Format: 1.8 Date: Wed, 29 Apr 2015 14:03:35 -0400 Source: curl Binary: curl curl-udeb libcurl3 libcurl3-udeb libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg Architecture: armhf Version: 7.22.0-3ubuntu4.14 Distribution: precise Urgency: medium Maintainer: Ubuntu/armhf Build Daemon Changed-By: Marc Deslauriers Description: curl - Get a file from an HTTP, HTTPS or FTP server curl-udeb - Get a file from an HTTP, HTTPS or FTP server (udeb) libcurl3 - Multi-protocol file transfer library (OpenSSL) libcurl3-dbg - libcurl compiled with debug symbols libcurl3-gnutls - Multi-protocol file transfer library (GnuTLS) libcurl3-nss - Multi-protocol file transfer library (NSS) libcurl3-udeb - Multi-protocol file transfer library (OpenSSL) (udeb) libcurl4-gnutls-dev - Development files and documentation for libcurl (GnuTLS) libcurl4-nss-dev - Development files and documentation for libcurl (NSS) libcurl4-openssl-dev - Development files and documentation for libcurl (OpenSSL) Changes: curl (7.22.0-3ubuntu4.14) precise-security; urgency=medium . * SECURITY UPDATE: NTLM connection reuse when unauthenticated - debian/patches/CVE-2015-3143.patch: require credentials to match in lib/url.c. - CVE-2015-3143 * SECURITY UPDATE: negotiate not treated as connection-oriented - debian/patches/CVE-2015-3148.patch: don't clear GSSAPI state between each exchange and close Negotiate connections when done in lib/http.c, lib/http_negotiate.c, lib/http_negotiate_sspi.c. - CVE-2015-3148 Checksums-Sha1: e978d3a34dff14e3a1f723b4b6580e50f90946c4 134140 curl_7.22.0-3ubuntu4.14_armhf.deb e916b070c0e7a89b5b7f732742e3b9ccf9eee2f6 80010 curl-udeb_7.22.0-3ubuntu4.14_armhf.udeb 29f2e4f8c6c3b91de1253c1c1d8a1908c8c6727d 209298 libcurl3_7.22.0-3ubuntu4.14_armhf.deb 5a9aa185ad512a67d75b63a3b346be63aeff0269 119426 libcurl3-udeb_7.22.0-3ubuntu4.14_armhf.udeb 63c52c7d3b252052ee957a5f4c426292b6cada72 201792 libcurl3-gnutls_7.22.0-3ubuntu4.14_armhf.deb 0232fa82dd3520bcbd5b8b15ac716908bd7b7cde 208344 libcurl3-nss_7.22.0-3ubuntu4.14_armhf.deb 51ccd7fa579d51f9d6bfcc6b8435a63fbdb7aac6 1021610 libcurl4-openssl-dev_7.22.0-3ubuntu4.14_armhf.deb 4ee8d8c8b69ee79ac1b7aca500fc739302ff06f2 1012056 libcurl4-gnutls-dev_7.22.0-3ubuntu4.14_armhf.deb 690581c116e8fa775f52ab50eb04c33566805f1d 1020328 libcurl4-nss-dev_7.22.0-3ubuntu4.14_armhf.deb 00612437eb185b1022554dfc20c6801a3c59edc2 59164 libcurl3-dbg_7.22.0-3ubuntu4.14_armhf.deb Checksums-Sha256: aa22d3700431f9896fc6524496e806b8bff24335cb129ff16588b3143afd98a9 134140 curl_7.22.0-3ubuntu4.14_armhf.deb c365aef9e180dfdb5b2f6f877db87196addcfe9d1fe24dfe1cef29d9bf045b88 80010 curl-udeb_7.22.0-3ubuntu4.14_armhf.udeb 8fdf2d8b5b760da8ac16bc78336037deb25b54b2cf76964dac276a3ac3d41476 209298 libcurl3_7.22.0-3ubuntu4.14_armhf.deb d276cf8d4627ff8cce8dbd3ac3d3047f87e482fd0ebc7d3a39b86efc1300298c 119426 libcurl3-udeb_7.22.0-3ubuntu4.14_armhf.udeb 6c30b32b7a2f2e8f3fbf826354af12849cade3625d1f39f88d30ae8ee682acb9 201792 libcurl3-gnutls_7.22.0-3ubuntu4.14_armhf.deb f208fcadd26b895d566cb58481d9219413caaa0767d52536eb61410f43e650c5 208344 libcurl3-nss_7.22.0-3ubuntu4.14_armhf.deb f5547862525775f588147d0a0007a032592cf8e922a130527e354b892af459e0 1021610 libcurl4-openssl-dev_7.22.0-3ubuntu4.14_armhf.deb d0582754e0a34f0e03117580104dc713e9a2d6590bb75c564e38cb46aee22014 1012056 libcurl4-gnutls-dev_7.22.0-3ubuntu4.14_armhf.deb 5ef5b30c96ab9674ebdf627292ca63009bb893664040efd5bd5e6ed4d860ed05 1020328 libcurl4-nss-dev_7.22.0-3ubuntu4.14_armhf.deb 135156da3bb1d8c2a6cf0c059c088c4c59faf497c048202383d370d7c388a448 59164 libcurl3-dbg_7.22.0-3ubuntu4.14_armhf.deb Files: f62ecc057edf0e591731a7c5e0d550ba 134140 web optional curl_7.22.0-3ubuntu4.14_armhf.deb ca22bbedc56ba8d746b068c3822f3fd5 80010 debian-installer optional curl-udeb_7.22.0-3ubuntu4.14_armhf.udeb ace7629267bc9f057763f1db4470b22d 209298 libs optional libcurl3_7.22.0-3ubuntu4.14_armhf.deb abce86a9f06564db962bb1c244ee3b7d 119426 debian-installer optional libcurl3-udeb_7.22.0-3ubuntu4.14_armhf.udeb ea466ee5f59b1dfde348c70491743633 201792 libs optional libcurl3-gnutls_7.22.0-3ubuntu4.14_armhf.deb 1c7c83f547034bba615b8cec30cfff46 208344 libs optional libcurl3-nss_7.22.0-3ubuntu4.14_armhf.deb dbe97ae5fc207b01c8e1c48851309366 1021610 libdevel optional libcurl4-openssl-dev_7.22.0-3ubuntu4.14_armhf.deb 8784271589864731778cd9bb2ba221ee 1012056 libdevel optional libcurl4-gnutls-dev_7.22.0-3ubuntu4.14_armhf.deb 2fb08073c093d0cd619a09598c54faef 1020328 libdevel optional libcurl4-nss-dev_7.22.0-3ubuntu4.14_armhf.deb 8180814c52935bedf6ca967bc93c4e2f 59164 debug extra libcurl3-dbg_7.22.0-3ubuntu4.14_armhf.deb Original-Maintainer: Ramakrishnan Muthukrishnan Package-Type: udeb