Accepted curl 7.64.0-1 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 06 Feb 2019 22:33:05 +0000
Source: curl
Architecture: source
Version: 7.64.0-1
Distribution: unstable
Urgency: medium
Maintainer: Alessandro Ghedini <ghedo@debian.org>
Changed-By: Alessandro Ghedini <ghedo@debian.org>
Closes: 920267
Changes:
curl (7.64.0-1) unstable; urgency=medium
.
* New upstream release
+ Fix NTLM type-2 out-of-bounds buffer read as per CVE-2018-16890
https://curl.haxx.se/docs/CVE-2018-16890.html
+ Fix NTLMv2 type-3 header stack buffer overflow as per CVE-2019-3822
https://curl.haxx.se/docs/CVE-2019-3822.html
+ Fix SMTP end-of-response out-of-bounds read as per CVE-2019-3823
https://curl.haxx.se/docs/CVE-2019-3823.html
+ Fix HTTP negotiation with POST requests (Closes: #920267)
Checksums-Sha1:
6e5cfe68bff944142ad36cdc3efd232e632792c5 2687 curl_7.64.0-1.dsc
5911d4400e988ae52368f2266a5f84378983dbde 4032645 curl_7.64.0.orig.tar.gz
061bcfd939b6d4575c950ffcfc9e96a934805622 29112 curl_7.64.0-1.debian.tar.xz
77fc8e7b4bd85075a1ab9babeceb37a1e3d3617d 10823 curl_7.64.0-1_amd64.buildinfo
Checksums-Sha256:
7cef86f07f054916dd23e46d9401f163b1632d64f879cbbf5e1b1d6f98c44123 2687 curl_7.64.0-1.dsc
cb90d2eb74d4e358c1ed1489f8e3af96b50ea4374ad71f143fa4595e998d81b5 4032645 curl_7.64.0.orig.tar.gz
515caa9c81f07225371411f4059d78a52159e03827119a74db2ac42dd3d73d6a 29112 curl_7.64.0-1.debian.tar.xz
bce23a70614f6c8e992b6993d04ebe752d703d077a1b81a8a6257b42876faea3 10823 curl_7.64.0-1_amd64.buildinfo
Files:
f43450b5d617f2f6d2d2e2893ff0f121 2687 web optional curl_7.64.0-1.dsc
a026740d599a32bcbbe6e70679397899 4032645 web optional curl_7.64.0.orig.tar.gz
20daf518bf64614f3d1cdc4e87f5c80d 29112 web optional curl_7.64.0-1.debian.tar.xz
4f331d72abc59d316833bc5639f72951 10823 web optional curl_7.64.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=cFLW
-----END PGP SIGNATURE-----