Format: 1.7 Date: Wed, 08 Jun 2011 16:51:02 -0700 Source: curl Binary: curl libcurl3 libcurl3-gnutls libcurl4-openssl-dev libcurl4-gnutls-dev libcurl3-dbg Architecture: ia64 Version: 7.18.0-1ubuntu2.3 Distribution: hardy Urgency: low Maintainer: Ubuntu/ia64 Build Daemon Changed-By: Steve Beattie Description: curl - Get a file from an HTTP, HTTPS or FTP server libcurl3 - Multi-protocol file transfer library (OpenSSL) libcurl3-dbg - libcurl compiled with debug symbols libcurl3-gnutls - Multi-protocol file transfer library (GnuTLS) libcurl4-gnutls-dev - Development files and documentation for libcurl (GnuTLS) libcurl4-openssl-dev - Development files and documentation for libcurl (OpenSSL) Changes: curl (7.18.0-1ubuntu2.3) hardy-security; urgency=low . * SECURITY UPDATE: libcurl unconditional credential delegation during GSSAPI authentication vulnerability. - debian/patches/0001-Curl_input_negotiate-do-not-delegate-credentials.patch: do not delegate credentials when doing GSSAPI authentication - CVE-2011-2192 * SECURITY UPDATE: libcurl zlib automatic decompression callback data buffer overflow - debian/patches/libcurl-contentencoding.patch: restrict amount of callback data sent to an application - CVE-2010-0734 * SECURITY UPDATE: SSL cert hostname checking bypass with NULL byte. - debian/patches/series: adjust patch ordering so that debian/patches/cert-null-cn gets applied at build time - CVE-2009-2417 Files: 0979164a40f6120c7f7c0b9f50d410c1 212036 web optional curl_7.18.0-1ubuntu2.3_ia64.deb 2ce1630105701fe34a47abebf0b47cc5 271530 libs optional libcurl3_7.18.0-1ubuntu2.3_ia64.deb 508dc48ffc11a5f26b75ac56fb8dfa77 263358 libs optional libcurl3-gnutls_7.18.0-1ubuntu2.3_ia64.deb 4ad586c7fc2b255e31be86b9edd8f02b 977990 libdevel optional libcurl4-openssl-dev_7.18.0-1ubuntu2.3_ia64.deb 4b8ae59053604f0abb10fb1388538a84 966890 libdevel optional libcurl4-gnutls-dev_7.18.0-1ubuntu2.3_ia64.deb 3f4055a3ec36c6df4b0585006c7ba41f 1063276 libdevel extra libcurl3-dbg_7.18.0-1ubuntu2.3_ia64.deb Original-Maintainer: Domenico Andreoli