Format: 1.8 Date: Wed, 29 Apr 2015 14:03:35 -0400 Source: curl Binary: curl curl-udeb libcurl3 libcurl3-udeb libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg Architecture: i386 Version: 7.22.0-3ubuntu4.14 Distribution: precise Urgency: medium Maintainer: Ubuntu/amd64 Build Daemon Changed-By: Marc Deslauriers Description: curl - Get a file from an HTTP, HTTPS or FTP server curl-udeb - Get a file from an HTTP, HTTPS or FTP server (udeb) libcurl3 - Multi-protocol file transfer library (OpenSSL) libcurl3-dbg - libcurl compiled with debug symbols libcurl3-gnutls - Multi-protocol file transfer library (GnuTLS) libcurl3-nss - Multi-protocol file transfer library (NSS) libcurl3-udeb - Multi-protocol file transfer library (OpenSSL) (udeb) libcurl4-gnutls-dev - Development files and documentation for libcurl (GnuTLS) libcurl4-nss-dev - Development files and documentation for libcurl (NSS) libcurl4-openssl-dev - Development files and documentation for libcurl (OpenSSL) Changes: curl (7.22.0-3ubuntu4.14) precise-security; urgency=medium . * SECURITY UPDATE: NTLM connection reuse when unauthenticated - debian/patches/CVE-2015-3143.patch: require credentials to match in lib/url.c. - CVE-2015-3143 * SECURITY UPDATE: negotiate not treated as connection-oriented - debian/patches/CVE-2015-3148.patch: don't clear GSSAPI state between each exchange and close Negotiate connections when done in lib/http.c, lib/http_negotiate.c, lib/http_negotiate_sspi.c. - CVE-2015-3148 Checksums-Sha1: cd90802209cd6c93b45b688fbad20b1427f2e33d 137482 curl_7.22.0-3ubuntu4.14_i386.deb 8c17e117d335977f844297b86bbd3b10f0f90cbd 83122 curl-udeb_7.22.0-3ubuntu4.14_i386.udeb 206a3520981b3f50d04b0c71a29e7a44d6b9c10c 241656 libcurl3_7.22.0-3ubuntu4.14_i386.deb 6201700444a1fe44048e4646b79e1621a4e06670 144608 libcurl3-udeb_7.22.0-3ubuntu4.14_i386.udeb cdb8f8db020ad67e0b80de5279fa8e3d8be22b8d 232090 libcurl3-gnutls_7.22.0-3ubuntu4.14_i386.deb 767de5258206b2fb1bc2b66bc9288be35b4318be 238106 libcurl3-nss_7.22.0-3ubuntu4.14_i386.deb f9345bf0134658498fb2f163109b388799fcb829 1051582 libcurl4-openssl-dev_7.22.0-3ubuntu4.14_i386.deb 8b47c90e48a1fae2a3647a99111f1348738f4b19 1043570 libcurl4-gnutls-dev_7.22.0-3ubuntu4.14_i386.deb 46ab19dc3d470066a2a5c9b3ed21fd20cf160700 1048850 libcurl4-nss-dev_7.22.0-3ubuntu4.14_i386.deb d3557a16d32d1a8739b701fe7646b87733b810c8 55156 libcurl3-dbg_7.22.0-3ubuntu4.14_i386.deb Checksums-Sha256: ca81dc6ceeeb3dfb4398f9824160d0252187d7d2ba35eed5ecd41ce676211293 137482 curl_7.22.0-3ubuntu4.14_i386.deb 310a030255b76389901ea62ca7a6aa3161a5e85b528b35aa592346e295f48188 83122 curl-udeb_7.22.0-3ubuntu4.14_i386.udeb 1db1a0138c4f065058703261394c56fadb86d8d9a224a8d80db3f4a8accd9bd1 241656 libcurl3_7.22.0-3ubuntu4.14_i386.deb a1cfa3872231d2d16ccb736e53921c4c46b5d69654912f984bf00a482fdf3d89 144608 libcurl3-udeb_7.22.0-3ubuntu4.14_i386.udeb 394058b67a5ab5a2ebbccfc41ccb613c64a677dc5385c9088d89283e22cba093 232090 libcurl3-gnutls_7.22.0-3ubuntu4.14_i386.deb a8cb4da8ae3b8de439c2af5d325f34a1f82e6109a9e6ead15607c560096402b1 238106 libcurl3-nss_7.22.0-3ubuntu4.14_i386.deb a7333d40d3714dbd22eb81d4247059a87e151d9a55a071e92af765c68f1acce9 1051582 libcurl4-openssl-dev_7.22.0-3ubuntu4.14_i386.deb 47ef327adfb22ed02441f670e6142f67033db178ad5f36460a63c727af88e762 1043570 libcurl4-gnutls-dev_7.22.0-3ubuntu4.14_i386.deb 5c4af6856adbdb81f7fc71163a550d087b72dc13f96da90f58003efb2d2e027b 1048850 libcurl4-nss-dev_7.22.0-3ubuntu4.14_i386.deb c894f2bddca37a43a0bd20857593c68241912d05c9bbd6b3f7c5d178c4fb6f23 55156 libcurl3-dbg_7.22.0-3ubuntu4.14_i386.deb Files: a0af1cdec8861d43cd76f1d10f90744d 137482 web optional curl_7.22.0-3ubuntu4.14_i386.deb 7bb4534d8758afbe4bd7980f77167e49 83122 debian-installer optional curl-udeb_7.22.0-3ubuntu4.14_i386.udeb c47f4f26e0d0d472a360ab66157b33ba 241656 libs optional libcurl3_7.22.0-3ubuntu4.14_i386.deb 7f2a23516cd1c13561931d1e7bb81528 144608 debian-installer optional libcurl3-udeb_7.22.0-3ubuntu4.14_i386.udeb c3e5c2c1f08529f7108e758ca2aea22e 232090 libs optional libcurl3-gnutls_7.22.0-3ubuntu4.14_i386.deb a11c8bf849160de386065a6d0231ea33 238106 libs optional libcurl3-nss_7.22.0-3ubuntu4.14_i386.deb 0d7535476164efed29cf8c1c3be95200 1051582 libdevel optional libcurl4-openssl-dev_7.22.0-3ubuntu4.14_i386.deb 3e2bf3659f1aafb923d1610c09d91929 1043570 libdevel optional libcurl4-gnutls-dev_7.22.0-3ubuntu4.14_i386.deb c4c21f07ac192966a90d3138a0162208 1048850 libdevel optional libcurl4-nss-dev_7.22.0-3ubuntu4.14_i386.deb e853d5a4663d2ba11db49cce064ff3bd 55156 debug extra libcurl3-dbg_7.22.0-3ubuntu4.14_i386.deb Original-Maintainer: Ramakrishnan Muthukrishnan Package-Type: udeb