Format: 1.8 Date: Tue, 28 Nov 2017 08:03:58 -0500 Source: curl Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc Architecture: s390x Version: 7.47.0-1ubuntu2.5 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: curl - command line tool for transferring data with URL syntax libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4-doc - documentation for libcurl libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.47.0-1ubuntu2.5) xenial-security; urgency=medium . * SECURITY UPDATE: NTLM buffer overflow via integer overflow - debian/patches/CVE-2017-8816.patch: avoid integer overflow for malloc size in lib/curl_ntlm_core.c - CVE-2017-8816 * SECURITY UPDATE: FTP wildcard out of bounds read - debian/patches/CVE-2017-8817.patch: fix heap buffer overflow in setcharset in lib/curl_fnmatch.c, added tests to tests/data/Makefile.inc, tests/data/test1163. - CVE-2017-8817 Checksums-Sha1: 22124ad438e2a4cb66dfff0bffc0ac87a5f51816 1086 curl-dbgsym_7.47.0-1ubuntu2.5_s390x.ddeb 03fd5184ed66c685a8a78b4aced530f1a82068e1 136786 curl_7.47.0-1ubuntu2.5_s390x.deb 35017c5c95704e905c570ce3ac159cddd260be03 3597122 libcurl3-dbg_7.47.0-1ubuntu2.5_s390x.deb 40e2559a916a7f936a0a26485c014b6831120c2e 1200 libcurl3-dbgsym_7.47.0-1ubuntu2.5_s390x.ddeb c290850a27c1c8319d2b6308de9fd31c3b9ac882 1208 libcurl3-gnutls-dbgsym_7.47.0-1ubuntu2.5_s390x.ddeb cae64194174e35e60afca2faefa760b6b29a66fd 174112 libcurl3-gnutls_7.47.0-1ubuntu2.5_s390x.deb b29e3d18b1b400215fee07cb28e6351dea997684 1204 libcurl3-nss-dbgsym_7.47.0-1ubuntu2.5_s390x.ddeb 9d75bb7a5ca08018192f6c6a36dff802c5a05ada 181124 libcurl3-nss_7.47.0-1ubuntu2.5_s390x.deb 2397789c0f0701ec455aa9aa362252c3c9462ac7 176344 libcurl3_7.47.0-1ubuntu2.5_s390x.deb f99356e4422fb0028992968b3f53a9f38fe6930b 1292 libcurl4-gnutls-dev-dbgsym_7.47.0-1ubuntu2.5_s390x.ddeb 4444b6435201f5fe1395d23a9d5cb35f450b4d98 252958 libcurl4-gnutls-dev_7.47.0-1ubuntu2.5_s390x.deb eaf0948e6222014b4d49572291614d35b18f1bde 1288 libcurl4-nss-dev-dbgsym_7.47.0-1ubuntu2.5_s390x.ddeb f47d79c13a31b4b9800f08479775724574422b94 260136 libcurl4-nss-dev_7.47.0-1ubuntu2.5_s390x.deb f574d9b383357e6f70636abeeb2b256cad6ff131 1292 libcurl4-openssl-dev-dbgsym_7.47.0-1ubuntu2.5_s390x.ddeb 3e449454ec56bfbc9cbedfba7472fd4380afb84e 254368 libcurl4-openssl-dev_7.47.0-1ubuntu2.5_s390x.deb Checksums-Sha256: a5a03aef413b16e95aa26dc32c08d5fca64b45a7140a322a004106503225b105 1086 curl-dbgsym_7.47.0-1ubuntu2.5_s390x.ddeb 2e949e5b9fbbe05bd31dfc9888e4dfb80f3b916e7ac676e32db3364ca4d0e637 136786 curl_7.47.0-1ubuntu2.5_s390x.deb a4d69f9cafa60a7aeb5d5f3361c1ade3ad4e3c44998da0a0ba7e73aeec056a59 3597122 libcurl3-dbg_7.47.0-1ubuntu2.5_s390x.deb 5df511d011456a7f1a43076acb2333f64bf3293d2c5c42b53d99f15f220eb342 1200 libcurl3-dbgsym_7.47.0-1ubuntu2.5_s390x.ddeb 37b756b788b3b76a4ecbb2e3b3fbad8f47d20f2ec65cd92eedf10a8732101f87 