-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 13 Mar 2018 20:47:46 +0000 Source: curl Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc Architecture: ppc64el Version: 7.38.0-4+deb8u10 Distribution: jessie-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-unicamp-01) Changed-By: Alessandro Ghedini Description: curl - command line tool for transferring data with URL syntax libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4-doc - documentation for libcurl libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.38.0-4+deb8u10) jessie-security; urgency=high . * Fix NIL byte out of bounds write due to FTP path trickery as per CVE-2018-1000120 https://curl.haxx.se/docs/adv_2018-9cd6.html * Fix LDAP NULL pointer dereference as per CVE-2018-1000121 https://curl.haxx.se/docs/adv_2018-97a2.html * Fix RTSP RTP buffer over-read as per CVE-2018-1000122 https://curl.haxx.se/docs/adv_2018-b047.html Checksums-Sha1: e91a0bb9c8e7a476c219a8259d14e058b726ea95 197578 curl_7.38.0-4+deb8u10_ppc64el.deb 11827a671b3228a6f2f93abd1f944d93a3aad898 240860 libcurl3_7.38.0-4+deb8u10_ppc64el.deb 4c326cf692b3c3f090128fbc73437e97a1042a8a 233720 libcurl3-gnutls_7.38.0-4+deb8u10_ppc64el.deb 512494f398db7d45efdeb65b236ff90a5ef72afa 244224 libcurl3-nss_7.38.0-4+deb8u10_ppc64el.deb 30479326d995f05e42027739ed6f8a016a989a93 322156 libcurl4-openssl-dev_7.38.0-4+deb8u10_ppc64el.deb 4d9877808a31f804488c3561f67697729cf4f499 314394 libcurl4-gnutls-dev_7.38.0-4+deb8u10_ppc64el.deb cfa1594576d406ea8324cf85a032dc5862427c0b 326690 libcurl4-nss-dev_7.38.0-4+deb8u10_ppc64el.deb d26654ac617744aa7db6b870163f28da8482ce81 3678208 libcurl3-dbg_7.38.0-4+deb8u10_ppc64el.deb Checksums-Sha256: cc47db0fbe7dd34e136b4e3af50d8cf98e07bcfb8c4545564078c50327512bd4 197578 curl_7.38.0-4+deb8u10_ppc64el.deb 59a688e89d9a3505de7484972f64c04e715bc3039bd28439f833995bcc52b5c2 240860 libcurl3_7.38.0-4+deb8u10_ppc64el.deb 9888ca3638051d7ebc25edc4bd43ab14468461d70dbcc2786115b146c720fedd 233720 libcurl3-gnutls_7.38.0-4+deb8u10_ppc64el.deb 10c212ccf5ea87b0afb1bc5afe1881972e4c679363f810b516ce39bcc7cf3ec2 244224 libcurl3-nss_7.38.0-4+deb8u10_ppc64el.deb 777c94d96443b9e14c7ed9c08909a88c2b43687c4b964ee27563b225a174248f 322156 libcurl4-openssl-dev_7.38.0-4+deb8u10_ppc64el.deb 9bb7085c2cae2ec1fa0efd477b22791e6d3d3d662cd6832b2583e8ce8529e398 314394 libcurl4-gnutls-dev_7.38.0-4+deb8u10_ppc64el.deb d9e8d151374c033bf80c9d938634b79827b1490083bfa42208dd0d1a4a79e508 326690 libcurl4-nss-dev_7.38.0-4+deb8u10_ppc64el.deb 8cd73a7127ff55fc1809e77b0ee592b8184ebacdabda40afe9545bf015afcda2 3678208 libcurl3-dbg_7.38.0-4+deb8u10_ppc64el.deb Files: 288befdbcad89786dfe7d90baa95c076 197578 web optional curl_7.38.0-4+deb8u10_ppc64el.deb c84f8b83aa17f15a7b21b58a07314f73 240860 libs optional libcurl3_7.38.0-4+deb8u10_ppc64el.deb bccd34f5f99ad3b9d3b6ed1ab2df8ad2 233720 libs optional libcurl3-gnutls_7.38.0-4+deb8u10_ppc64el.deb a92d2afbb0b4bb71870a45d0c2a207c1 244224 libs optional libcurl3-nss_7.38.0-4+deb8u10_ppc64el.deb c4c9dae87b8b19005b3542b5ad44064b 322156 libdevel optional libcurl4-openssl-dev_7.38.0-4+deb8u10_ppc64el.deb 8eca84e7e7c7c669d75377905efddecc 314394 libdevel optional libcurl4-gnutls-dev_7.38.0-4+deb8u10_ppc64el.deb 505e3cdc01a07fdb01075c5fb773efde 326690 libdevel optional libcurl4-nss-dev_7.38.0-4+deb8u10_ppc64el.deb 100119fb9ea904ae1b5b4677fe0ea63b 3678208 debug extra libcurl3-dbg_7.38.0-4+deb8u10_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEzUmdMQ1QVjNci03Py618dK+CgCwFAlqoYxsACgkQy618dK+C gCwYLg//XVLFCX4zGp8Hvw5C0wcnqbrfwZtk6VCDtgJonfdt7PLYSXOsXXXPg1Ny enmPjF5yRzCLbPDEEH/OUCv8nwj8mquE9yhdhJpoWfeDkU5rou447tyT4qSQUFEE l7c4ZECytBKJESFBTxqbVc402d00Qcp6FxkXnQCt0+Nk5/N5/9craHd8S94pK6JQ 0hK97wxp/6/5e0GtLO6bNwp/4t5geBnqJb01iBnMsFUAsyRCzkcKlAPWeULl23xj V1oQsT7kfISlSkyBonE6ZnQD6g4RmI3QES98MN9bNkw7iFdXm6hcE4/bZoyKhKCE SF8oI24vz9ErIOKl2BHyX4vz49jM6dd+xgwTQcpBYm9ZEwz7IGUH8lv4PnOPoKK3 8v/Sg5VQL3wlw6GvAn/++J1Mu2uX1Mo+fhcQ6jrOTojjt/Mf9D8Y5L69cDn2TDWm WBfUDJDkzxl4/FVPP9R8ty463UtCJkJV97Kg9xoE7c0tx1ijnDUkw4DRqP7tjajl /3N/XfwgSlelzBJCFgruRpZc0FkUjG8LaIPl96pXmK3e1Jg3CoZqzQtJJI4udbBO Hm9LaAGuLFaXdXofGBqd4Q4C0GPBbLtdBhGeVxMeDCKKtswLkQGSGcEc/3YLb3Be Xy5kCZNhpq15ZJ5qxfI2vn94xj2oAlF+u1S5fCQ8lobOG45LG9c= =KFdt -----END PGP SIGNATURE-----