Format: 1.8 Date: Wed, 29 Nov 2023 14:21:53 -0500 Source: curl Binary: curl libcurl3-gnutls libcurl3-nss libcurl4 libcurl4-gnutls-dev libcurl4-nss-dev libcurl4-openssl-dev Built-For-Profiles: noudeb Architecture: riscv64 Version: 7.88.1-8ubuntu2.4 Distribution: lunar Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: curl - command line tool for transferring data with URL syntax libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.88.1-8ubuntu2.4) lunar-security; urgency=medium . * SECURITY UPDATE: cookie mixed case PSL bypass - debian/patches/CVE-2023-46218.patch: lowercase the domain names before PSL checks in lib/cookie.c. - CVE-2023-46218 * SECURITY UPDATE: HSTS long file name clears contents - debian/patches/CVE-2023-46219.patch: create short(er) temporary file name in lib/fopen.c. - CVE-2023-46219 Checksums-Sha1: 5e1e7dd06b694347e7c92353570bac99b452e5a4 162414 curl-dbgsym_7.88.1-8ubuntu2.4_riscv64.ddeb fe757465df094c11b96c29c6433973affb3a8a80 12910 curl_7.88.1-8ubuntu2.4_riscv64.buildinfo 1790ca43d3e8476f08d01b1a44bf82debe7d20ea 202704 curl_7.88.1-8ubuntu2.4_riscv64.deb 83aafe723a741b2b7bb10c15c03bee169a0dd300 991606 libcurl3-gnutls-dbgsym_7.88.1-8ubuntu2.4_riscv64.ddeb 33c9515cafb2ff5be486b6c82f8a3119e77bad0d 265470 libcurl3-gnutls_7.88.1-8ubuntu2.4_riscv64.deb e6b12b62758f4ed51a6c89ce97a941f0e28ad7fe 1035798 libcurl3-nss-dbgsym_7.88.1-8ubuntu2.4_riscv64.ddeb dc2fcffdcd7999ebb7d0c4ed5b7e54bdd5480a34 276062 libcurl3-nss_7.88.1-8ubuntu2.4_riscv64.deb 219a037693ffe032eb7ce6a6f92d33b9449b2b78 1017014 libcurl4-dbgsym_7.88.1-8ubuntu2.4_riscv64.ddeb eea0cbc314c540a5a8d4815fb89f0d10850c20fb 875022 libcurl4-gnutls-dev_7.88.1-8ubuntu2.4_riscv64.deb 5c1e96c88b6d3061b118b94b99f7f17dbea7c2bd 897598 libcurl4-nss-dev_7.88.1-8ubuntu2.4_riscv64.deb 58fafd41bccce78908e1e5ca1b4659ce16f44b84 889792 libcurl4-openssl-dev_7.88.1-8ubuntu2.4_riscv64.deb 285e726af4201d6387fca8977b63cae6aaab9c66 272086 libcurl4_7.88.1-8ubuntu2.4_riscv64.deb Checksums-Sha256: 25737f9192dda6941ddafa5e3d31f68f1321b727a66e693326af8439a9fb7c59 162414 curl-dbgsym_7.88.1-8ubuntu2.4_riscv64.ddeb 81c4cbb88a7a5fcf1b7470880e2a3d5d2b3c2a3db29cfa9b0509bcf09a5b4879 12910 curl_7.88.1-8ubuntu2.4_riscv64.buildinfo 1c1fc7615dcb619292af4871eb7cd94c0366fdda748da16c93efc2c1b7323a4d 202704 curl_7.88.1-8ubuntu2.4_riscv64.deb 638a8e499f6eee923b1568d46311212d49f0b804c539d1b3a97ae9e4a97280e2 991606 libcurl3-gnutls-dbgsym_7.88.1-8ubuntu2.4_riscv64.ddeb fb4ebb41ff5a2352077597a79202c7c482c894996f3285271aeacffb42b5e495 265470 libcurl3-gnutls_7.88.1-8ubuntu2.4_riscv64.deb d1fe17c9b8f818f12ec262f70e7fc447e25b86841d967643a854198493fe08fd 1035798 libcurl3-nss-dbgsym_7.88.1-8ubuntu2.4_riscv64.ddeb d2d1b032e0eef6b703641e8cae75b12f6e89a5278dc4cc4fd4732a73f8ce671b 276062 libcurl3-nss_7.88.1-8ubuntu2.4_riscv64.deb 7024735dd42a3218fb7ce3eb7b41db70fd87ce561aa1b718ad0e4274690745cc 1017014 libcurl4-dbgsym_7.88.1-8ubuntu2.4_riscv64.ddeb d922f3df0b8eb7580a2887978fb456d658b6c56f3468b5867e1c342f8bd09ade 875022 libcurl4-gnutls-dev_7.88.1-8ubuntu2.4_riscv64.deb 3d91c8d25942bc6e8db15fb17e784c4bb42beda524c154022ac7abad316a404d 897598 libcurl4-nss-dev_7.88.1-8ubuntu2.4_riscv64.deb 397f3fdd0c191eb212ee1d1f4b55abad1005dd17943f73e1f19b2de0867d7039 889792 libcurl4-openssl-dev_7.88.1-8ubuntu2.4_riscv64.deb f2ccd4f843d51b3c35149227e68c55e96415364e44213267fd8f077a76dba57a 272086 libcurl4_7.88.1-8ubuntu2.4_riscv64.deb Files: 77721f27dbcfd6bb87c782cab57bb739 162414 debug optional curl-dbgsym_7.88.1-8ubuntu2.4_riscv64.ddeb f2877a0458f832fc52c29f49620cae03 12910 web optional curl_7.88.1-8ubuntu2.4_riscv64.buildinfo 1e94daab831e463d8463d531131a5a90 202704 web optional curl_7.88.1-8ubuntu2.4_riscv64.deb c40a26f2cd97beddd255e44caefa7e10 991606 debug optional libcurl3-gnutls-dbgsym_7.88.1-8ubuntu2.4_riscv64.ddeb 0c61f14222465d659572aa42ac22d138 265470 libs optional libcurl3-gnutls_7.88.1-8ubuntu2.4_riscv64.deb db5e589c09871d17fb320d23d238a3c6 1035798 debug optional libcurl3-nss-dbgsym_7.88.1-8ubuntu2.4_riscv64.ddeb ea3c18e6e1867568685a63a9b6bee112 276062 libs optional libcurl3-nss_7.88.1-8ubuntu2.4_riscv64.deb 0aeb28f80e94df21fafd8324ba1d8e06 1017014 debug optional libcurl4-dbgsym_7.88.1-8ubuntu2.4_riscv64.ddeb 1eb7061a04715456c44e2b5097715631 875022 libdevel optional libcurl4-gnutls-dev_7.88.1-8ubuntu2.4_riscv64.deb 302b993e6f8190846cf264848cd8fcf8 897598 libdevel optional libcurl4-nss-dev_7.88.1-8ubuntu2.4_riscv64.deb 9a73547ad39e13906ef86a223130d397 889792 libdevel optional libcurl4-openssl-dev_7.88.1-8ubuntu2.4_riscv64.deb 879c0a46332d03169906b1400862b541 272086 libs optional libcurl4_7.88.1-8ubuntu2.4_riscv64.deb Original-Maintainer: Alessandro Ghedini