Format: 1.8 Date: Tue, 28 Nov 2017 08:03:58 -0500 Source: curl Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc Architecture: ppc64el Version: 7.47.0-1ubuntu2.5 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: curl - command line tool for transferring data with URL syntax libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4-doc - documentation for libcurl libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.47.0-1ubuntu2.5) xenial-security; urgency=medium . * SECURITY UPDATE: NTLM buffer overflow via integer overflow - debian/patches/CVE-2017-8816.patch: avoid integer overflow for malloc size in lib/curl_ntlm_core.c - CVE-2017-8816 * SECURITY UPDATE: FTP wildcard out of bounds read - debian/patches/CVE-2017-8817.patch: fix heap buffer overflow in setcharset in lib/curl_fnmatch.c, added tests to tests/data/Makefile.inc, tests/data/test1163. - CVE-2017-8817 Checksums-Sha1: 0aa7975e656d3af94299e025b77d416a378a1257 1090 curl-dbgsym_7.47.0-1ubuntu2.5_ppc64el.ddeb 6fefecc7dad007c56717d1f605d62146979ba1c4 136168 curl_7.47.0-1ubuntu2.5_ppc64el.deb 99883bb47f2bc3c3d2a2cf68d430087eeb030b5c 3691346 libcurl3-dbg_7.47.0-1ubuntu2.5_ppc64el.deb 5aac37455cecd4440095bf86fee1a45803d2b200 1206 libcurl3-dbgsym_7.47.0-1ubuntu2.5_ppc64el.ddeb e4a5a11dffa350a080db3b1a69f8aa3a229482f1 1210 libcurl3-gnutls-dbgsym_7.47.0-1ubuntu2.5_ppc64el.ddeb 0e7301bb4ced3f4678aa4a2d00f9e9e4280851f5 177598 libcurl3-gnutls_7.47.0-1ubuntu2.5_ppc64el.deb 08918f08e0130243eb6bc6e5f382a2611be2e23d 1208 libcurl3-nss-dbgsym_7.47.0-1ubuntu2.5_ppc64el.ddeb 14f325508672c33b72474ec99c87c50707cbaea6 182820 libcurl3-nss_7.47.0-1ubuntu2.5_ppc64el.deb 12bc531bbdd04e1f2315c668fc56cca356669744 177828 libcurl3_7.47.0-1ubuntu2.5_ppc64el.deb d46fff08c1ec38b0852118bb80d93c6336ce647a 1292 libcurl4-gnutls-dev-dbgsym_7.47.0-1ubuntu2.5_ppc64el.ddeb ee8c3cdb3f1c1e581b00f15b79a298b3c5c0962c 262670 libcurl4-gnutls-dev_7.47.0-1ubuntu2.5_ppc64el.deb 3ff88bcfa666b43e1c8ef6d0b6e8e9d22717617b 1286 libcurl4-nss-dev-dbgsym_7.47.0-1ubuntu2.5_ppc64el.ddeb 02a3c7a620fa44c821996e16f239042e400ddb2c 268918 libcurl4-nss-dev_7.47.0-1ubuntu2.5_ppc64el.deb 8517fa3089e292371d9543c51d09a41831c5e6fe 1292 libcurl4-openssl-dev-dbgsym_7.47.0-1ubuntu2.5_ppc64el.ddeb eb8d8f8b63ddc12a27166fbd165bbb9d6d1fcb36 261240 libcurl4-openssl-dev_7.47.0-1ubuntu2.5_ppc64el.deb Checksums-Sha256: 69568407201deba425366ab645444ee8c4c443c9b4c539fbe6d164fce2836420 1090 curl-dbgsym_7.47.0-1ubuntu2.5_ppc64el.ddeb 89489e37893502cfcfedcdb77dd009e71f0cba4611075c977200237ab3328c4b 136168 curl_7.47.0-1ubuntu2.5_ppc64el.deb 526e01852125a882cee039f84d9b2dffcb3505d68966ea00e1bea9878a396cfc 3691346 libcurl3-dbg_7.47.0-1ubuntu2.5_ppc64el.deb 30c2d0a9e3b1a014eb11e76682f275471303083c425c2286a36bcfc533f83597 1206 libcurl3-dbgsym_7.47.0-1ubuntu2.5_ppc64el.ddeb 77f3e9184b76afa40b9b4cc7349b6fabae93a8a9a9e24dd58f2dbcd69cd04732 