-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 13 Mar 2018 20:47:46 +0000 Source: curl Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc Architecture: mipsel Version: 7.38.0-4+deb8u10 Distribution: jessie-security Urgency: high Maintainer: mipsel Build Daemon (eberlin) Changed-By: Alessandro Ghedini Description: curl - command line tool for transferring data with URL syntax libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4-doc - documentation for libcurl libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.38.0-4+deb8u10) jessie-security; urgency=high . * Fix NIL byte out of bounds write due to FTP path trickery as per CVE-2018-1000120 https://curl.haxx.se/docs/adv_2018-9cd6.html * Fix LDAP NULL pointer dereference as per CVE-2018-1000121 https://curl.haxx.se/docs/adv_2018-97a2.html * Fix RTSP RTP buffer over-read as per CVE-2018-1000122 https://curl.haxx.se/docs/adv_2018-b047.html Checksums-Sha1: 04753a5daa0a12d617195121bba90ddb831d3aa0 197450 curl_7.38.0-4+deb8u10_mipsel.deb 019041d1e8f0f5b75f06778d9cac502a199682fe 240790 libcurl3_7.38.0-4+deb8u10_mipsel.deb 5176ce068f1d106812a60c6c9ee4e1242331797c 233462 libcurl3-gnutls_7.38.0-4+deb8u10_mipsel.deb 63d7cae160df4d5b46f62d5537975d4d24655998 244322 libcurl3-nss_7.38.0-4+deb8u10_mipsel.deb c8b587455d4164889ae16e3e9c2fb10503dbbe91 334176 libcurl4-openssl-dev_7.38.0-4+deb8u10_mipsel.deb b7a9ac7d48ea9d20985ffec9662bced4131f9caa 325214 libcurl4-gnutls-dev_7.38.0-4+deb8u10_mipsel.deb e44193fc10c2cbbe1d72599243b913d69e64c594 338184 libcurl4-nss-dev_7.38.0-4+deb8u10_mipsel.deb fc37befc5a7dae417c3f6b21d7e59d8773d06c9f 3451126 libcurl3-dbg_7.38.0-4+deb8u10_mipsel.deb Checksums-Sha256: 47f88f692f9477dc49583e8606cffa5a86c46f7c50d9dd75190e1f335018d2c3 197450 curl_7.38.0-4+deb8u10_mipsel.deb 0b4e410c1df46cb0b81ffb1f7ccd452215c06aa7240ec28b236276fb74c890f1 240790 libcurl3_7.38.0-4+deb8u10_mipsel.deb 4e2c567ac36a5b2a293da69d67cd3928b35ef8fc9309a9ce9d4c29061774836f 233462 libcurl3-gnutls_7.38.0-4+deb8u10_mipsel.deb d635076469f2061c9c2d537ad082d023677949863e55b0df05e3d7a19402ddad 244322 libcurl3-nss_7.38.0-4+deb8u10_mipsel.deb 22b7ac313f8524de5ad48d4355cd2d28472ea32e429bdbf5a7ac6ff6f7d3f6b4 334176 libcurl4-openssl-dev_7.38.0-4+deb8u10_mipsel.deb f95713da3817a5ee9831248e5546989f59b48b0dcfc996df6ab801a2f3333769 325214 libcurl4-gnutls-dev_7.38.0-4+deb8u10_mipsel.deb 5a5e628f8f164fa90a82f7864deff442d518b4922a38cae22541a597b7b04b5b 338184 libcurl4-nss-dev_7.38.0-4+deb8u10_mipsel.deb 7eb7edaca435fc55ca35805113405b84f69d8f4b6869430527d1de6fda949e50 3451126 libcurl3-dbg_7.38.0-4+deb8u10_mipsel.deb Files: 00eda9c8df3539f8feccfdb16e232656 197450 web optional curl_7.38.0-4+deb8u10_mipsel.deb e915311ef9663cc4ef85cefd31ce7450 240790 libs optional libcurl3_7.38.0-4+deb8u10_mipsel.deb 4c983dbddda301eb650e6a401d418b6f 233462 libs optional libcurl3-gnutls_7.38.0-4+deb8u10_mipsel.deb 24aab7ea52646f020395e99540154df9 244322 libs optional libcurl3-nss_7.38.0-4+deb8u10_mipsel.deb d4bdbc8090d5fda86d5abab8f901fa13 334176 libdevel optional libcurl4-openssl-dev_7.38.0-4+deb8u10_mipsel.deb 1719ba8a03194df17dc4dbada9616053 325214 libdevel optional libcurl4-gnutls-dev_7.38.0-4+deb8u10_mipsel.deb f33b4b3a396594b5679b9091976dd928 338184 libdevel optional libcurl4-nss-dev_7.38.0-4+deb8u10_mipsel.deb f229e329458dc61c52df1138c638b9e7 3451126 debug extra libcurl3-dbg_7.38.0-4+deb8u10_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEbarKa7lRggA1wsdNNJ0zP0xtKzUFAlqodekACgkQNJ0zP0xt KzUhvw/8CxtJEXdHzaPDZZuaUUjBqKhg3V7orjLd8/M2Fm3m1SCShdPIV6oYdDMT DAmpvICEQaff7wSA+51mKGSV0vBLdQLlPI00XSaC8jIEKgTZDqtbc53/BSuEQ+6U fnFZ1MPjHEpXQWkYOFBIPRhm94A4gSIk5u6ciGxMbEmO0KoYoMAQz1MYbIiS4dGr BEWvPlTNMj3vdDmj1dflBxtLgkogiUSmGR3sn43lvl0pTbCKntkjMkukBrIlCaaQ kkLqz816qo2PZ5jqaf0Q+lnSulqacgoz7L5E1s3w+RTAZP0PcY0+stdtgita2NIx TfzprLa6vf0SXWU3/X7/d6Mw8BT9EeH4otbulc9Lf6xRN/gizs1K+i0J6UcOFPBR nvDL9cQomopYGCRKr/UIRal5/VDaicFdc4CxgTdUr/AL/Q9IQSDD3+3i9dvU1OcE uAHReHK1clAH+OHOs83XQkcIYytvLRCGsUAZvEZT/s1UAhzTzItLpmwpa75PEvfP GJJyR/6worVWIVKsuJbmyOUfA/t4kEqHiTQ5r1dvS2lLGMPy1qY3CLcADqiBHtwW 7HfiRnqoLLj1xcjVwqIUczxPZTbGSetDtEa8jud7mJgmeFy5FKIOTg5ZF0Fozfns ZSFPkAcTKo02rvXjT9JOK0tiN9Vx1yfr47F1Cdxg9YXe/Cxy89k= =UaYW -----END PGP SIGNATURE-----