Format: 1.8 Date: Tue, 28 Nov 2017 08:02:21 -0500 Source: curl Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc Architecture: armhf Version: 7.52.1-4ubuntu1.4 Distribution: zesty Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: curl - command line tool for transferring data with URL syntax libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4-doc - documentation for libcurl libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.52.1-4ubuntu1.4) zesty-security; urgency=medium . * SECURITY UPDATE: NTLM buffer overflow via integer overflow - debian/patches/CVE-2017-8816.patch: avoid integer overflow for malloc size in lib/curl_ntlm_core.c - CVE-2017-8816 * SECURITY UPDATE: FTP wildcard out of bounds read - debian/patches/CVE-2017-8817.patch: fix heap buffer overflow in setcharset in lib/curl_fnmatch.c, added tests to tests/data/Makefile.inc, tests/data/test1163. - CVE-2017-8817 Checksums-Sha1: 903447e573394ea360be9405ed0956120367cf4e 1092 curl-dbgsym_7.52.1-4ubuntu1.4_armhf.ddeb 02328afa923977c81543041168f5010965a4b2f6 141688 curl_7.52.1-4ubuntu1.4_armhf.deb 3541655d8a78ee352fd2f557bd53c4b8377c384d 4400834 libcurl3-dbg_7.52.1-4ubuntu1.4_armhf.deb 1b3b4b12eb946c9ce431b97dbce1216ed0cd563e 1208 libcurl3-dbgsym_7.52.1-4ubuntu1.4_armhf.ddeb e21fd5216fd30bd265b9bb66a719021c06a3f76d 1214 libcurl3-gnutls-dbgsym_7.52.1-4ubuntu1.4_armhf.ddeb 04d0c63739eb2b7d907d74ec271251292444af6c 166226 libcurl3-gnutls_7.52.1-4ubuntu1.4_armhf.deb ec966c825b2f11920acc0920162a46943c0a30e2 1210 libcurl3-nss-dbgsym_7.52.1-4ubuntu1.4_armhf.ddeb 3590663a759158b452c92226887d928f5a6efd13 171460 libcurl3-nss_7.52.1-4ubuntu1.4_armhf.deb 7211df079bba97f2a0f5b4e1c7f82f3554b32860 168186 libcurl3_7.52.1-4ubuntu1.4_armhf.deb 6f08d71bdcca3d6b8ce2ae521be946da218f363f 1298 libcurl4-gnutls-dev-dbgsym_7.52.1-4ubuntu1.4_armhf.ddeb 9ba84b696b3315c772cb5d75c0c32bf6a58a4523 247410 libcurl4-gnutls-dev_7.52.1-4ubuntu1.4_armhf.deb 8a2a6b1d1f60d2e3cd432cdea818ca088a59ef06 1292 libcurl4-nss-dev-dbgsym_7.52.1-4ubuntu1.4_armhf.ddeb eeee1f0b24f10b0bc5f8dfecae1f84a11559e821 252796 libcurl4-nss-dev_7.52.1-4ubuntu1.4_armhf.deb 52a51fd10e02c5b3f16bc829de66a27ae86012aa 1296 libcurl4-openssl-dev-dbgsym_7.52.1-4ubuntu1.4_armhf.ddeb 4e24e5e6a7c1571e8d07dc16ca6b72198d733b5f 248674 libcurl4-openssl-dev_7.52.1-4ubuntu1.4_armhf.deb Checksums-Sha256: 9dd4e59c04669199c16c4eefe5291800f5124d3f84dd059771704e697c6add94 1092 curl-dbgsym_7.52.1-4ubuntu1.4_armhf.ddeb 1772c44b97f86462cb4b3dd0c54c59fe95e9af1d95fceea92fd2aa9ab34d0c69 141688 curl_7.52.1-4ubuntu1.4_armhf.deb 5c60168de2431451a4e438de68bea84603850231ee1a0dc0448bdc3f77fa9158 4400834 libcurl3-dbg_7.52.1-4ubuntu1.4_armhf.deb a87726e56376a589b3776b27943a50ce737557d03a68397e718b980915fd9078 1208 libcurl3-dbgsym_7.52.1-4ubuntu1.4_armhf.ddeb 