-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 13 Mar 2018 20:47:46 +0000 Source: curl Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc Architecture: arm64 Version: 7.38.0-4+deb8u10 Distribution: jessie-security Urgency: high Maintainer: arm Build Daemon (arm-arm-03) Changed-By: Alessandro Ghedini Description: curl - command line tool for transferring data with URL syntax libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4-doc - documentation for libcurl libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.38.0-4+deb8u10) jessie-security; urgency=high . * Fix NIL byte out of bounds write due to FTP path trickery as per CVE-2018-1000120 https://curl.haxx.se/docs/adv_2018-9cd6.html * Fix LDAP NULL pointer dereference as per CVE-2018-1000121 https://curl.haxx.se/docs/adv_2018-97a2.html * Fix RTSP RTP buffer over-read as per CVE-2018-1000122 https://curl.haxx.se/docs/adv_2018-b047.html Checksums-Sha1: 5b292e7d9e612fabc34979308d789a91080a7387 194246 curl_7.38.0-4+deb8u10_arm64.deb 8adfbb458589427a31b7118a284abffbde15f2ab 227714 libcurl3_7.38.0-4+deb8u10_arm64.deb de4b4b9738f66f4e9ef29b7fd1059a683b7e1e6c 221154 libcurl3-gnutls_7.38.0-4+deb8u10_arm64.deb 8ffae17e3ae7b12b25c6844233cc0b0bea8828f4 230598 libcurl3-nss_7.38.0-4+deb8u10_arm64.deb 9417314e7f6d5734080cd44de81856edebe2c549 310282 libcurl4-openssl-dev_7.38.0-4+deb8u10_arm64.deb 5e62845dae8b7d6379e23fb6f8baefecb4ad1468 302894 libcurl4-gnutls-dev_7.38.0-4+deb8u10_arm64.deb 6ca492644d61905e8fe0e193d1f11c614906bbb1 314518 libcurl4-nss-dev_7.38.0-4+deb8u10_arm64.deb 4dd5cd0b7b4f87d3d258d5bf797820d5b7ef44b4 3671272 libcurl3-dbg_7.38.0-4+deb8u10_arm64.deb Checksums-Sha256: e04dbc936f6a06a1edf7c8e6ffb3db810e233070413b3d53b99fd7f85c0d5f6d 194246 curl_7.38.0-4+deb8u10_arm64.deb c3c6a0d78a8019462b1a6a98c79ffbe3652602eee4b51ae0a04f91f98db885c1 227714 libcurl3_7.38.0-4+deb8u10_arm64.deb 7436fb6d58ff6475d90c857ea55c2e1ff72fd847a7b699ec2e13ab01215e1468 221154 libcurl3-gnutls_7.38.0-4+deb8u10_arm64.deb 8a018c40bc113a1be160c5cb1e68c81137c36f0dd8db5d492ba32223bac6d158 230598 libcurl3-nss_7.38.0-4+deb8u10_arm64.deb 682b93999955712b4ceab349358cc719544ff9f1384c9f74d239b5c77a96ae8b 310282 libcurl4-openssl-dev_7.38.0-4+deb8u10_arm64.deb c4ea02e1d58e8d0e105d036e4e2ec56f49529feeb84b060e43933b6c2de39cc6 302894 libcurl4-gnutls-dev_7.38.0-4+deb8u10_arm64.deb 570271057ee3f5d63a1cd61201a05461a75d2b658992799e1bdadf788c8d4336 314518 libcurl4-nss-dev_7.38.0-4+deb8u10_arm64.deb 11746e950c5fd38520d9a7c017a175737097f795d61da4ee0096042bbabe582b 3671272 libcurl3-dbg_7.38.0-4+deb8u10_arm64.deb Files: e3d6aef5272a606d9de6d663f98f47d7 194246 web optional curl_7.38.0-4+deb8u10_arm64.deb 08cb62b3489ed4cf5ee6a77abc6ea38e 227714 libs optional libcurl3_7.38.0-4+deb8u10_arm64.deb f3c19771a07e179bde24bcd0c859f526 221154 libs optional libcurl3-gnutls_7.38.0-4+deb8u10_arm64.deb 0df3f8439bd3c27ef4af409508e9af5d 230598 libs optional libcurl3-nss_7.38.0-4+deb8u10_arm64.deb 3b46c47bfd7316867beb50b0fc74dcdf 310282 libdevel optional libcurl4-openssl-dev_7.38.0-4+deb8u10_arm64.deb 3f407057ce53bcbd1e5ca7651a3c74fa 302894 libdevel optional libcurl4-gnutls-dev_7.38.0-4+deb8u10_arm64.deb 5a55650e51e6366ffb377d10544cc15e 314518 libdevel optional libcurl4-nss-dev_7.38.0-4+deb8u10_arm64.deb bb544f83d3516be48ce1e13fcd90cc24 3671272 debug extra libcurl3-dbg_7.38.0-4+deb8u10_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEzNDbPStAqZL+g+EBG/dKVN+TmdoFAlqoZN4ACgkQG/dKVN+T mdpIRxAAicMGn4lRcMeNDc3LEtw7+4cX62x/JXTE1TDOrsePi3O7Xspwiknz5zi2 CImr0kNaI9VLrV9Rj7pS0r+MWZ4DJzQ74IkT0qvCtRSKBAFS9kVrN+LAHdQzKX3E MsNWlljdkzmCVtc6LF6OvfWrPiUxYkp/cAtOCP/iEo5TZmtgJPg9TMFmPjkNEHHY 5ZBlEtGBcvDoarl8ZwwxLuF81UYfoJNC8nF5n/VdgbnrbLieeHNzosCwU+/iG0A1 6Xl/XG+R/MMmMu6M0/u3Tdw95mXJI0OVBczvjfA9Ns2GSzkBii5Tow8oeVF8JQBG XkD0WOd5BR8B8kJGAIjU+eXFqXQaXwRvA152e5dFi0Ttu4bT3dGakjFDFEURsk3o cgnkFVuxiBV5gWZUz25fL3301Uf++BtlieOuWolUeSzb8y9neVM/wSrohGGXH8sw ncTasROUNYQYxXak6yeKrYWMCm/RVLEFZb0ydmlQw8bihujR6xYSj5YC/hXr88rp Z+EqHtClp9pMFuDEkXSWNxwYP+C2Ys+r86OUGBYuTxFHsilRzcrD3WnKstegPJ3i 7/rEy0NqEG2mUD1fnWErwMf8I/igU0uW07GmDZgvd3U9Aczc9/zOTftE5q0sp5r1 P/hWzwwEscVlGJWNri9fe2FCCD7V7njs+TUIzstsYvti7knUPLM= =Rm4b -----END PGP SIGNATURE-----