Format: 1.8 Date: Tue, 01 Apr 2014 10:16:55 -0400 Source: curl Binary: curl curl-udeb libcurl3 libcurl3-udeb libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc Architecture: armhf Version: 7.32.0-1ubuntu1.4 Distribution: saucy Urgency: medium Maintainer: Ubuntu/armhf Build Daemon Changed-By: Marc Deslauriers Description: curl - command line tool for transferring data with URL syntax curl-udeb - Get a file from an HTTP, HTTPS or FTP server (udeb) libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl3-udeb - Multi-protocol file transfer library (OpenSSL) (udeb) libcurl4-doc - documentation for libcurl libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.32.0-1ubuntu1.4) saucy-security; urgency=medium . * SECURITY UPDATE: wrong re-use of connections - debian/patches/CVE-2014-0138.patch: fix possible issues with NTLM HTTP logic, and extend new connection logic to other protocols in lib/http.c, lib/url.c, lib/urldata.h, add new tests to tests/data/Makefile.am, tests/data/test1418, tests/data/test1419. - CVE-2014-0138 * SECURITY UPDATE: incorrect wildcard SSL certificate validation with literal IP addresses - debian/patches/CVE-2014-0139.patch: fix wildcard logic in lib/hostcheck.c, added tests to tests/data/Makefile.am, tests/data/test1397, tests/unit/Makefile.inc, tests/unit/unit1397.c. - CVE-2014-0139 * debian/patches/fix_test172.path: fix expired cookie causing test to fail. Checksums-Sha1: 54c93c4a3adb3b708fc004b3ab2d711742ac87b0 122568 curl_7.32.0-1ubuntu1.4_armhf.deb 79a2dd100fb0e31da887bc4e924225a0b74ce7dc 960 curl-udeb_7.32.0-1ubuntu1.4_armhf.udeb babd030473c8348f0a737555016c944debfa7172 168994 libcurl3_7.32.0-1ubuntu1.4_armhf.deb 65400a876a2ae407571c4e0648ea7c1fa2c5e6b8 840 libcurl3-udeb_7.32.0-1ubuntu1.4_armhf.udeb 23c44b918054b17e7930fffbdee5d83d4dbe61fc 161114 libcurl3-gnutls_7.32.0-1ubuntu1.4_armhf.deb 693ae768155b66fc2e352e9d433e70fe999e3c4e 167502 libcurl3-nss_7.32.0-1ubuntu1.4_armhf.deb f546542c82195a822c9073e891b91e1a59ebd1c8 272338 libcurl4-openssl-dev_7.32.0-1ubuntu1.4_armhf.deb a1952495b84823e4e2380db86265fefe0c137e52 262674 libcurl4-gnutls-dev_7.32.0-1ubuntu1.4_armhf.deb 9ed1b057e654ce80e391c38afc6e6733c4ef195a 269636 libcurl4-nss-dev_7.32.0-1ubuntu1.4_armhf.deb 55e1732e2a6de95672d9b2040a846dc7d1dc7921 3229322 libcurl3-dbg_7.32.0-1ubuntu1.4_armhf.deb Checksums-Sha256: bf38ed1843af23d99c258b9902a7a58e2be1441929a699d83a23efefeb13023d 122568 curl_7.32.0-1ubuntu1.4_armhf.deb 701701001a2a6cee1902676e0a8a44ace7167f395b8baa9fe9be4896b5405fc4 960 curl-udeb_7.32.0-1ubuntu1.4_armhf.udeb 04ec01836df203333fbb92984e9974298c9d5c2a97f3dc9f86a816aca95d0498 168994 libcurl3_7.32.0-1ubuntu1.4_armhf.deb 6acad475cdd17854cfbabf8a3c81bd817585fb15e8aa0e934ade20b2d4186331 840 libcurl3-udeb_7.32.0-1ubuntu1.4_armhf.udeb daaee9163804542c1b2b93af87ba0393d168323a704b52c7bc6b4e95cd21c38a 161114 libcurl3-gnutls_7.32.0-1ubuntu1.4_armhf.deb e2aadf6a165e15674515e4f9ef0de273da604394304faa3c02ff891b4f9e2468 167502 libcurl3-nss_7.32.0-1ubuntu1.4_armhf.deb 24ea80de1c9a22413aa930c2cd43dbf42973565c980a9867c4a6c50aa5682a92 272338 libcurl4-openssl-dev_7.32.0-1ubuntu1.4_armhf.deb a31c33f68ea8c845316fa887684cf7ed153d93831a712a24834e5018966d585a 262674 libcurl4-gnutls-dev_7.32.0-1ubuntu1.4_armhf.deb af39b42201f6765db92d0593a2b9af5d8c34865eb72999d3c0869e2ce58dde81 269636 libcurl4-nss-dev_7.32.0-1ubuntu1.4_armhf.deb 770d9b3515fb78efff59695778a7d8531fbe69ae967613b12e6f56c1c1729c1a 3229322 libcurl3-dbg_7.32.0-1ubuntu1.4_armhf.deb Files: 7cc3eecb4b8c53804da766e6677dc63c 122568 web optional curl_7.32.0-1ubuntu1.4_armhf.deb 7d057039ba420061ce1153ff0437f79b 960 debian-installer optional curl-udeb_7.32.0-1ubuntu1.4_armhf.udeb f5f4a32c760019f83af283fdd89b1e22 168994 libs optional libcurl3_7.32.0-1ubuntu1.4_armhf.deb 4080de0e88c42fca486d76f2e7ea1b46 840 debian-installer optional libcurl3-udeb_7.32.0-1ubuntu1.4_armhf.udeb ef233a99f00a69992a430b2596ed26d3 161114 libs optional libcurl3-gnutls_7.32.0-1ubuntu1.4_armhf.deb 4ca50b7f1677ae2fa8096429644ab9ac 167502 libs optional libcurl3-nss_7.32.0-1ubuntu1.4_armhf.deb 3c7baecf6d1c5c059fe15e8cc970a604 272338 libdevel optional libcurl4-openssl-dev_7.32.0-1ubuntu1.4_armhf.deb b68e448f22fb0fe6e500189349535eda 262674 libdevel optional libcurl4-gnutls-dev_7.32.0-1ubuntu1.4_armhf.deb ddd5fdb784fe99876ca878c01ccb230c 269636 libdevel optional libcurl4-nss-dev_7.32.0-1ubuntu1.4_armhf.deb fd52eccf2c9dabe16d0758d806c86ef8 3229322 debug extra libcurl3-dbg_7.32.0-1ubuntu1.4_armhf.deb Original-Maintainer: Alessandro Ghedini Package-Type: udeb