Accepted curl 7.36.0-1 (source amd64 all)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sun, 30 Mar 2014 15:36:35 +0200
Source: curl
Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc
Architecture: source amd64 all
Version: 7.36.0-1
Distribution: unstable
Urgency: high
Maintainer: Alessandro Ghedini <ghedo@debian.org>
Changed-By: Alessandro Ghedini <ghedo@debian.org>
Description:
curl - command line tool for transferring data with URL syntax
libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour)
libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours)
libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour)
libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour)
libcurl4-doc - documentation for libcurl
libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour)
libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour)
libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour)
Closes: 742728
Changes:
curl (7.36.0-1) unstable; urgency=high
.
* New upstream release (Closes: #742728)
- Fix connection re-use when using different log-in credentials
as per CVE-2014-0138
http://curl.haxx.se/docs/adv_20140326A.html
- Reject IP address wildcard matches as per CVE-2014-0139
http://curl.haxx.se/docs/adv_20140326B.html
- Set urgency=high accordingly
* Add 08_fix-imap-tests.patch to fix tests broken by the fix for CVE-2014-0138
Checksums-Sha1:
ba7b79e8187076b7181e0ea69e508f75e31d65e4 2531 curl_7.36.0-1.dsc
35e9fb187c7512ee0206aad8ffeb4cdbf3ed80b2 3564934 curl_7.36.0.orig.tar.gz
39a3b8758080c8da0d411040b9f6aecd0960abc3 25168 curl_7.36.0-1.debian.tar.xz
5205df4b4a3ac65e9caed898f3247b732543b4f4 196000 curl_7.36.0-1_amd64.deb
b80dcb6a8e751e30f839d99f3f0446c59ed24ba8 252702 libcurl3_7.36.0-1_amd64.deb
b2f7d9b033c9f95e13b5789408ab6f125f1500a9 244836 libcurl3-gnutls_7.36.0-1_amd64.deb
970eb90c1b5c6ac573107e50c5f38f02c037feff 254944 libcurl3-nss_7.36.0-1_amd64.deb
05366b308c8cc352938e323ebe5b52c1e7e84598 328192 libcurl4-openssl-dev_7.36.0-1_amd64.deb
ea5493fd98a07a16145c7071cdc68dda4b090bd5 320042 libcurl4-gnutls-dev_7.36.0-1_amd64.deb
01f9599ab5c3b258faf3007a798306a9e8be2b80 331034 libcurl4-nss-dev_7.36.0-1_amd64.deb
66114c3cdbd4b3efcd295b3dcbc1d9093104e3a7 3540590 libcurl3-dbg_7.36.0-1_amd64.deb
5bb1eb918efb74ac4abcb1c62253c22d925a7adc 1002088 libcurl4-doc_7.36.0-1_all.deb
Checksums-Sha256:
47fb41b06ceb22c8509ba378b817a437d0f9cba0279c4b455c674697ba42d25d 2531 curl_7.36.0-1.dsc
33015795d5650a2bfdd9a4a28ce4317cef944722a5cfca0d1563db8479840e90 3564934 curl_7.36.0.orig.tar.gz
c01374cf15713a79d3fed9fb37389188405217facce7ea0be07bdf9c71e961f0 25168 curl_7.36.0-1.debian.tar.xz
f43f16bc15503448eec7d0614cd0a1f67a9f08bdab42d4b99364892ae0da3f8a 196000 curl_7.36.0-1_amd64.deb
b2002bf329dc40f7940877969a491106433e015f29d702b8d3fa9e3228f58698 252702 libcurl3_7.36.0-1_amd64.deb
b56b40229055552d4b5fc1df708791c3e35e3e8487fda217d6afc16a677d83a6 244836 libcurl3-gnutls_7.36.0-1_amd64.deb
8a655d2c0585f33dcb359bcfec5c4d0cded45c123f7489ab355916813e82908b 254944 libcurl3-nss_7.36.0-1_amd64.deb
ac7a2b1f2499c09cdcd906db6e2f1b59959b449131d0bc2ba31809ee6cf06797 328192 libcurl4-openssl-dev_7.36.0-1_amd64.deb
360ba834ba98c81bf755254cb7ff4a3e6cc6701caa551cf97a54822e2723c517 320042 libcurl4-gnutls-dev_7.36.0-1_amd64.deb
ffb9ddc6f19d98acbd4bc386300f6eb055b416cbd90829ac571a6a9d12023bbb 331034 libcurl4-nss-dev_7.36.0-1_amd64.deb
cbd5f9d8587bda1eb1fbbb225f7c1c2a53224c6d1761708ad452b65238533071 3540590 libcurl3-dbg_7.36.0-1_amd64.deb
6610a7570cd46fdccc354bf9dbe0a8d30c33a79f3815244180ae807653b80658 1002088 libcurl4-doc_7.36.0-1_all.deb
Files:
7b830175f87e4b9cf91ccbbe673cf8bb 2531 web optional curl_7.36.0-1.dsc
643a7030b27449e76413d501d4b8eb57 3564934 web optional curl_7.36.0.orig.tar.gz
13fde822eefbb5e236649195e50029ed 25168 web optional curl_7.36.0-1.debian.tar.xz
6f05054060774536cae3aedbd020ff55 196000 web optional curl_7.36.0-1_amd64.deb
8a6cf42af773180848c709007943ea39 252702 libs optional libcurl3_7.36.0-1_amd64.deb
d3123ebdb19371297a7524ffd9894614 244836 libs optional libcurl3-gnutls_7.36.0-1_amd64.deb
9deba2538a8020831a41ef5ca883f91c 254944 libs optional libcurl3-nss_7.36.0-1_amd64.deb
9c9847532a6a44b11e134a4c4e02251f 328192 libdevel optional libcurl4-openssl-dev_7.36.0-1_amd64.deb
e3d4679111462b3e9c19176622b61804 320042 libdevel optional libcurl4-gnutls-dev_7.36.0-1_amd64.deb
22ef7d39670eb3271e91b1ffd3bf8b8d 331034 libdevel optional libcurl4-nss-dev_7.36.0-1_amd64.deb
866facfd7efea7befb7d93448bffe64f 3540590 debug extra libcurl3-dbg_7.36.0-1_amd64.deb
4232ba1df3abdcaff4f6d66379c4fe1d 1002088 doc optional libcurl4-doc_7.36.0-1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=l7fZ
-----END PGP SIGNATURE-----