Back to curl PTS page

Accepted curl 7.38.0-4+deb8u1 (source amd64 all) into testing-proposed-updates



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 21 Apr 2015 13:16:29 +0200
Source: curl
Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc
Architecture: source amd64 all
Version: 7.38.0-4+deb8u1
Distribution: jessie-security
Urgency: high
Maintainer: Alessandro Ghedini <ghedo@debian.org>
Changed-By: Alessandro Ghedini <ghedo@debian.org>
Description:
 curl       - command line tool for transferring data with URL syntax
 libcurl3   - easy-to-use client-side URL transfer library (OpenSSL flavour)
 libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours)
 libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour)
 libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour)
 libcurl4-doc - documentation for libcurl
 libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour)
 libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour)
 libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour)
Changes:
 curl (7.38.0-4+deb8u1) jessie-security; urgency=high
 .
   * Fix re-using authenticated connection when unauthenticated
     as per CVE-2015-3143
     http://curl.haxx.se/docs/adv_20150422A.html
   * Fix host name out of boundary memory access as per CVE-2015-3144
     http://curl.haxx.se/docs/adv_20150422D.html
   * Fix cookie parser out of boundary memory access as per CVE-2015-3145
     http://curl.haxx.se/docs/adv_20150422C.html
   * Fix Negotiate not treated as connection-oriented as per CVE-2015-3148
     http://curl.haxx.se/docs/adv_20150422B.html
Checksums-Sha1:
 48a93b3c7b42d41e1046b05d601689d402371706 2655 curl_7.38.0-4+deb8u1.dsc
 40d8ec9063f076005535139c9229ac77c57f0300 4094034 curl_7.38.0.orig.tar.gz
 87c5d0772e7c02ec6c468fa9527bf22efb083de6 31672 curl_7.38.0-4+deb8u1.debian.tar.xz
 af0a9e7c8a8ea24a11665231490dd650930b6c5f 199928 curl_7.38.0-4+deb8u1_amd64.deb
 2589bb23439027a71cbc287669a07b9137e3c624 258474 libcurl3_7.38.0-4+deb8u1_amd64.deb
 fcb0595d66d689f475cff28346b5bdafb76cd448 251024 libcurl3-gnutls_7.38.0-4+deb8u1_amd64.deb
 4c31535002de51606e63ea00aed5a6c64dd8afef 262282 libcurl3-nss_7.38.0-4+deb8u1_amd64.deb
 14c335b22e45f95b92598be57cda56ea6aa4c878 336100 libcurl4-openssl-dev_7.38.0-4+deb8u1_amd64.deb
 dca774e3450dffe3a15e0cdf41dd6c560880aa7b 327390 libcurl4-gnutls-dev_7.38.0-4+deb8u1_amd64.deb
 5b5d42818e89c971a099e9bd7d4ff4d0661421a9 339874 libcurl4-nss-dev_7.38.0-4+deb8u1_amd64.deb
 456640a1d34da58b60de72a88d2da84ac0d305f1 3362856 libcurl3-dbg_7.38.0-4+deb8u1_amd64.deb
 576f4e97babede4565d5d03088159bc1b84d93a0 1066918 libcurl4-doc_7.38.0-4+deb8u1_all.deb
Checksums-Sha256:
 d2dc9783fa2d9ff9ecdbd7de2ccd6aac8636f6bf4b234e205f2a97cf7025dccb 2655 curl_7.38.0-4+deb8u1.dsc
 5661028aa6532882fa228cd23c99ddbb8b87643dbb1a7ea55c068d34a943dff1 4094034 curl_7.38.0.orig.tar.gz
 b76f02cb8444239823d956e01edc86daf90dab898f9531c39dd15be6e1705ea7 31672 curl_7.38.0-4+deb8u1.debian.tar.xz
 5aeccd1ae3258d79a21e374eb7c7ef2922972c27f3e21d21e9dba95899d47836 199928 curl_7.38.0-4+deb8u1_amd64.deb
 70e8099901f7fcb667cc52bd262e9926ff59638c21727f0a1682e097324c2f50 258474 libcurl3_7.38.0-4+deb8u1_amd64.deb
 7e4e4913984d4f9880f0881d5a4e929ecbbe90c5489c42fcb20c9c0ad52f8356 251024 libcurl3-gnutls_7.38.0-4+deb8u1_amd64.deb
 b90565628fb4f1ba2a9fb4b71185900125292c07b41ad772e9dc53da4f243c1f 262282 libcurl3-nss_7.38.0-4+deb8u1_amd64.deb
 f856fb548212b41aef763c6dc4ecfa652f74fef9eff0ccacb998d9e95c54ec07 336100 libcurl4-openssl-dev_7.38.0-4+deb8u1_amd64.deb
 aabc1139ab71e42bbd0c7410f0020da7cd2a65a68f66df70a062cf8195a68f86 327390 libcurl4-gnutls-dev_7.38.0-4+deb8u1_amd64.deb
 2a849f8dec3234535fb97cda214b1bf242aad3a961948664c446c3ec4c045b2f 339874 libcurl4-nss-dev_7.38.0-4+deb8u1_amd64.deb
 384df1e29f2c921fe3c600dca0af175ea0092b11783acfac6dadc5333cf33836 3362856 libcurl3-dbg_7.38.0-4+deb8u1_amd64.deb
 9c1291e4c8a93cb9576b493712645183b1623ccb4b8d94f39e527f3a3f676f46 1066918 libcurl4-doc_7.38.0-4+deb8u1_all.deb
Files:
 d0ad21d4548616e2e70acfe281bb5aff 2655 web optional curl_7.38.0-4+deb8u1.dsc
 b6e3ea55bb718f2270489581efa50a8a 4094034 web optional curl_7.38.0.orig.tar.gz
 d99dc76f345b10360717c56a096dea5d 31672 web optional curl_7.38.0-4+deb8u1.debian.tar.xz
 da348ff5f196df9f708c36c4cb6e6ca5 199928 web optional curl_7.38.0-4+deb8u1_amd64.deb
 f6c82469c3172a595f59ef89183534ba 258474 libs optional libcurl3_7.38.0-4+deb8u1_amd64.deb
 cda966e377851c06546a9b65900cc8b0 251024 libs optional libcurl3-gnutls_7.38.0-4+deb8u1_amd64.deb
 40a29ab3b047029c861d410b24f66045 262282 libs optional libcurl3-nss_7.38.0-4+deb8u1_amd64.deb
 1f1f4dd438d2c351778d7adecf996dba 336100 libdevel optional libcurl4-openssl-dev_7.38.0-4+deb8u1_amd64.deb
 5cefb287cf5c96d80daa965d9ccc82dd 327390 libdevel optional libcurl4-gnutls-dev_7.38.0-4+deb8u1_amd64.deb
 d6cd0d4727757fa4dcc9e06bda07e99f 339874 libdevel optional libcurl4-nss-dev_7.38.0-4+deb8u1_amd64.deb
 29acee8853aff1cf98bbc6f860a87e68 3362856 debug extra libcurl3-dbg_7.38.0-4+deb8u1_amd64.deb
 118ff4d947d453ced356ffd9ae1f64b7 1066918 doc optional libcurl4-doc_7.38.0-4+deb8u1_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=mhm4
-----END PGP SIGNATURE-----