Format: 1.7 Date: Wed, 08 Jun 2011 16:51:02 -0700 Source: curl Binary: curl libcurl3 libcurl3-gnutls libcurl4-openssl-dev libcurl4-gnutls-dev libcurl3-dbg Architecture: amd64 Version: 7.18.0-1ubuntu2.3 Distribution: hardy Urgency: low Maintainer: Ubuntu/amd64 Build Daemon Changed-By: Steve Beattie Description: curl - Get a file from an HTTP, HTTPS or FTP server libcurl3 - Multi-protocol file transfer library (OpenSSL) libcurl3-dbg - libcurl compiled with debug symbols libcurl3-gnutls - Multi-protocol file transfer library (GnuTLS) libcurl4-gnutls-dev - Development files and documentation for libcurl (GnuTLS) libcurl4-openssl-dev - Development files and documentation for libcurl (OpenSSL) Changes: curl (7.18.0-1ubuntu2.3) hardy-security; urgency=low . * SECURITY UPDATE: libcurl unconditional credential delegation during GSSAPI authentication vulnerability. - debian/patches/0001-Curl_input_negotiate-do-not-delegate-credentials.patch: do not delegate credentials when doing GSSAPI authentication - CVE-2011-2192 * SECURITY UPDATE: libcurl zlib automatic decompression callback data buffer overflow - debian/patches/libcurl-contentencoding.patch: restrict amount of callback data sent to an application - CVE-2010-0734 * SECURITY UPDATE: SSL cert hostname checking bypass with NULL byte. - debian/patches/series: adjust patch ordering so that debian/patches/cert-null-cn gets applied at build time - CVE-2009-2417 Files: fc802d6d99d03d28e62d1c555f63cfe1 199042 web optional curl_7.18.0-1ubuntu2.3_amd64.deb d00eae4ca769c9c2fe6a2bfe051225b8 210316 libs optional libcurl3_7.18.0-1ubuntu2.3_amd64.deb 14f64a366683e1a085899ae3ced612a5 203604 libs optional libcurl3-gnutls_7.18.0-1ubuntu2.3_amd64.deb 7c9bb16363f615e32b891542bdf2ae84 912448 libdevel optional libcurl4-openssl-dev_7.18.0-1ubuntu2.3_amd64.deb 7f3a250cfedea498abed60294dcaeb41 904548 libdevel optional libcurl4-gnutls-dev_7.18.0-1ubuntu2.3_amd64.deb 79ff5a7f1137fc57e0868b5f7a623e8e 1060362 libdevel extra libcurl3-dbg_7.18.0-1ubuntu2.3_amd64.deb Original-Maintainer: Domenico Andreoli