curl 7.64.0-2ubuntu1.2 source package in Ubuntu

Changelog

curl (7.64.0-2ubuntu1.2) disco-security; urgency=medium

  * SECURITY UPDATE: double-free when using kerberos over FTP may cause
    denial-of-service
    - debian/patches/CVE-2019-5481.patch: update lib/security.c to avoid
      double-free on large memory allocation failures
    - CVE-2019-5481
  * SECURITY UPDATE: heap buffer overflow when receiving TFTP data may
    cause denial-of-service or remote code-execution
    - debian/patches/CVE-2019-5482.patch: ensure to use the correct block
      size when calling recvfrom() if the server returns an OACK without
      specifying a block size in lib/tftp.c
    - CVE-2019-5482

 -- Alex Murray <email address hidden>  Fri, 06 Sep 2019 14:50:00 +0930

Upload details

Uploaded by:
Alex Murray
Uploaded to:
Disco
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
web
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
curl_7.64.0.orig.tar.gz 3.8 MiB cb90d2eb74d4e358c1ed1489f8e3af96b50ea4374ad71f143fa4595e998d81b5
curl_7.64.0-2ubuntu1.2.debian.tar.xz 32.8 KiB 29be0221b8a46778ac412d981cfd47691ac307b8ef6bea34e3422ae22cea3cd4
curl_7.64.0-2ubuntu1.2.dsc 2.4 KiB 71659f82a2dc4ad111be16db7bff5aa916e8d15369bafba33326f8d3e1f2b9f3

View changes file

Binary packages built by this source

curl: No summary available for curl in ubuntu disco.

No description available for curl in ubuntu disco.

curl-dbgsym: No summary available for curl-dbgsym in ubuntu disco.

No description available for curl-dbgsym in ubuntu disco.

libcurl3-gnutls: No summary available for libcurl3-gnutls in ubuntu disco.

No description available for libcurl3-gnutls in ubuntu disco.

libcurl3-gnutls-dbgsym: No summary available for libcurl3-gnutls-dbgsym in ubuntu disco.

No description available for libcurl3-gnutls-dbgsym in ubuntu disco.

libcurl3-nss: No summary available for libcurl3-nss in ubuntu disco.

No description available for libcurl3-nss in ubuntu disco.

libcurl3-nss-dbgsym: No summary available for libcurl3-nss-dbgsym in ubuntu disco.

No description available for libcurl3-nss-dbgsym in ubuntu disco.

libcurl4: No summary available for libcurl4 in ubuntu disco.

No description available for libcurl4 in ubuntu disco.

libcurl4-dbgsym: No summary available for libcurl4-dbgsym in ubuntu disco.

No description available for libcurl4-dbgsym in ubuntu disco.

libcurl4-doc: No summary available for libcurl4-doc in ubuntu disco.

No description available for libcurl4-doc in ubuntu disco.

libcurl4-gnutls-dev: No summary available for libcurl4-gnutls-dev in ubuntu disco.

No description available for libcurl4-gnutls-dev in ubuntu disco.

libcurl4-nss-dev: No summary available for libcurl4-nss-dev in ubuntu disco.

No description available for libcurl4-nss-dev in ubuntu disco.

libcurl4-openssl-dev: No summary available for libcurl4-openssl-dev in ubuntu disco.

No description available for libcurl4-openssl-dev in ubuntu disco.