Ubuntu
curl package

curl 7.65.3-1ubuntu3.1 source package in Ubuntu

Changelog

curl (7.65.3-1ubuntu3.1) eoan-security; urgency=medium

  * SECURITY UPDATE: Partial password leak over DNS on HTTP redirect
    - debian/patches/CVE-2020-8169.patch: make the updated credentials
      URL-encoded in the URL in lib/url.c, tests/data/test1168,
      tests/data/Makefile.inc.
    - CVE-2020-8169
  * SECURITY UPDATE: curl overwrite local file with -J
    - debian/patches/CVE-2020-8177.patch: -i is not OK if -J is used in
      src/tool_cb_hdr.c, src/tool_getparam.c.
    - CVE-2020-8177

 -- Marc Deslauriers <email address hidden>  Wed, 17 Jun 2020 09:07:25 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Eoan
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
web
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
curl_7.65.3.orig.tar.gz 3.8 MiB 4376ac72b95572fb6c4fbffefb97c7ea0dd083e1974c0e44cd7e49396f454839
curl_7.65.3-1ubuntu3.1.debian.tar.xz 31.8 KiB 5ac231fb2c691397af81e26a7c8e7eb3526751b9508591ec334c95ca8c663427
curl_7.65.3-1ubuntu3.1.dsc 2.7 KiB 22e23cfe71e4ca519e153339a26480b1e459e5e05acfb9c4ae6dc133f3536821

View changes file

Binary packages built by this source

curl: No summary available for curl in ubuntu eoan.

No description available for curl in ubuntu eoan.

curl-dbgsym: No summary available for curl-dbgsym in ubuntu eoan.

No description available for curl-dbgsym in ubuntu eoan.

libcurl3-gnutls: No summary available for libcurl3-gnutls in ubuntu eoan.

No description available for libcurl3-gnutls in ubuntu eoan.

libcurl3-gnutls-dbgsym: No summary available for libcurl3-gnutls-dbgsym in ubuntu eoan.

No description available for libcurl3-gnutls-dbgsym in ubuntu eoan.

libcurl3-nss: No summary available for libcurl3-nss in ubuntu eoan.

No description available for libcurl3-nss in ubuntu eoan.

libcurl3-nss-dbgsym: No summary available for libcurl3-nss-dbgsym in ubuntu eoan.

No description available for libcurl3-nss-dbgsym in ubuntu eoan.

libcurl4: No summary available for libcurl4 in ubuntu eoan.

No description available for libcurl4 in ubuntu eoan.

libcurl4-dbgsym: No summary available for libcurl4-dbgsym in ubuntu eoan.

No description available for libcurl4-dbgsym in ubuntu eoan.

libcurl4-doc: No summary available for libcurl4-doc in ubuntu eoan.

No description available for libcurl4-doc in ubuntu eoan.

libcurl4-gnutls-dev: No summary available for libcurl4-gnutls-dev in ubuntu eoan.

No description available for libcurl4-gnutls-dev in ubuntu eoan.

libcurl4-nss-dev: No summary available for libcurl4-nss-dev in ubuntu eoan.

No description available for libcurl4-nss-dev in ubuntu eoan.

libcurl4-openssl-dev: No summary available for libcurl4-openssl-dev in ubuntu eoan.

No description available for libcurl4-openssl-dev in ubuntu eoan.