Format: 1.8 Date: Tue, 08 May 2018 13:47:34 -0400 Source: curl Binary: curl libcurl4 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl4-doc Architecture: i386 Version: 7.58.0-2ubuntu3.1 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: curl - command line tool for transferring data with URL syntax libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl4-doc - documentation for libcurl libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.58.0-2ubuntu3.1) bionic-security; urgency=medium . * SECURITY UPDATE: FTP shutdown response buffer overflow - debian/patches/CVE-2018-1000300.patch: check data size in lib/pingpong.c. - CVE-2018-1000303 * SECURITY UPDATE: RTSP bad headers buffer over-read - debian/patches/CVE-2018-1000301.patch: restore buffer pointer when bad response-line is parsed in lib/http.c. - CVE-2018-1000301 Checksums-Sha1: fb36d9fea1b85dcc7caf59bf06a10d597bb9f1b0 128036 curl-dbgsym_7.58.0-2ubuntu3.1_i386.ddeb 218680224f225b6d3db704218ef8d231e095da57 11102 curl_7.58.0-2ubuntu3.1_i386.buildinfo 596c957c20e6404bae98ee23589b94261ada45fd 162076 curl_7.58.0-2ubuntu3.1_i386.deb 493e07070e437a8287b532b4d02f314bfabaffb5 1150812 libcurl3-gnutls-dbgsym_7.58.0-2ubuntu3.1_i386.ddeb 74da0b22dfa713ee7960f5eb5cec732085f467d1 235988 libcurl3-gnutls_7.58.0-2ubuntu3.1_i386.deb 285c8135c233781f1fad3d553a96bd18365da9ca 1175448 libcurl3-nss-dbgsym_7.58.0-2ubuntu3.1_i386.ddeb 0300e5e81fcb70c2699bf076a8f02ee73b42b14b 242072 libcurl3-nss_7.58.0-2ubuntu3.1_i386.deb e9deaabeb2e8efc13a2a45ef27b548280daf7328 1170464 libcurl4-dbgsym_7.58.0-2ubuntu3.1_i386.ddeb 45a17b56b3042e518a40f204792ee67b118538ed 326364 libcurl4-gnutls-dev_7.58.0-2ubuntu3.1_i386.deb 72dc6af5e9350566980e682452a221f329bdfc0a 332736 libcurl4-nss-dev_7.58.0-2ubuntu3.1_i386.deb fffb208f35b309c9763fa99a8396838bda924f54 328256 libcurl4-openssl-dev_7.58.0-2ubuntu3.1_i386.deb 2975954eedccb0dbc697833a657ae4c8f3393fe2 238576 libcurl4_7.58.0-2ubuntu3.1_i386.deb Checksums-Sha256: abfd2da0636e469c3049ebaa34d83d6f9ed91337d90756dab7ae562bc6cb278d 128036 curl-dbgsym_7.58.0-2ubuntu3.1_i386.ddeb 3b23b5068103ebb1c6ae2acdaa3a8e17a850ab2b16904cdccf5f5f489d25618e 11102 curl_7.58.0-2ubuntu3.1_i386.buildinfo 5a2a2c6e4326507440ec1d60f2eb79ded9c87f0a0e41ccd4681ed9d87c5d95fd 162076 curl_7.58.0-2ubuntu3.1_i386.deb 572cba105d4f163acf44c28d075f8a666a19ed5b3bcbf15623305dcbe115b02e 1150812 libcurl3-gnutls-dbgsym_7.58.0-2ubuntu3.1_i386.ddeb 230f9e7d3d610488e760b390a52f6ce91f8ccdf02d4c0d8a4511477668a0c154 235988 libcurl3-gnutls_7.58.0-2ubuntu3.1_i386.deb b2f1c39817f40dc6248cc66d3a004c4bcb6d0cba6bc4f88b77b48c0c9c2a398c 1175448 libcurl3-nss-dbgsym_7.58.0-2ubuntu3.1_i386.ddeb 8fed6506c8f0159227d2dffbae4979b93d6c67f501c83ae00a683e32f7f5a10f 242072 libcurl3-nss_7.58.0-2ubuntu3.1_i386.deb fed2e65a3257dd5083bd0104ae9ef6b53c083d7456b79b8d02401dcc8069456b 1170464 libcurl4-dbgsym_7.58.0-2ubuntu3.1_i386.ddeb ef63a976a940e311fc566cce08c111ae60d0a4cb78a363963894d0c639f699bc 326364 libcurl4-gnutls-dev_7.58.0-2ubuntu3.1_i386.deb 48832e185140d6a2e7e0ef4d6b8fc598541081382ef200fe14c7fa4d11b2d219 332736 libcurl4-nss-dev_7.58.0-2ubuntu3.1_i386.deb 8a7686511920a0ca9efcc2d7e5ee431655f15b117b9d6d116d36550167a51317 328256 libcurl4-openssl-dev_7.58.0-2ubuntu3.1_i386.deb dc0d979f82a3ba28dd11bb9b8308ae74b12bd8e5b14b9de147e2629ebe26113d 238576 libcurl4_7.58.0-2ubuntu3.1_i386.deb Files: ecc382a8b280efe336fa0d341a22203d 128036 debug optional curl-dbgsym_7.58.0-2ubuntu3.1_i386.ddeb 0b493737239946541fffbd55cfb62443 11102 web optional curl_7.58.0-2ubuntu3.1_i386.buildinfo 383f8614ae3757c5d26489064316c1c8 162076 web optional curl_7.58.0-2ubuntu3.1_i386.deb 579eec73a7f08838ea3b5eeb7c5a0765 1150812 debug optional libcurl3-gnutls-dbgsym_7.58.0-2ubuntu3.1_i386.ddeb d393495090dd7b93281c93d54efb5206 235988 libs optional libcurl3-gnutls_7.58.0-2ubuntu3.1_i386.deb 4c6bd734e91b3441837593a179977af9 1175448 debug optional libcurl3-nss-dbgsym_7.58.0-2ubuntu3.1_i386.ddeb fe7c51b843b2b1ffd646534cd26bd9c4 242072 libs optional libcurl3-nss_7.58.0-2ubuntu3.1_i386.deb d31043e5f177e70e3c6ca3414e944195 1170464 debug optional libcurl4-dbgsym_7.58.0-2ubuntu3.1_i386.ddeb 6c32643baf13e8883de65c64797bce7e 326364 libdevel optional libcurl4-gnutls-dev_7.58.0-2ubuntu3.1_i386.deb 87becaefe56273f0b3eba5465a3364ef 332736 libdevel optional libcurl4-nss-dev_7.58.0-2ubuntu3.1_i386.deb 8c3f12150eced1559a538ce745e61ac1 328256 libdevel optional libcurl4-openssl-dev_7.58.0-2ubuntu3.1_i386.deb d10a2266190f4a2850aa67a73bf6927e 238576 libs optional libcurl4_7.58.0-2ubuntu3.1_i386.deb Original-Maintainer: Alessandro Ghedini