curl 7.51.0-1ubuntu1 source package in Ubuntu

Changelog

curl (7.51.0-1ubuntu1) zesty; urgency=medium

  * Merge from Debian. Remaining changes:
    - Drop dependencies not in main:
      + Build-Depends: Drop libssh2-1-dev, and libnghttp2-dev.
      + Drop libssh2-1-dev from binary package Depends.
      + debian/control: drop --with-nghttp2

curl (7.51.0-1) unstable; urgency=medium

  * New upstream release
    - Fix cookie injection for other servers as per CVE-2016-8615
      https://curl.haxx.se/docs/adv_20161102A.html
    - Fix case insensitive password comparison as per CVE-2016-8616
      https://curl.haxx.se/docs/adv_20161102B.html
    - Fix OOB write via unchecked multiplication as per CVE-2016-8617
      https://curl.haxx.se/docs/adv_20161102C.html
    - Fix double-free in curl_maprintf as per CVE-2016-8618
      https://curl.haxx.se/docs/adv_20161102D.html
    - Fix double-free in krb5 code as per CVE-2016-8619
      https://curl.haxx.se/docs/adv_20161102E.html
    - Fix glob parser write/read out of bounds as per CVE-2016-8620
      https://curl.haxx.se/docs/adv_20161102F.html
    - Fix curl_getdate read out of bounds as per CVE-2016-8621
      https://curl.haxx.se/docs/adv_20161102G.html
    - Fix URL unescape heap overflow via integer truncation as per CVE-2016-8622
      https://curl.haxx.se/docs/adv_20161102H.html
    - Fix use-after-free via shared cookies as per CVE-2016-8623
      https://curl.haxx.se/docs/adv_20161102I.html
    - Fix invalid URL parsing with '#' as per CVE-2016-8624
      https://curl.haxx.se/docs/adv_20161102J.html
    - Fix IDNA 2003 makes curl use wrong host
      https://curl.haxx.se/docs/adv_20161102K.html
    - Fix escape and unescape integer overflows as
      per CVE-2016-7167 (Closes: #837945)
      https://curl.haxx.se/docs/adv_20160914.html
    - Fix incorrect reuse of client certificates (NSS backend)
      as per CVE-2016-7141 (Closes: #836918)
      https://curl.haxx.se/docs/adv_20160907.html
  * Drop 02_art_http_scripting.patch (file not shipped anymore)
  * Refresh patches
  * Temporarily disable IDN support
  * Don't install pdf and html docs (they are not shipped in the tarball anymore)
  * Install markdown docs

curl (7.50.1-2) unstable; urgency=medium

  * Disable more network tests (Closes: #830273)

 -- Marc Deslauriers <email address hidden>  Wed, 16 Nov 2016 12:59:10 -0500

Upload details

Uploaded by:
Marc Deslauriers on 2016-11-16
Uploaded to:
Zesty
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
web
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
curl_7.51.0.orig.tar.gz 3.3 MiB 65b5216a6fbfa72f547eb7706ca5902d7400db9868269017a8888aa91d87977c
curl_7.51.0-1ubuntu1.debian.tar.xz 29.5 KiB 284cf62266b22abc4e262e095182188c84f730d94264ae3e7e51444a4a392f71
curl_7.51.0-1ubuntu1.dsc 2.7 KiB d6fbcff05e94e30944fa359ed9c4349b6d55257004680acda61f791357155388

Available diffs

View changes file

Binary packages built by this source

curl: No summary available for curl in ubuntu zesty.

No description available for curl in ubuntu zesty.

curl-dbgsym: No summary available for curl-dbgsym in ubuntu zesty.

No description available for curl-dbgsym in ubuntu zesty.

libcurl3: No summary available for libcurl3 in ubuntu zesty.

No description available for libcurl3 in ubuntu zesty.

libcurl3-dbg: No summary available for libcurl3-dbg in ubuntu zesty.

No description available for libcurl3-dbg in ubuntu zesty.

libcurl3-dbgsym: No summary available for libcurl3-dbgsym in ubuntu zesty.

No description available for libcurl3-dbgsym in ubuntu zesty.

libcurl3-gnutls: No summary available for libcurl3-gnutls in ubuntu zesty.

No description available for libcurl3-gnutls in ubuntu zesty.

libcurl3-gnutls-dbgsym: No summary available for libcurl3-gnutls-dbgsym in ubuntu zesty.

No description available for libcurl3-gnutls-dbgsym in ubuntu zesty.

libcurl3-nss: No summary available for libcurl3-nss in ubuntu zesty.

No description available for libcurl3-nss in ubuntu zesty.

libcurl3-nss-dbgsym: No summary available for libcurl3-nss-dbgsym in ubuntu zesty.

No description available for libcurl3-nss-dbgsym in ubuntu zesty.

libcurl4-doc: No summary available for libcurl4-doc in ubuntu zesty.

No description available for libcurl4-doc in ubuntu zesty.

libcurl4-gnutls-dev: No summary available for libcurl4-gnutls-dev in ubuntu zesty.

No description available for libcurl4-gnutls-dev in ubuntu zesty.

libcurl4-gnutls-dev-dbgsym: No summary available for libcurl4-gnutls-dev-dbgsym in ubuntu zesty.

No description available for libcurl4-gnutls-dev-dbgsym in ubuntu zesty.

libcurl4-nss-dev: No summary available for libcurl4-nss-dev in ubuntu zesty.

No description available for libcurl4-nss-dev in ubuntu zesty.

libcurl4-nss-dev-dbgsym: No summary available for libcurl4-nss-dev-dbgsym in ubuntu zesty.

No description available for libcurl4-nss-dev-dbgsym in ubuntu zesty.

libcurl4-openssl-dev: No summary available for libcurl4-openssl-dev in ubuntu zesty.

No description available for libcurl4-openssl-dev in ubuntu zesty.

libcurl4-openssl-dev-dbgsym: No summary available for libcurl4-openssl-dev-dbgsym in ubuntu zesty.

No description available for libcurl4-openssl-dev-dbgsym in ubuntu zesty.