Format: 1.8 Date: Thu, 11 Sep 2014 08:15:47 -0400 Source: curl Binary: curl curl-udeb libcurl3 libcurl3-udeb libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc Architecture: armhf Version: 7.37.1-1ubuntu2 Distribution: utopic-proposed Urgency: medium Maintainer: Ubuntu/armhf Build Daemon Changed-By: Marc Deslauriers Description: curl - command line tool for transferring data with URL syntax curl-udeb - Get a file from an HTTP, HTTPS or FTP server (udeb) libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl3-udeb - Multi-protocol file transfer library (OpenSSL) (udeb) libcurl4-doc - documentation for libcurl libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.37.1-1ubuntu2) utopic; urgency=medium . * SECURITY UPDATE: incorrect cookie handling via partial literal IP addresses - debian/patches/CVE-2014-3613.patch: only use full host matches for hosts used as IP address in lib/cookie.c, added tests to tests/data/test1105, tests/data/test31, tests/data/test8. - CVE-2014-3613 * SECURITY UPDATE: incorrect cookie handling for TLDs - debian/patches/CVE-2014-3620.patch: reject incoming cookies set for TLDs in lib/cookie.c, added test to tests/data/test61. - CVE-2014-3620 Checksums-Sha1: f9a060407b8f6b1ffbc580d3ea35cfe0d799e282 121366 curl_7.37.1-1ubuntu2_armhf.deb 396a7c894a04ad5d79bf4de233a94f5d9f603e0c 1000 curl-udeb_7.37.1-1ubuntu2_armhf.udeb bad043e98b80758b5595fc9ac6031d99100a7ad9 155780 libcurl3_7.37.1-1ubuntu2_armhf.deb 59516e6774208d5ad3e7caaec5ee86ba1825e608 886 libcurl3-udeb_7.37.1-1ubuntu2_armhf.udeb 9a6e45b5355253264fc6f5290c047260a5bc07f2 149102 libcurl3-gnutls_7.37.1-1ubuntu2_armhf.deb 3ed279ffad97ed1aa252698f82842a0bee0e86a1 158504 libcurl3-nss_7.37.1-1ubuntu2_armhf.deb 5b4b3a07a69a148ced0c884f605b45e6c1386d58 222850 libcurl4-openssl-dev_7.37.1-1ubuntu2_armhf.deb 78224d42b98be6e689ff7a3999032b3f8ad97c3f 215166 libcurl4-gnutls-dev_7.37.1-1ubuntu2_armhf.deb c592f6222ec8bbbe55d4ee95c47ed4d56e6629e5 226122 libcurl4-nss-dev_7.37.1-1ubuntu2_armhf.deb b7837759c618a2af4037edc1db78aa1844879204 3221676 libcurl3-dbg_7.37.1-1ubuntu2_armhf.deb Checksums-Sha256: 5777291a45cbf7329e6275a8b6d97b15ce3ea1fac6db81c6d2fbe8e388bf3550 121366 curl_7.37.1-1ubuntu2_armhf.deb 3c0edb65b5cd6d9969dd1e0cca44998287daa76b54d511a7b277e0355f035913 1000 curl-udeb_7.37.1-1ubuntu2_armhf.udeb 2658040bb77dca58bccf8f0e8cb4967727056965a4cf3046dac83d43fd0cede8 155780 libcurl3_7.37.1-1ubuntu2_armhf.deb 2634c31c3813e24aafd43a33342788ff33e4dc239af27770f9fb59c32e01fc8a 886 libcurl3-udeb_7.37.1-1ubuntu2_armhf.udeb e3e6773c745b53b454ae817bc5dd1ea6ed4849af8999aa9d7c6e566d20282830 149102 libcurl3-gnutls_7.37.1-1ubuntu2_armhf.deb 342e5bfe54d048fdc86d20b854dce25454c77ad6bebdd870bca2b2e6b2ff6856 158504 libcurl3-nss_7.37.1-1ubuntu2_armhf.deb a09c52e41f6748563168ff3c2d9793801e5a488c968db7f334cb89d49b50c942 222850 libcurl4-openssl-dev_7.37.1-1ubuntu2_armhf.deb 0dfe32f28fb277c3734a5fd3bc03f2e1de7a2674eca0fcfe4766791f53a49a9d 215166 libcurl4-gnutls-dev_7.37.1-1ubuntu2_armhf.deb 2113ab9f4aebc52db1f4ba446eaa69066fdc472eb3390b3fb50c4807f8939668 226122 libcurl4-nss-dev_7.37.1-1ubuntu2_armhf.deb 01cc700437f393cb6d2400a726a6ed69a0f66b9a8016e353dc0964f5e9b5a87b 3221676 libcurl3-dbg_7.37.1-1ubuntu2_armhf.deb Files: e2bcc4cc41837122c2f68c16c24d19f6 121366 web optional curl_7.37.1-1ubuntu2_armhf.deb 7bed56cb5cdeaf04b8ee476f880ba7d9 1000 debian-installer optional curl-udeb_7.37.1-1ubuntu2_armhf.udeb a8d299c8c3e0104f9f50f751a3ea471e 155780 libs optional libcurl3_7.37.1-1ubuntu2_armhf.deb 5eae8dd49922351c57e2f6780e26a6e2 886 debian-installer optional libcurl3-udeb_7.37.1-1ubuntu2_armhf.udeb c0f9979cae508532e63e1425760a7f3b 149102 libs optional libcurl3-gnutls_7.37.1-1ubuntu2_armhf.deb 4a3638d904dfdb168e89b0244a4834c7 158504 libs optional libcurl3-nss_7.37.1-1ubuntu2_armhf.deb 10eccfbd349b61c2d0d184e6db949335 222850 libdevel optional libcurl4-openssl-dev_7.37.1-1ubuntu2_armhf.deb b25bcbf1fb8a7ca8b868835e3c00e877 215166 libdevel optional libcurl4-gnutls-dev_7.37.1-1ubuntu2_armhf.deb 76bca6007bd99fac12a73c14a37cd96f 226122 libdevel optional libcurl4-nss-dev_7.37.1-1ubuntu2_armhf.deb e31e157a3745d6f66eaed493d49d06bd 3221676 debug extra libcurl3-dbg_7.37.1-1ubuntu2_armhf.deb Original-Maintainer: Alessandro Ghedini Package-Type: udeb