1208 libcurl3-gnutls-dbgsym_7.47.0-1ubuntu2.5_s390x.ddeb 80081e36395d057e94df22b4ee99df2ae79385833e12543bf4ab1511bb3cae44 174112 libcurl3-gnutls_7.47.0-1ubuntu2.5_s390x.deb 740e6cb94a310bbc2dd42fa51c1149f12e185d90f66b3eb3a60836ca608ba298 1204 libcurl3-nss-dbgsym_7.47.0-1ubuntu2.5_s390x.ddeb a14a71dea495dc092b21bfb19bd4871d8cb3b81132cdf570788b55a937cff43b 181124 libcurl3-nss_7.47.0-1ubuntu2.5_s390x.deb e5f63888f93b597e9322636058cec094c8aa1d7d78e61487433e0cfc023e5ed5 176344 libcurl3_7.47.0-1ubuntu2.5_s390x.deb e182b62aadde885ff1c4153a7213e8c6c279c636544fb342ff6ce74ff5c7e7c4 1292 libcurl4-gnutls-dev-dbgsym_7.47.0-1ubuntu2.5_s390x.ddeb 6cbe6994636c61408c4628d93f7d0f8e9a818d75d53f3b1be3ec0ba22c00a1cb 252958 libcurl4-gnutls-dev_7.47.0-1ubuntu2.5_s390x.deb e49655bf365f35f1f68d7cdb5e51cadb54a796a85051a253df1e0a7fba42303b 1288 libcurl4-nss-dev-dbgsym_7.47.0-1ubuntu2.5_s390x.ddeb 35ab001139d02fb05b9466fb0eea25662fdae24b53cfd5c8bfc5cd40bddc6878 260136 libcurl4-nss-dev_7.47.0-1ubuntu2.5_s390x.deb bf78ec93099fa01fabfa2118b76030ab739abd25f3a6a26ce19a4867fb342bad 1292 libcurl4-openssl-dev-dbgsym_7.47.0-1ubuntu2.5_s390x.ddeb ab055a9e51c790c9d4f37c828191b8416b1ebaeb0cf5549d9857271e38ae889e 254368 libcurl4-openssl-dev_7.47.0-1ubuntu2.5_s390x.deb Files: 576a19ab45bb38ed7b362b0ac78c234f 1086 web extra curl-dbgsym_7.47.0-1ubuntu2.5_s390x.ddeb 0556cc533598c08ed95c633ae6524247 136786 web optional curl_7.47.0-1ubuntu2.5_s390x.deb f0e4675e4dc1e5fd39b42b57ea151676 3597122 debug extra libcurl3-dbg_7.47.0-1ubuntu2.5_s390x.deb 89203ae9005b9f9dd109d93e93c08c90 1200 libs extra libcurl3-dbgsym_7.47.0-1ubuntu2.5_s390x.ddeb c4051610650866318868d74d167cfc82 1208 libs extra libcurl3-gnutls-dbgsym_7.47.0-1ubuntu2.5_s390x.ddeb 2dad01613717842ffb77d1b31be2c05f 174112 libs optional libcurl3-gnutls_7.47.0-1ubuntu2.5_s390x.deb f57e76cbc0a7368c9fac31afc4e7b05b 1204 libs extra libcurl3-nss-dbgsym_7.47.0-1ubuntu2.5_s390x.ddeb 5893f58ae20cdba9353c720856735057 181124 libs optional libcurl3-nss_7.47.0-1ubuntu2.5_s390x.deb 8cbcd5377d7381328afcf6d6ad9a1948 176344 libs optional libcurl3_7.47.0-1ubuntu2.5_s390x.deb 8fb1a84c8d389e0ac37d46446e84ca90 1292 libdevel extra libcurl4-gnutls-dev-dbgsym_7.47.0-1ubuntu2.5_s390x.ddeb 70fa552a734bb8d9e5d3704f6f0f5fa2 252958 libdevel optional libcurl4-gnutls-dev_7.47.0-1ubuntu2.5_s390x.deb 67d3612d0603893ba5e7aa891e24bd61 1288 libdevel extra libcurl4-nss-dev-dbgsym_7.47.0-1ubuntu2.5_s390x.ddeb 08beee68d45485fc42fb62d426fff2d4 260136 libdevel optional libcurl4-nss-dev_7.47.0-1ubuntu2.5_s390x.deb 592e322f39796f35a4677018e9815cdb 1292 libdevel extra libcurl4-openssl-dev-dbgsym_7.47.0-1ubuntu2.5_s390x.ddeb 667ce3a2416df7d821ab775e044b3713 254368 libdevel optional libcurl4-openssl-dev_7.47.0-1ubuntu2.5_s390x.deb Original-Maintainer: Alessandro Ghedini