8b8eb352d57473657e4e0b608430b5a13f0d028386963409d6d2096c6d3724a0 1214 libcurl3-gnutls-dbgsym_7.52.1-4ubuntu1.4_armhf.ddeb f5859b24de7f8a44eb0804f8d2a81b5e7f72f79f89d55d043382dcebb95fad46 166226 libcurl3-gnutls_7.52.1-4ubuntu1.4_armhf.deb f0c4af5ec5c4b0b23edf7cf524ea490c22bf6fe02897f1cb21f3ca2df8669ada 1210 libcurl3-nss-dbgsym_7.52.1-4ubuntu1.4_armhf.ddeb eec8b196806ae17356eacfd3c035cbf1bbd73718662e5968415eab728c06e62b 171460 libcurl3-nss_7.52.1-4ubuntu1.4_armhf.deb 1374cac007cb9ff956ff6b06e7ff3d84d29dec88b5049371e93009162c7a82fe 168186 libcurl3_7.52.1-4ubuntu1.4_armhf.deb 2e7113e722ef26449b6d0dc5b828fa43c96770ff5549df9600bf0b9c6be61e17 1298 libcurl4-gnutls-dev-dbgsym_7.52.1-4ubuntu1.4_armhf.ddeb 1ac5b0331195494a5569983cc2f1896a278b9a101eb7bfab086ab087be8d471f 247410 libcurl4-gnutls-dev_7.52.1-4ubuntu1.4_armhf.deb 6a1b986d42c278bd0633a8833153e5f423d6ec74d33a5861a21d199d999d4b3a 1292 libcurl4-nss-dev-dbgsym_7.52.1-4ubuntu1.4_armhf.ddeb 1440cc43f6e082186288dc07f5af7c08ae199931742a06c9a2f0aa84880bd823 252796 libcurl4-nss-dev_7.52.1-4ubuntu1.4_armhf.deb db58ae1eb50cbacb46ab7c2ad01885558931f04dbbd7c47a7a2848b282544c34 1296 libcurl4-openssl-dev-dbgsym_7.52.1-4ubuntu1.4_armhf.ddeb db5ed43444e6b05493e9db2a0fd3f1ec4966a43b3be9931e694ea86245de5368 248674 libcurl4-openssl-dev_7.52.1-4ubuntu1.4_armhf.deb Files: bb8b59292d7c49dec39999ed04628a08 1092 web extra curl-dbgsym_7.52.1-4ubuntu1.4_armhf.ddeb dfb5eaaccb11b12809c2cf8aa8999cc3 141688 web optional curl_7.52.1-4ubuntu1.4_armhf.deb dfb239eb002d0a6d9096f5920865a97a 4400834 debug extra libcurl3-dbg_7.52.1-4ubuntu1.4_armhf.deb ddf30e27a0f196cd278ac18afd56f684 1208 libs extra libcurl3-dbgsym_7.52.1-4ubuntu1.4_armhf.ddeb 1de2c82cface71db51e7ab4c9e958877 1214 libs extra libcurl3-gnutls-dbgsym_7.52.1-4ubuntu1.4_armhf.ddeb 41201e8de71b3badcd1e1f85d739e998 166226 libs optional libcurl3-gnutls_7.52.1-4ubuntu1.4_armhf.deb 6c1eb1169ec0d00306890f579293621e 1210 libs extra libcurl3-nss-dbgsym_7.52.1-4ubuntu1.4_armhf.ddeb eacb0af72aa8be46231397905ca3e2ed 171460 libs optional libcurl3-nss_7.52.1-4ubuntu1.4_armhf.deb c2cb60574e69a62b15f3f81a0c58acb0 168186 libs optional libcurl3_7.52.1-4ubuntu1.4_armhf.deb e670594f039cee4bda4e943378088a5e 1298 libdevel extra libcurl4-gnutls-dev-dbgsym_7.52.1-4ubuntu1.4_armhf.ddeb 7f44529695e98f4b111398ae29c37d6b 247410 libdevel optional libcurl4-gnutls-dev_7.52.1-4ubuntu1.4_armhf.deb 534432c7164abb6436cd278c62a9e93e 1292 libdevel extra libcurl4-nss-dev-dbgsym_7.52.1-4ubuntu1.4_armhf.ddeb c108423a07629b707607ca766b3c0724 252796 libdevel optional libcurl4-nss-dev_7.52.1-4ubuntu1.4_armhf.deb cbcce4ecdc71f98c632f336a88e3d00c 1296 libdevel extra libcurl4-openssl-dev-dbgsym_7.52.1-4ubuntu1.4_armhf.ddeb 9c94756d3e5c6bfadc30b0742dfa2c87 248674 libdevel optional libcurl4-openssl-dev_7.52.1-4ubuntu1.4_armhf.deb Original-Maintainer: Alessandro Ghedini