Format: 1.8 Date: Fri, 05 Aug 2016 11:23:04 -0400 Source: curl Binary: curl curl-udeb libcurl3 libcurl3-udeb libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc Architecture: ppc64el Version: 7.35.0-1ubuntu2.8 Distribution: trusty Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: curl - command line tool for transferring data with URL syntax curl-udeb - Get a file from an HTTP, HTTPS or FTP server (udeb) libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl3-udeb - Multi-protocol file transfer library (OpenSSL) (udeb) libcurl4-doc - documentation for libcurl libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.35.0-1ubuntu2.8) trusty-security; urgency=medium . * SECURITY UPDATE: TLS session resumption client cert bypass - debian/patches/CVE-2016-5419.patch: switch off SSL session id when client cert is used in lib/url.c, lib/urldata.h, lib/vtls/vtls.c. - CVE-2016-5419 * SECURITY UPDATE: re-using connections with wrong client cert - debian/patches/CVE-2016-5420.patch: only reuse connections with the same client cert in lib/vtls/vtls.c. - CVE-2016-5420 * SECURITY UPDATE: use of connection struct after free - debian/patches/CVE-2016-5421.patch: clear connection pointer for easy handles in lib/multi.c. - CVE-2016-5421 Checksums-Sha1: a00904feee68fd389be088bc612e8c4da2250ea7 122014 curl_7.35.0-1ubuntu2.8_ppc64el.deb 2a860e6e9dcab943f614b0298cfd39162bf3d57f 958 curl-udeb_7.35.0-1ubuntu2.8_ppc64el.udeb 758d358fd5085b30d9ab24a7934387b9c93f8849 171512 libcurl3_7.35.0-1ubuntu2.8_ppc64el.deb 74a27d778675fd0fd1d81bc80c14077202b6b501 840 libcurl3-udeb_7.35.0-1ubuntu2.8_ppc64el.udeb ffda39c2eed3aa3486876ad3875b4961799e41c0 165328 libcurl3-gnutls_7.35.0-1ubuntu2.8_ppc64el.deb 2ece3fa63d390859e3bd52f1e69947fa9ca76084 176546 libcurl3-nss_7.35.0-1ubuntu2.8_ppc64el.deb 9e9fd9a21c251450f3d3b685851aafd8ab46ec61 253836 libcurl4-openssl-dev_7.35.0-1ubuntu2.8_ppc64el.deb 6b4f4cbfc4caca7a2cf707cd3e7039a9c81c7d2c 246714 libcurl4-gnutls-dev_7.35.0-1ubuntu2.8_ppc64el.deb 254250172c1947057525a478816b9d1fbfeaa3c0 260886 libcurl4-nss-dev_7.35.0-1ubuntu2.8_ppc64el.deb 1f7edd0e618f44dd703270ae6f9c51dcdbb72e9d 3479576 libcurl3-dbg_7.35.0-1ubuntu2.8_ppc64el.deb 6a6af6fd1aea51e42a264d28104d835d275d392d 1084 curl-dbgsym_7.35.0-1ubuntu2.8_ppc64el.ddeb da5530f00c362216438d082924ebfc13b5faad1d 986 curl-udeb-dbgsym_7.35.0-1ubuntu2.8_ppc64el.ddeb d0cbdf0d468a97ceef9b53dc21139610c8a3fa23 1204 libcurl3-dbgsym_7.35.0-1ubuntu2.8_ppc64el.ddeb 