb 80c25cd4dc3b40f96cfcff75a927f3a0 3060614 debug extra libcurl3-dbg_7.37.1-1ubuntu2_amd64.deb Original-Maintainer: Alessandro Ghedini Package-Type: udeb