Accepted curl 7.52.1-5+deb9u4 (source) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 23 Jan 2018 21:56:56 +0000
Source: curl
Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc
Architecture: source
Version: 7.52.1-5+deb9u4
Distribution: stretch-security
Urgency: high
Maintainer: Alessandro Ghedini <ghedo@debian.org>
Changed-By: Alessandro Ghedini <ghedo@debian.org>
Description:
curl - command line tool for transferring data with URL syntax
libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour)
libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours)
libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour)
libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour)
libcurl4-doc - documentation for libcurl
libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour)
libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour)
libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour)
Changes:
curl (7.52.1-5+deb9u4) stretch-security; urgency=high
.
* Fix HTTP/2 trailer out-of-bounds read as per CVE-2018-1000005
https://curl.haxx.se/docs/adv_2018-824a.html
* Fix HTTP authentication leak in redirects as per CVE-2018-1000007
https://curl.haxx.se/docs/adv_2018-b3bf.html
Checksums-Sha1:
698468afdb2d64f0bfcd7b3af2a5fc8cb0376bbd 2793 curl_7.52.1-5+deb9u4.dsc
cbeeabbc2bd643494ce1dae777a828681f43ca9f 38628 curl_7.52.1-5+deb9u4.debian.tar.xz
ac983798b295eb76967006ea3e21e5c20c66f3fb 10867 curl_7.52.1-5+deb9u4_amd64.buildinfo
Checksums-Sha256:
45d618d610b7c80aca3c86d72f68cfe142b77ce260a1b38c8a1a11ceefe8ce9c 2793 curl_7.52.1-5+deb9u4.dsc
50bbcad2b04c6d45a97b85fc78822ad8cf8e3cc0c7d470fa92080e00b59791e1 38628 curl_7.52.1-5+deb9u4.debian.tar.xz
d3a4118be8e741fbcb2286ef09a9e2153435f8eeeed93df0eba00cfa2397984b 10867 curl_7.52.1-5+deb9u4_amd64.buildinfo
Files:
1df935bed5a588428bea958b70e55e77 2793 web optional curl_7.52.1-5+deb9u4.dsc
0d16f5660803dcf4b394c123816e7b29 38628 web optional curl_7.52.1-5+deb9u4.debian.tar.xz
ccd95d1abd13dec057e7e8316eed4cec 10867 web optional curl_7.52.1-5+deb9u4_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=aYsF
-----END PGP SIGNATURE-----