Format: 1.8 Date: Wed, 29 Nov 2023 14:21:53 -0500 Source: curl Binary: curl libcurl3-gnutls libcurl3-nss libcurl4 libcurl4-gnutls-dev libcurl4-nss-dev libcurl4-openssl-dev Built-For-Profiles: noudeb Architecture: i386 Version: 7.88.1-8ubuntu2.4 Distribution: lunar Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: curl - command line tool for transferring data with URL syntax libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.88.1-8ubuntu2.4) lunar-security; urgency=medium . * SECURITY UPDATE: cookie mixed case PSL bypass - debian/patches/CVE-2023-46218.patch: lowercase the domain names before PSL checks in lib/cookie.c. - CVE-2023-46218 * SECURITY UPDATE: HSTS long file name clears contents - debian/patches/CVE-2023-46219.patch: create short(er) temporary file name in lib/fopen.c. - CVE-2023-46219 Checksums-Sha1: 05d4dbd7d6d4e88ce17cd84251a7358ec46f8e7b 145028 curl-dbgsym_7.88.1-8ubuntu2.4_i386.ddeb c8809525cb8a8486b2692677e8205ba5b0210da7 12153 curl_7.88.1-8ubuntu2.4_i386.buildinfo 17469ff2d4a969bc8ee4fa31aa384b2c3a681186 216862 curl_7.88.1-8ubuntu2.4_i386.deb 4ddccdc47ff289501f41d229e2ff8359d989900d 898974 libcurl3-gnutls-dbgsym_7.88.1-8ubuntu2.4_i386.ddeb 10ee2fa77f7b78b5e979746785ce18ce5510396c 333980 libcurl3-gnutls_7.88.1-8ubuntu2.4_i386.deb 982efff26933191e949137dde710bc19dc1b4e09 941386 libcurl3-nss-dbgsym_7.88.1-8ubuntu2.4_i386.ddeb 2d636caf21d052b72e1e407b74949da3805166bf 342316 libcurl3-nss_7.88.1-8ubuntu2.4_i386.deb 21d7b7f144610d96abe42f73458c79fe9ed89ee3 921736 libcurl4-dbgsym_7.88.1-8ubuntu2.4_i386.ddeb 1b06b5ebf7e50892f646e4cc24be3d3d575f4702 455952 libcurl4-gnutls-dev_7.88.1-8ubuntu2.4_i386.deb 13802cd0714a0126df26aaa65998129bf16144fd 465338 libcurl4-nss-dev_7.88.1-8ubuntu2.4_i386.deb 527e934ee79a107450ea41550c39255c32e31bf0 463730 libcurl4-openssl-dev_7.88.1-8ubuntu2.4_i386.deb 85be3d049b2f01c97a141f4ddb901c24fdb80633 340306 libcurl4_7.88.1-8ubuntu2.4_i386.deb Checksums-Sha256: fe06078ac7ba5330f164da7835ce5790ae7cf87dc13a2055af6918046b1138aa 145028 curl-dbgsym_7.88.1-8ubuntu2.4_i386.ddeb 4ee0b5ad98b63a1f44181b8c5a92cabc8eee021db9c3b536dbe628734ded488e 12153 curl_7.88.1-8ubuntu2.4_i386.buildinfo 27a6c3d6ae05835deecdcbf424cc90196ad055d3c28c4188634395c55a61c595 216862 curl_7.88.1-8ubuntu2.4_i386.deb 997e1f476be6a338b8c1210311c1ace5159fa21b9640012742e3f9ffe5d43926 898974 libcurl3-gnutls-dbgsym_7.88.1-8ubuntu2.4_i386.ddeb f66a6778b18f8870dcd09b615314b0e551e830416a36e56fa0f76e9c4fc84314 333980 libcurl3-gnutls_7.88.1-8ubuntu2.4_i386.deb f2bf043a69d808abf6780aada3c1587dfda9b4ea64d670f6d2c5775d52a69fe8 941386 libcurl3-nss-dbgsym_7.88.1-8ubuntu2.4_i386.ddeb b89b6cad381b939ff2d9df65be6145ba42b60d3b769cee721d4f85d43a08ff76 342316 libcurl3-nss_7.88.1-8ubuntu2.4_i386.deb b9520a1f27a655a90ca725f8c5ccbaad08f002282e196ae36b25ed1dae1d4d10 921736 libcurl4-dbgsym_7.88.1-8ubuntu2.4_i386.ddeb 78ce24218545eb55c6845191b4693c12a38c245679e6d3f397c4c22e9db0ba36 455952 libcurl4-gnutls-dev_7.88.1-8ubuntu2.4_i386.deb a66ba9cf6423587628cf4fed36ae163d430bbf4f542e4ef0b1f513f279b5e96c 465338 libcurl4-nss-dev_7.88.1-8ubuntu2.4_i386.deb 4fceaea60b3e16ce584d7680818cdbae69eb2a32058c9ea55545713a55c52c49 463730 libcurl4-openssl-dev_7.88.1-8ubuntu2.4_i386.deb 50dc00bcc67f6fb4611fc806ec9432515c04c2488795780d1775055863dbfcaf 340306 libcurl4_7.88.1-8ubuntu2.4_i386.deb Files: 3d44af28ce78584a0a6ab8a5efa122c3 145028 debug optional curl-dbgsym_7.88.1-8ubuntu2.4_i386.ddeb de86a73218e1a5f998838ef0edbf7dc3 12153 web optional curl_7.88.1-8ubuntu2.4_i386.buildinfo d4a8f67b7ca56c8b46d04a2a88dc245c 216862 web optional curl_7.88.1-8ubuntu2.4_i386.deb d98508cd6ddc52f91d649414db737700 898974 debug optional libcurl3-gnutls-dbgsym_7.88.1-8ubuntu2.4_i386.ddeb c7785baaa434224f5a249ea647b5bf3f 333980 libs optional libcurl3-gnutls_7.88.1-8ubuntu2.4_i386.deb a23fed532866d3cdddc4391813552ff4 941386 debug optional libcurl3-nss-dbgsym_7.88.1-8ubuntu2.4_i386.ddeb b4aa801adb9d5d920768495aa863bdfd 342316 libs optional libcurl3-nss_7.88.1-8ubuntu2.4_i386.deb 189b8db8fd81c992bdcd585b636e8929 921736 debug optional libcurl4-dbgsym_7.88.1-8ubuntu2.4_i386.ddeb 17368176083bed3468ba6fa086f275f0 455952 libdevel optional libcurl4-gnutls-dev_7.88.1-8ubuntu2.4_i386.deb 1c73c44ec99d3569859640271ca90a17 465338 libdevel optional libcurl4-nss-dev_7.88.1-8ubuntu2.4_i386.deb 0de2409ea21e4891e848c715550d5b06 463730 libdevel optional libcurl4-openssl-dev_7.88.1-8ubuntu2.4_i386.deb 1a679ceefe3cbf80a6d4e6b5847a19d4 340306 libs optional libcurl4_7.88.1-8ubuntu2.4_i386.deb Original-Maintainer: Alessandro Ghedini