Accepted curl 7.38.0-4+deb8u8 (source amd64 all) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 25 Nov 2017 22:03:21 +0100
Source: curl
Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc
Architecture: source amd64 all
Version: 7.38.0-4+deb8u8
Distribution: jessie-security
Urgency: high
Maintainer: Alessandro Ghedini <ghedo@debian.org>
Changed-By: Yves-Alexis Perez <corsac@debian.org>
Description:
curl - command line tool for transferring data with URL syntax
libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour)
libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours)
libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour)
libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour)
libcurl4-doc - documentation for libcurl
libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour)
libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour)
libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour)
Changes:
curl (7.38.0-4+deb8u8) jessie-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* Fix NTLM buffer overflow via integer overflow as per CVE-2017-8816
https://curl.haxx.se/docs/adv_2017-11e7.html
* Fix FTP wildcard out of bounds read as per CVE-2017-8817
https://curl.haxx.se/docs/adv_2017-ae72.html
Checksums-Sha1:
15ec6dafba25ae8453d6f502bf559e05dc64149c 2324 curl_7.38.0-4+deb8u8.dsc
a8a57b5380f0bcaa6d8cfe425e33eccafd82ab55 43632 curl_7.38.0-4+deb8u8.debian.tar.xz
2a56d98158fc7d6dad6e082d193878eb54d8a40b 200750 curl_7.38.0-4+deb8u8_amd64.deb
ceec26742051938e0f04fca4df595ef3ebe1d745 259742 libcurl3_7.38.0-4+deb8u8_amd64.deb
404a6aa8ad23e83f0b562fbfca7891f55ad5db7a 252002 libcurl3-gnutls_7.38.0-4+deb8u8_amd64.deb
9869cf96e6f703af39e872238ea08f6d31c58149 263042 libcurl3-nss_7.38.0-4+deb8u8_amd64.deb
3ed5c3809413e8a955f13edb7e384d503ac2da50 336228 libcurl4-openssl-dev_7.38.0-4+deb8u8_amd64.deb
6934d96e2a648ddd5718cea0b7b9da786f1cfbeb 327504 libcurl4-gnutls-dev_7.38.0-4+deb8u8_amd64.deb
02a1282a517e3d548edd0f6d39ae157d5ea150d3 340054 libcurl4-nss-dev_7.38.0-4+deb8u8_amd64.deb
0707be09a211a149ed019be720d33af74cf4efec 3371552 libcurl3-dbg_7.38.0-4+deb8u8_amd64.deb
5fef89490777f7e7abd6a38eca1df058f109390b 1065334 libcurl4-doc_7.38.0-4+deb8u8_all.deb
Checksums-Sha256:
d160ead196ea8eefe7f465599f6328a4b90b4d09e934d03f54f5588c0ce45fd8 2324 curl_7.38.0-4+deb8u8.dsc
ec846b7e120206cc60f906ed0d846e94bdeb5eada86ed091749208f87d1f20c6 43632 curl_7.38.0-4+deb8u8.debian.tar.xz
89fbc6e5dd1cf28bdd73ea2f3c0e10d935477b34642d80404f357ea25b66edb6 200750 curl_7.38.0-4+deb8u8_amd64.deb
5223505ab3a7e3dc604fdc2c5aadb1fcc46773b490ce7378bdc99b801a5bb274 259742 libcurl3_7.38.0-4+deb8u8_amd64.deb
3e1b509aee34f7499b894a976c5ff383540c6679e8a2cd8ef4d77ea564a5fe32 252002 libcurl3-gnutls_7.38.0-4+deb8u8_amd64.deb
6a97f1528f26e11b36c12df34cf83e780355bf0675c18efac827440ae5589fea 263042 libcurl3-nss_7.38.0-4+deb8u8_amd64.deb
3e9c000d61914ffca15d6326eca3023ab59c52910464489f2ea132fc8190e77c 336228 libcurl4-openssl-dev_7.38.0-4+deb8u8_amd64.deb
1349113a42f85c027b198e70fd903d9560513950f3eec62776c82b3c4839d74b 327504 libcurl4-gnutls-dev_7.38.0-4+deb8u8_amd64.deb
1d25cfa4bade4f86de10a649743187a2329d75e3f74cc481d60bb777661cd726 340054 libcurl4-nss-dev_7.38.0-4+deb8u8_amd64.deb
e2d4b85097e5176a886bd4a8cd13c092cd983a510373fa0b31ec3ab0167bb8e0 3371552 libcurl3-dbg_7.38.0-4+deb8u8_amd64.deb
72b769de8c615375036f7eb07113cc73b1d05488dcf0a75b6512fd264383a052 1065334 libcurl4-doc_7.38.0-4+deb8u8_all.deb
Files:
e0ae57fe8cbd464a5468d591a07b47ea 2324 web optional curl_7.38.0-4+deb8u8.dsc
3c010abe83a4bacde9088b6c51dec284 43632 web optional curl_7.38.0-4+deb8u8.debian.tar.xz
b28f1095dded33c84826b46d6ee754ec 200750 web optional curl_7.38.0-4+deb8u8_amd64.deb
3a149c3d94fd958c42aaa3318d81cc9f 259742 libs optional libcurl3_7.38.0-4+deb8u8_amd64.deb
91450798fb2a454929b4aa1330cc0171 252002 libs optional libcurl3-gnutls_7.38.0-4+deb8u8_amd64.deb
68e3168428d5bd8091db90675b3134c9 263042 libs optional libcurl3-nss_7.38.0-4+deb8u8_amd64.deb
e85750b2295570068ff2ad473b1d4e60 336228 libdevel optional libcurl4-openssl-dev_7.38.0-4+deb8u8_amd64.deb
b65ee05076e48d4c83c08d7a73bea01e 327504 libdevel optional libcurl4-gnutls-dev_7.38.0-4+deb8u8_amd64.deb
5b3b9cbd7ea46e6b766a5b56cb080b2c 340054 libdevel optional libcurl4-nss-dev_7.38.0-4+deb8u8_amd64.deb
06efb778f359d3bb72a6db096970d2e5 3371552 debug extra libcurl3-dbg_7.38.0-4+deb8u8_amd64.deb
b86790a5f880988ab759d4c09c92ba35 1065334 doc optional libcurl4-doc_7.38.0-4+deb8u8_all.deb
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCgAdFiEE8vi34Qgfo83x35gF3rYcyPpXRFsFAlodOYgACgkQ3rYcyPpX
RFvQYwf/Wja+kplcGF/ey9Xe1nzGKcXxQuZ771DBVIe/v+KEI46MCvYCT2ysYMLz
hw3USTmnTM35VCqOD2XhbqYfchCGScrT4+149OnBfSi2NC7WlCjxgVGebq4vXQvl
tGXAplz67dB+q5lvO+TxsKxlntJMbmkpUptdCEEouCCLu+O0skq74V9Y5ticQJsh
/1roQgzSSkZCdOz1jnqjj/Fzs2oKyEw3aqN2aCMQX0swW0hUPZupbphc1d0GsdEd
qetqxpP/RkEIFuCqDz5hOSzPUtVV1/4QkXPnWAQBxSH8BI8vaH9ufk9Lf/nRXEhZ
DGyZ4mGus858iQlQLo5P5a3nvHf4yA==
=jSAY
-----END PGP SIGNATURE-----