-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 13 Mar 2018 20:47:46 +0000 Source: curl Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc Architecture: powerpc Version: 7.38.0-4+deb8u10 Distribution: jessie-security Urgency: high Maintainer: powerpc Build Daemon (powerpc-unicamp-01) Changed-By: Alessandro Ghedini Description: curl - command line tool for transferring data with URL syntax libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4-doc - documentation for libcurl libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.38.0-4+deb8u10) jessie-security; urgency=high . * Fix NIL byte out of bounds write due to FTP path trickery as per CVE-2018-1000120 https://curl.haxx.se/docs/adv_2018-9cd6.html * Fix LDAP NULL pointer dereference as per CVE-2018-1000121 https://curl.haxx.se/docs/adv_2018-97a2.html * Fix RTSP RTP buffer over-read as per CVE-2018-1000122 https://curl.haxx.se/docs/adv_2018-b047.html Checksums-Sha1: 1e3bb680941a8ffc4636840c6a171dea3ad41753 196538 curl_7.38.0-4+deb8u10_powerpc.deb b8dc8ec2bede02184b8e03dc228370c269217475 242318 libcurl3_7.38.0-4+deb8u10_powerpc.deb 22ecfd070052512f412968166acd71b5b4e3334b 234876 libcurl3-gnutls_7.38.0-4+deb8u10_powerpc.deb 640142618b51c9be515af603992bbf0f196e8f55 245088 libcurl3-nss_7.38.0-4+deb8u10_powerpc.deb 85cb41535a5eacaec3a3fb331ba3fe02b3f72773 308476 libcurl4-openssl-dev_7.38.0-4+deb8u10_powerpc.deb ce9d4cac2c450d246d2b089a8f62f4ffdfa5fefc 301462 libcurl4-gnutls-dev_7.38.0-4+deb8u10_powerpc.deb 6f584c4c4a00c30d6d233f9c0ba7a2ed0877bd4e 312822 libcurl4-nss-dev_7.38.0-4+deb8u10_powerpc.deb fa73c4e941a2e12763a78dad2b248c3a47764970 3733002 libcurl3-dbg_7.38.0-4+deb8u10_powerpc.deb Checksums-Sha256: 5db091e31df8b307135a2bdac146278391891d942b4eaefc73f023d0ce4fcf37 196538 curl_7.38.0-4+deb8u10_powerpc.deb 1f08642643f17ecf968149897a18c3e85fe99805e24499b1bd83a2b340b3339b 242318 libcurl3_7.38.0-4+deb8u10_powerpc.deb dae5eaef5a1a3d913439faab58aaba2ced2b285c82a62f5b00bc0e735e36672f 234876 libcurl3-gnutls_7.38.0-4+deb8u10_powerpc.deb 95d31a2db34516eec4cf6ff52cdd80a8886fac90fd11dc77fb6b4e54a51edc26 245088 libcurl3-nss_7.38.0-4+deb8u10_powerpc.deb 2a0d3650238b1e496718e5c799085ccc5a5f35f88e3f333377477f450f6e8797 308476 libcurl4-openssl-dev_7.38.0-4+deb8u10_powerpc.deb 045872689a258148666fb32e584c409fe2490d92d9c7b9c3434c3d6d99bb1dae 301462 libcurl4-gnutls-dev_7.38.0-4+deb8u10_powerpc.deb b2919446303ddbdee798e0d1ce962c1334d416b41d818a523204418b1dbc18ad 312822 libcurl4-nss-dev_7.38.0-4+deb8u10_powerpc.deb df7703bea729d583f1ab834d624d45d1dce12056094f97b17bf38b45932d321d 3733002 libcurl3-dbg_7.38.0-4+deb8u10_powerpc.deb Files: 513781ddfbdf02225e879c116ea5b795 196538 web optional curl_7.38.0-4+deb8u10_powerpc.deb 22599ed77613dceab2f59400866b7600 242318 libs optional libcurl3_7.38.0-4+deb8u10_powerpc.deb 4de019e596ab89d46b01934e6d89d2c2 234876 libs optional libcurl3-gnutls_7.38.0-4+deb8u10_powerpc.deb f0949127515cb99274f21e55356b8b77 245088 libs optional libcurl3-nss_7.38.0-4+deb8u10_powerpc.deb 2c3944f27f882b9b0c4d790f39558693 308476 libdevel optional libcurl4-openssl-dev_7.38.0-4+deb8u10_powerpc.deb 100a18beb258cf1c0ae18b90ece8924f 301462 libdevel optional libcurl4-gnutls-dev_7.38.0-4+deb8u10_powerpc.deb 42eb5e922bea9d2a01034e0eaaafedc9 312822 libdevel optional libcurl4-nss-dev_7.38.0-4+deb8u10_powerpc.deb ac417ca6dea6518ccab82d335fd2d5cf 3733002 debug extra libcurl3-dbg_7.38.0-4+deb8u10_powerpc.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJaqGMVAAoJEOztKMTe11ONgCYP/jlwbuEDJAjt7h9MkT8R+pV/ n43hLol2OHeLiZIff5o8eNlIWRgJx0qSZj2NW66DXkSoVjjuPsckmCgoae1CElnT ddi6ErlVRslMfRE68qgHCTScFWI3oxan86cryz6OHcm1jPco0/hlr+5k+yeaueI0 VnN0CLMablx3fxQZlPKzTWeYasfd3iu3TIf4dom7iTybrb/frOmr2/KREQU7gFns DtQK6vCxR+BE/4d0fjtg/MM5r3Pb0MbRq8vt/kt8l7FmevJudAVnLipxZ4EbvWM0 mN5Z4BrR9JDkD02FyPTFq/RyPb1/PBvrJquqE5UxBm8itDVm7UMqlwi2ZuTQsqd3 NT8FWjtkOX036r69Q2JEzxD6d7KZR+Z4u+gYPAVlkaHpX4YHsT9ggWWaETChzE2R Jt4C4Oc/9xpSYB3CN2XThIiH0aYP/aJ6IG32UzAaF3AZfRwlRh6/O76J4vEcCO9g suIefCZIrQ9iCpJUYIteOPGLiwrGXfi0X+rplVzAAYHc8YJsDjZj3+YahL3bpa0q KQ5SSXq9V5dH5TbsimFypKeenC51wvmLLI7qMCrHUdlTv6s5z/wClvuGFzcQQ6s2 bwrH02qwSjrQ6Hm85x9V624MnSO7u10CBjhFA7qHmvfLPdnyOaI7OgC3vfu36qlB yTtfAIgS3mX0VAp0UXKs =RwBi -----END PGP SIGNATURE-----