3ecc06581ef65665519bfca9754ce831a4e06f6f 904 libcurl3-udeb-dbgsym_7.35.0-1ubuntu2.8_ppc64el.ddeb 5f7af506d2cdd100ba94f05a831f53b3574a24a3 1208 libcurl3-gnutls-dbgsym_7.35.0-1ubuntu2.8_ppc64el.ddeb 07948d25bad75c81ed884c335c59a5ed07d5b0c1 1204 libcurl3-nss-dbgsym_7.35.0-1ubuntu2.8_ppc64el.ddeb 6b3861a8367b494ff74794344ff4c0e3ad156cd0 1286 libcurl4-openssl-dev-dbgsym_7.35.0-1ubuntu2.8_ppc64el.ddeb 1e327a06e737d96a6282d842d33b51c96d4a8548 1288 libcurl4-gnutls-dev-dbgsym_7.35.0-1ubuntu2.8_ppc64el.ddeb 0025b95e7bcd9433a8d0c8d882edc5fd8b51f7e3 1284 libcurl4-nss-dev-dbgsym_7.35.0-1ubuntu2.8_ppc64el.ddeb Checksums-Sha256: f9d431c35816e800e47c874d672aebdf495ec961aa9e14683303d807147702a6 122014 curl_7.35.0-1ubuntu2.8_ppc64el.deb 119aec9ce066807b30be67b59c3e075a766d4a464273a31c3841bfd70772427f 958 curl-udeb_7.35.0-1ubuntu2.8_ppc64el.udeb dc626822eb49d5c086229c0f89f9a5ed0a98881c0ca269ecb904a3c3afbc6881 171512 libcurl3_7.35.0-1ubuntu2.8_ppc64el.deb 376dd820afcb44fdf8392d555cc02f9da16c4052cea9e6656f113e2ea0620f48 840 libcurl3-udeb_7.35.0-1ubuntu2.8_ppc64el.udeb 27238b1e1c12aa4f1c10245b6e29c3d575ae62dadd1201f08f176501eb9d2b04 165328 libcurl3-gnutls_7.35.0-1ubuntu2.8_ppc64el.deb 83b811763fb58cd50171f8163d759080473511c3f895c1b8a76d6e237484297d 176546 libcurl3-nss_7.35.0-1ubuntu2.8_ppc64el.deb 5581d452f7921c730414ec8369abd8a012df50319b1cd7dec0d0578ce0de4b06 253836 libcurl4-openssl-dev_7.35.0-1ubuntu2.8_ppc64el.deb 299dd1d2c83b2b963e47832e426d1340a432fa910710c9bf0c8b6f4d368e0411 246714 libcurl4-gnutls-dev_7.35.0-1ubuntu2.8_ppc64el.deb c4f7cd408a922260c19d6b3b50e0ed329004ed29e39afa571a640628617ca2c6 260886 libcurl4-nss-dev_7.35.0-1ubuntu2.8_ppc64el.deb a82e85ca781ca93d816e2d7bbedecb92cab4629b643458ee8431b4c2e6bc0e7e 3479576 libcurl3-dbg_7.35.0-1ubuntu2.8_ppc64el.deb 361d934507ebaed7d1f4550983cf7c135e2cd9c84ebfbd43840c0973f7d32819 1084 curl-dbgsym_7.35.0-1ubuntu2.8_ppc64el.ddeb 686bdb7f9b819f1bb5ca6a550b54cf4234a535eb06a6751cc2d7904d423e6b81 986 curl-udeb-dbgsym_7.35.0-1ubuntu2.8_ppc64el.ddeb 95b12cd8e34b44d6a20c7c19551bbe0226de9232fd8633f372464ede6c554ee7 1204 libcurl3-dbgsym_7.35.0-1ubuntu2.8_ppc64el.ddeb 3c395c77bc05200ed4aab3298e2a573f7997ed9659f8750fe53ad80ffcf4b478 904 libcurl3-udeb-dbgsym_7.35.0-1ubuntu2.8_ppc64el.ddeb 67594cd07416bde03610181379965406a82997683ff7d8e7a4937a8439275663 1208 libcurl3-gnutls-dbgsym_7.35.0-1ubuntu2.8_ppc64el.ddeb b54af93e073ff602a45bbaeb0ed52d8479086210a21e31a0fa1ed542a2328932 1204 