-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 13 Mar 2018 20:47:46 +0000 Source: curl Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc Architecture: mips Version: 7.38.0-4+deb8u10 Distribution: jessie-security Urgency: high Maintainer: mips Build Daemon (mips-aql-06) Changed-By: Alessandro Ghedini Description: curl - command line tool for transferring data with URL syntax libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4-doc - documentation for libcurl libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.38.0-4+deb8u10) jessie-security; urgency=high . * Fix NIL byte out of bounds write due to FTP path trickery as per CVE-2018-1000120 https://curl.haxx.se/docs/adv_2018-9cd6.html * Fix LDAP NULL pointer dereference as per CVE-2018-1000121 https://curl.haxx.se/docs/adv_2018-97a2.html * Fix RTSP RTP buffer over-read as per CVE-2018-1000122 https://curl.haxx.se/docs/adv_2018-b047.html Checksums-Sha1: f7709570cf67ef0c85358d8bf554df3f89bd6678 197078 curl_7.38.0-4+deb8u10_mips.deb 6d6d8e686a62b396c017553ad3c68a86f6f2e6cd 238282 libcurl3_7.38.0-4+deb8u10_mips.deb 20e361526c8e3b8ba4c91e370661326a6181d460 230898 libcurl3-gnutls_7.38.0-4+deb8u10_mips.deb 8dbe4b6229131ad3e12e4322f745a1db7bdb7ed4 241696 libcurl3-nss_7.38.0-4+deb8u10_mips.deb c87e28f5dbfddf2d66eb31ca67c2e3282392ede4 330802 libcurl4-openssl-dev_7.38.0-4+deb8u10_mips.deb 5d98c49e027836c62c6f63f7a7346b081f42ce8b 321898 libcurl4-gnutls-dev_7.38.0-4+deb8u10_mips.deb f6bdb0330c4e02b1f8db30cdd9c9b899e5fc9cc8 334874 libcurl4-nss-dev_7.38.0-4+deb8u10_mips.deb 7cac2c3e22ad5ba534845f1f445f1d7bdb698362 3585298 libcurl3-dbg_7.38.0-4+deb8u10_mips.deb Checksums-Sha256: 28d67af1bbf57100c21540dbbbdfb1ae41a73525a28872a947444d88238b0fe1 197078 curl_7.38.0-4+deb8u10_mips.deb c2fea86d372bfbb5af5e30f285ae0c3722ad35a8e2b7eb0a73f33661787ae350 238282 libcurl3_7.38.0-4+deb8u10_mips.deb 5bd3cee5ffe47b6892186284453d4625bee0a90b4dbda75e2d77d0161c5a4370 230898 libcurl3-gnutls_7.38.0-4+deb8u10_mips.deb 9b5f99d60d5576c97a0abbac04bb1359467a5c83c3b95ed89352927d754ae54b 241696 libcurl3-nss_7.38.0-4+deb8u10_mips.deb e88a1af625539f4d7181b66c213a7a64db31121654be87b63f006c33c413ec4d 330802 libcurl4-openssl-dev_7.38.0-4+deb8u10_mips.deb 1c554d0167c577e904932dd5f7d1c903632c72b11e7a92b71593fa043294d937 321898 libcurl4-gnutls-dev_7.38.0-4+deb8u10_mips.deb 034913923db0b532070e69c074a83a2f08b569613b1d8f74b503eaad7772772f 334874 libcurl4-nss-dev_7.38.0-4+deb8u10_mips.deb 31e69a836171b726646df54fa85ee6b3de78a24f43de30f018682362c3b756cf 3585298 libcurl3-dbg_7.38.0-4+deb8u10_mips.deb Files: 13658533ef84c97713391eaa2d0e3372 197078 web optional curl_7.38.0-4+deb8u10_mips.deb 585710c01508999135c347f32325f578 238282 libs optional libcurl3_7.38.0-4+deb8u10_mips.deb 4f1a54e8393c5330ef2675f6c44d68e7 230898 libs optional libcurl3-gnutls_7.38.0-4+deb8u10_mips.deb 7b77ba7add07fe9ae4fbfeef88c2f60c 241696 libs optional libcurl3-nss_7.38.0-4+deb8u10_mips.deb d62b319206a1d5a6f56c7efb02522b01 330802 libdevel optional libcurl4-openssl-dev_7.38.0-4+deb8u10_mips.deb 50e2026ab89688484586dee8e9bdda26 321898 libdevel optional libcurl4-gnutls-dev_7.38.0-4+deb8u10_mips.deb 38d838c88423d5495167d10310abcf86 334874 libdevel optional libcurl4-nss-dev_7.38.0-4+deb8u10_mips.deb 59b70435286b78b7b83faf4b813686a2 3585298 debug extra libcurl3-dbg_7.38.0-4+deb8u10_mips.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEsWysyiAxCbZtXghxdBLUQ6IXR8QFAlqobdgACgkQdBLUQ6IX R8QWyA/+JQ66X5s8eSspyZBB83Bs6xJKR1DwX1z60sLsU/7cE3UoGfBwV6W/XKef kha6o644lL8yDvKeDg31a9yQBNU4jt86+BmAEO+31Jxl1M7bWsEQStGMcVGCf6sS k/OPYDH9Ry+fPG62XVsH+gt5ivgeqAUsERuADV/RQat8AA+/ehA4OgzH0Rdj00NC e9BtSko43iHlAwxl1ykRch2jMgBR8rzPGjAG9PasR7opauYgdNDSlxkbTnwlBTuz +fY9+EIqkXGhxLFw7vDsUBIZQ+JaHEAJ545nA9Z2AWoVif4NpzCs6iHt9gJBkuIm Y16pvlO1AbKAZanCVlpGQi0MCzlOrO4qeJF72ESk05JlGzWRgU0H3EfQ6reuiVrX Afcc6gGQmI7Y/6ncT9YYgg5MsgBdLyOfxCU96XkzxRsRsfuqgtPxYbCFJxwZYEcS I9tdSQUzmmEnc48YmUQMG9iXXqSxDztaHwyaqLKdNe0zTnXWaahvmUBK7ZHuXvrn On8WcQNvVXXTeQb+qo9Mh3pBs9OdvgtnKfAw4lXje7g12M1trW8n7uswDrIAH51b UPidI7CG60snlCvDw4f42shIICEJmbaHzdNDZl24px9B5OOt26vzXe04JMjoH2G9 FBFr16LHsfvgB849ncgg8BsUe4xa/ectaR1DhWLBRN+P0qKTRlo= =O+7i -----END PGP SIGNATURE-----