Format: 1.8 Date: Wed, 29 Apr 2015 14:03:35 -0400 Source: curl Binary: curl curl-udeb libcurl3 libcurl3-udeb libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg Architecture: amd64 Version: 7.22.0-3ubuntu4.14 Distribution: precise Urgency: medium Maintainer: Ubuntu/amd64 Build Daemon Changed-By: Marc Deslauriers Description: curl - Get a file from an HTTP, HTTPS or FTP server curl-udeb - Get a file from an HTTP, HTTPS or FTP server (udeb) libcurl3 - Multi-protocol file transfer library (OpenSSL) libcurl3-dbg - libcurl compiled with debug symbols libcurl3-gnutls - Multi-protocol file transfer library (GnuTLS) libcurl3-nss - Multi-protocol file transfer library (NSS) libcurl3-udeb - Multi-protocol file transfer library (OpenSSL) (udeb) libcurl4-gnutls-dev - Development files and documentation for libcurl (GnuTLS) libcurl4-nss-dev - Development files and documentation for libcurl (NSS) libcurl4-openssl-dev - Development files and documentation for libcurl (OpenSSL) Changes: curl (7.22.0-3ubuntu4.14) precise-security; urgency=medium . * SECURITY UPDATE: NTLM connection reuse when unauthenticated - debian/patches/CVE-2015-3143.patch: require credentials to match in lib/url.c. - CVE-2015-3143 * SECURITY UPDATE: negotiate not treated as connection-oriented - debian/patches/CVE-2015-3148.patch: don't clear GSSAPI state between each exchange and close Negotiate connections when done in lib/http.c, lib/http_negotiate.c, lib/http_negotiate_sspi.c. - CVE-2015-3148 Checksums-Sha1: c10f809d0c03c5e5c6637f5f8956a5f72a33c764 137630 curl_7.22.0-3ubuntu4.14_amd64.deb 58658ac975d2161dbaa9adc293be0d9696dbabdc 83278 curl-udeb_7.22.0-3ubuntu4.14_amd64.udeb 9d25fa6c9330277fb3c500cc71c7b104a3871c3b 236054 libcurl3_7.22.0-3ubuntu4.14_amd64.deb 364e2566e7fdd42d2f9a3bb929513b009f7a6b49 140948 libcurl3-udeb_7.22.0-3ubuntu4.14_amd64.udeb a8f6bc5c4ee426553aed69a5de6e4a760af69913 227262 libcurl3-gnutls_7.22.0-3ubuntu4.14_amd64.deb 023c8b70fb2b6fa60799f775cebe13fdae0f1597 233932 libcurl3-nss_7.22.0-3ubuntu4.14_amd64.deb 9941945679067fd4f2a1e58c092fc59a6c71c1f0 1084662 libcurl4-openssl-dev_7.22.0-3ubuntu4.14_amd64.deb faf46d00e50c6167d9d56e544336ba45c9c5c8ee 1073866 libcurl4-gnutls-dev_7.22.0-3ubuntu4.14_amd64.deb 7c6cfa07dafbe2b7e101f0c95792f40040a84876 1080644 libcurl4-nss-dev_7.22.0-3ubuntu4.14_amd64.deb c0440a81d3c5765975db777870651765043ad153 49018 libcurl3-dbg_7.22.0-3ubuntu4.14_amd64.deb Checksums-Sha256: 03a05a35d4bdcfabb5682e01ff595de5b1b950e66b2e6a29bf00aca1be48cae9 137630 curl_7.22.0-3ubuntu4.14_amd64.deb c1ea0bd0817417c5cdf32a1fc23e6531454ed982ed7d59e898751692c0803f6c 83278 curl-udeb_7.22.0-3ubuntu4.14_amd64.udeb 66d2fb8d6d796d11c904fae52620134834de5bc78fac14aa7292df74094ed09b 236054 libcurl3_7.22.0-3ubuntu4.14_amd64.deb 742beff15f3f9c7ab8c95837568276526d7d79c09e737bbf16d88e4542ce5ea6 140948 libcurl3-udeb_7.22.0-3ubuntu4.14_amd64.udeb 79f508c69c5d9f796e27fb60ef975468debea78cfd396b3c4e7da75db294ada7 227262 libcurl3-gnutls_7.22.0-3ubuntu4.14_amd64.deb bf2cfe20121eb08e185f747f9720aefc0bad24b7bcc74163a151b59eed8d1a90 233932 libcurl3-nss_7.22.0-3ubuntu4.14_amd64.deb eca76fb00f3f9f92b49085c1be94d77f587817a64599d9fb6645b07c165de61b 1084662 libcurl4-openssl-dev_7.22.0-3ubuntu4.14_amd64.deb 2a03fa970decef981578b62d612ff5d3368f53bc37804b81402c854f4d2fb423 1073866 libcurl4-gnutls-dev_7.22.0-3ubuntu4.14_amd64.deb 1191217564332688b2de6e22d8f4456f0a08b848bf1b7129470c577b3fd40dcc 1080644 libcurl4-nss-dev_7.22.0-3ubuntu4.14_amd64.deb b29703116114f14fca0719f4179de014edd6b002a2b80f7e13d382131df05514 49018 libcurl3-dbg_7.22.0-3ubuntu4.14_amd64.deb Files: f5b884e66373afb2df9bda76018fdaf9 137630 web optional curl_7.22.0-3ubuntu4.14_amd64.deb 3071b62a673fbcd5a5712e007e3ed5bf 83278 debian-installer optional curl-udeb_7.22.0-3ubuntu4.14_amd64.udeb d5fdfc7c2b004b76836a5be29a261ce3 236054 libs optional libcurl3_7.22.0-3ubuntu4.14_amd64.deb 3a55c671ca70d2b4f744d61b563affa9 140948 debian-installer optional libcurl3-udeb_7.22.0-3ubuntu4.14_amd64.udeb e47fae7d67414bfe55568862526be244 227262 libs optional libcurl3-gnutls_7.22.0-3ubuntu4.14_amd64.deb 8531cd8ee479b80a1846f065f2245600 233932 libs optional libcurl3-nss_7.22.0-3ubuntu4.14_amd64.deb cc87a618f634a213c5c4f9ffe1489bca 1084662 libdevel optional libcurl4-openssl-dev_7.22.0-3ubuntu4.14_amd64.deb 43fc0263b3361e164855aeccbc7638dc 1073866 libdevel optional libcurl4-gnutls-dev_7.22.0-3ubuntu4.14_amd64.deb 51638b3e9b879502c5baaab3a9821bda 1080644 libdevel optional libcurl4-nss-dev_7.22.0-3ubuntu4.14_amd64.deb 45fa56bdcbd699d2fd518a38a37ef258 49018 debug extra libcurl3-dbg_7.22.0-3ubuntu4.14_amd64.deb Original-Maintainer: Ramakrishnan Muthukrishnan Package-Type: udeb