libcurl3-nss-dbgsym_7.35.0-1ubuntu2.8_ppc64el.ddeb f395cfa4e2a1daffe76dc6b0d7e56580f3109ebe69361b053d5cc01efd54112f 1286 libcurl4-openssl-dev-dbgsym_7.35.0-1ubuntu2.8_ppc64el.ddeb f60851f7ede6dc8fbf7c2f61f21c1e8c0e0c14ae93b6f85bd231ce15fce20e20 1288 libcurl4-gnutls-dev-dbgsym_7.35.0-1ubuntu2.8_ppc64el.ddeb 7c259476ec8a8261ad2c2ef6c68b069747d138e3b5f0c814c27455ff90723bb4 1284 libcurl4-nss-dev-dbgsym_7.35.0-1ubuntu2.8_ppc64el.ddeb Files: c28a029ee7276a8256b52a5056761752 122014 web optional curl_7.35.0-1ubuntu2.8_ppc64el.deb 66aa36190626dbde8af8e4b052a038ae 958 debian-installer optional curl-udeb_7.35.0-1ubuntu2.8_ppc64el.udeb 7a118a0a5f38ed83b18916a2450e70ea 171512 libs optional libcurl3_7.35.0-1ubuntu2.8_ppc64el.deb edb903ccfd49958f000af5d4a36b1e1d 840 debian-installer optional libcurl3-udeb_7.35.0-1ubuntu2.8_ppc64el.udeb 123b5a9a3db8a94d7b45a40d7f026ab1 165328 libs optional libcurl3-gnutls_7.35.0-1ubuntu2.8_ppc64el.deb 5c8356af9ed40411ff2f97faebe7e5e3 176546 libs optional libcurl3-nss_7.35.0-1ubuntu2.8_ppc64el.deb 32092afb2163232ce6b17b982bb0df8d 253836 libdevel optional libcurl4-openssl-dev_7.35.0-1ubuntu2.8_ppc64el.deb d750a063cf1de06b931a346d5df5e52b 246714 libdevel optional libcurl4-gnutls-dev_7.35.0-1ubuntu2.8_ppc64el.deb 7bf22ebc0b1f503f591182b21842712d 260886 libdevel optional libcurl4-nss-dev_7.35.0-1ubuntu2.8_ppc64el.deb 4836cd85ed90d54deb6336d63f049420 3479576 debug extra libcurl3-dbg_7.35.0-1ubuntu2.8_ppc64el.deb f31d2c1c0f22805a24b0b7bdf00b0a2c 1084 web extra curl-dbgsym_7.35.0-1ubuntu2.8_ppc64el.ddeb 0dfdc2a23195e23a6a7a7a1109adfbf2 986 debian-installer extra curl-udeb-dbgsym_7.35.0-1ubuntu2.8_ppc64el.ddeb e0376b812a4c4bf64d85ff3953a55338 1204 libs extra libcurl3-dbgsym_7.35.0-1ubuntu2.8_ppc64el.ddeb c784b6d9665c317d2cf97b9a7e5443f7 904 debian-installer extra libcurl3-udeb-dbgsym_7.35.0-1ubuntu2.8_ppc64el.ddeb 8c83c3d9c37b89d272d497ddfd0f3165 1208 libs extra libcurl3-gnutls-dbgsym_7.35.0-1ubuntu2.8_ppc64el.ddeb 74580910c1017263180403b1ead7d491 1204 libs extra libcurl3-nss-dbgsym_7.35.0-1ubuntu2.8_ppc64el.ddeb d9430866e93ef3d719836d1bb42b1d5e 1286 libdevel extra libcurl4-openssl-dev-dbgsym_7.35.0-1ubuntu2.8_ppc64el.ddeb fdda9bc5144ce7296f19f36f55ce930a 1288 libdevel extra libcurl4-gnutls-dev-dbgsym_7.35.0-1ubuntu2.8_ppc64el.ddeb ec589323c750dd5a4364bf67d78cf43d 1284 libdevel extra libcurl4-nss-dev-dbgsym_7.35.0-1ubuntu2.8_ppc64el.ddeb Original-Maintainer: Alessandro Ghedini Package-Type: udeb