Ubuntu
curl package

curl 7.55.1-1ubuntu2.4 source package in Ubuntu

Changelog

curl (7.55.1-1ubuntu2.4) artful-security; urgency=medium

  * SECURITY UPDATE: FTP path trickery leads to NIL byte OOB write
    - debian/patches/CVE-2018-1000120-pre.patch: URL decode path for dir
      listing in nocwd mode in lib/ftp.c, add test to tests/*.
    - debian/patches/CVE-2018-1000120.patch: reject path components with
      control codes in lib/ftp.c, add test to tests/*.
    - CVE-2018-1000120
  * SECURITY UPDATE: LDAP NULL pointer dereference
    - debian/patches/CVE-2018-1000121.patch: check ldap_get_attribute_ber()
      results for NULL before using in lib/openldap.c.
    - CVE-2018-1000121
  * SECURITY UPDATE: RTSP RTP buffer over-read
    - debian/patches/CVE-2018-1000122.patch: make sure excess reads don't
      go beyond buffer end in lib/transfer.c.
    - CVE-2018-1000122

 -- Marc Deslauriers <email address hidden>  Wed, 14 Mar 2018 08:47:46 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Artful
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
web
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
curl_7.55.1.orig.tar.gz 3.6 MiB 09576ea5e66672648d83dce3af16d0cb294d4cba2b5d166ade39655c495f4a20
curl_7.55.1-1ubuntu2.4.debian.tar.xz 39.3 KiB 7ba1857f2a3696fea001ba389bd46419e5154a6ef931a2a2a376fa2367cf9e85
curl_7.55.1-1ubuntu2.4.dsc 2.7 KiB 214c2c770948b0e84b12a0ca3c08800dc05970619ece5aed0193f1ad87084576

View changes file

Binary packages built by this source

curl: No summary available for curl in ubuntu artful.

No description available for curl in ubuntu artful.

curl-dbgsym: No summary available for curl-dbgsym in ubuntu artful.

No description available for curl-dbgsym in ubuntu artful.

libcurl3: No summary available for libcurl3 in ubuntu artful.

No description available for libcurl3 in ubuntu artful.

libcurl3-dbgsym: No summary available for libcurl3-dbgsym in ubuntu artful.

No description available for libcurl3-dbgsym in ubuntu artful.

libcurl3-gnutls: No summary available for libcurl3-gnutls in ubuntu artful.

No description available for libcurl3-gnutls in ubuntu artful.

libcurl3-gnutls-dbgsym: No summary available for libcurl3-gnutls-dbgsym in ubuntu artful.

No description available for libcurl3-gnutls-dbgsym in ubuntu artful.

libcurl3-nss: No summary available for libcurl3-nss in ubuntu artful.

No description available for libcurl3-nss in ubuntu artful.

libcurl3-nss-dbgsym: No summary available for libcurl3-nss-dbgsym in ubuntu artful.

No description available for libcurl3-nss-dbgsym in ubuntu artful.

libcurl4-doc: No summary available for libcurl4-doc in ubuntu artful.

No description available for libcurl4-doc in ubuntu artful.

libcurl4-gnutls-dev: No summary available for libcurl4-gnutls-dev in ubuntu artful.

No description available for libcurl4-gnutls-dev in ubuntu artful.

libcurl4-nss-dev: No summary available for libcurl4-nss-dev in ubuntu artful.

No description available for libcurl4-nss-dev in ubuntu artful.

libcurl4-openssl-dev: No summary available for libcurl4-openssl-dev in ubuntu artful.

No description available for libcurl4-openssl-dev in ubuntu artful.