1210 libcurl3-gnutls-dbgsym_7.47.0-1ubuntu2.5_ppc64el.ddeb 89a6f56a86ff765ecdff94a703193bea70aa5e4c52080ffaf730e4abb2bb1bd6 177598 libcurl3-gnutls_7.47.0-1ubuntu2.5_ppc64el.deb a1e1b47aad42cfc4ebf4cb9ec43302a032957f91e1a71d91e0084bf03458982e 1208 libcurl3-nss-dbgsym_7.47.0-1ubuntu2.5_ppc64el.ddeb 9e266730cd83eb8e76176f16b02bdd6717680903b215ffb8a973513692f705c4 182820 libcurl3-nss_7.47.0-1ubuntu2.5_ppc64el.deb d3117f7b397b5989808918dc7164547674e6aa3245c71b64cbce85b7b9839fb1 177828 libcurl3_7.47.0-1ubuntu2.5_ppc64el.deb 426821b17c11272feaaa4ed82f7be6493156db103752e01375088988e902cb78 1292 libcurl4-gnutls-dev-dbgsym_7.47.0-1ubuntu2.5_ppc64el.ddeb 8a86942661ff8a0e8cb2898d28f2be254b86c1f6c9ceb1c75f4557e73993d006 262670 libcurl4-gnutls-dev_7.47.0-1ubuntu2.5_ppc64el.deb c5cc6eb194690cc54631dd87a1899fd7a3b672f595f64d9ed4e49954e961df8d 1286 libcurl4-nss-dev-dbgsym_7.47.0-1ubuntu2.5_ppc64el.ddeb d2b059eb6ad1acb287ae988f49bb637008b9b2dfd1e558e8ec7792e532a9625e 268918 libcurl4-nss-dev_7.47.0-1ubuntu2.5_ppc64el.deb 5623afc34cc2df2dca2859f55f000f30457063b272f8a60830b525ecd0875689 1292 libcurl4-openssl-dev-dbgsym_7.47.0-1ubuntu2.5_ppc64el.ddeb 03f368de6e3b741ed2a20503db79ae75626fdf1736b77e75a7b75840272f4d1f 261240 libcurl4-openssl-dev_7.47.0-1ubuntu2.5_ppc64el.deb Files: eb3e097459bf6008f09445d01fb07eee 1090 web extra curl-dbgsym_7.47.0-1ubuntu2.5_ppc64el.ddeb 1ec98f0624efd276914272c00e860f72 136168 web optional curl_7.47.0-1ubuntu2.5_ppc64el.deb 0dfb17852ccfdf626b1173d4bd28ce6b 3691346 debug extra libcurl3-dbg_7.47.0-1ubuntu2.5_ppc64el.deb f0a707fa15b38b507e8d7109bfe54c8b 1206 libs extra libcurl3-dbgsym_7.47.0-1ubuntu2.5_ppc64el.ddeb 767e58951c492212045724f06076125d 1210 libs extra libcurl3-gnutls-dbgsym_7.47.0-1ubuntu2.5_ppc64el.ddeb a796c07407dab965cd6f8940f652b518 177598 libs optional libcurl3-gnutls_7.47.0-1ubuntu2.5_ppc64el.deb 4c689e544b86285eba14d75386c5f94f 1208 libs extra libcurl3-nss-dbgsym_7.47.0-1ubuntu2.5_ppc64el.ddeb 2ad0c60a0586edc05c0e7c5b433c5c65 182820 libs optional libcurl3-nss_7.47.0-1ubuntu2.5_ppc64el.deb 5753db1f020a6bbba64cb295e7ddcdcd 177828 libs optional libcurl3_7.47.0-1ubuntu2.5_ppc64el.deb 1b323cd1f2f50abcaf7392a741def86f 1292 libdevel extra libcurl4-gnutls-dev-dbgsym_7.47.0-1ubuntu2.5_ppc64el.ddeb 1e889ee3ef6e11cf1b3c37d3e287e605 262670 libdevel optional libcurl4-gnutls-dev_7.47.0-1ubuntu2.5_ppc64el.deb 1a8777b92c831790ab6effdda4d8bc3e 1286 libdevel extra libcurl4-nss-dev-dbgsym_7.47.0-1ubuntu2.5_ppc64el.ddeb 82e9f3fc9ca20fb2111378ac9dfbcd16 268918 libdevel optional libcurl4-nss-dev_7.47.0-1ubuntu2.5_ppc64el.deb b67dc3d739cd74b1d6b20f0a1cb1ebc8 1292 libdevel extra libcurl4-openssl-dev-dbgsym_7.47.0-1ubuntu2.5_ppc64el.ddeb 0208e2ee9abfc9f4f82032163afc42d4 261240 libdevel optional libcurl4-openssl-dev_7.47.0-1ubuntu2.5_ppc64el.deb Original-Maintainer: Alessandro Ghedini