-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 25 Jan 2018 22:34:49 +0000 Source: curl Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc Architecture: arm64 Version: 7.38.0-4+deb8u9 Distribution: jessie-security Urgency: high Maintainer: arm Build Daemon (arm-conova-01) Changed-By: Alessandro Ghedini Description: curl - command line tool for transferring data with URL syntax libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4-doc - documentation for libcurl libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.38.0-4+deb8u9) jessie-security; urgency=high . * Fix HTTP authentication leak in redirects as per CVE-2018-1000007 https://curl.haxx.se/docs/adv_2018-b3bf.html Checksums-Sha1: e7e111247ffc867c97a3d94e51cac26c1ca93e1b 194244 curl_7.38.0-4+deb8u9_arm64.deb ffbe263618e57c138007c652ecede91f3412af5a 227688 libcurl3_7.38.0-4+deb8u9_arm64.deb f67b2f642d01157368400309c68c5b63eeaaae39 220748 libcurl3-gnutls_7.38.0-4+deb8u9_arm64.deb d98c0f26065cfb0b203931ebfb3f4829b4fd6eff 231094 libcurl3-nss_7.38.0-4+deb8u9_arm64.deb fb9ad721b9d6565302f337c99327bb8f6379636a 310196 libcurl4-openssl-dev_7.38.0-4+deb8u9_arm64.deb 2f3861b1c30962e5705c53a19ebb352e040ddaf8 302550 libcurl4-gnutls-dev_7.38.0-4+deb8u9_arm64.deb 0773ffc6c8c6b35ca36808e2df3dba434308d0bb 314302 libcurl4-nss-dev_7.38.0-4+deb8u9_arm64.deb 8b078a6a963f19c56dd3222499df67636a781388 3674280 libcurl3-dbg_7.38.0-4+deb8u9_arm64.deb Checksums-Sha256: 05be2cd7fa8ef6d0478f60a4fb1231416e9c2603640865a320aa2c512c294246 194244 curl_7.38.0-4+deb8u9_arm64.deb 340d52bbca685475588b60038e303131fadcc9c65770b5fef798b3a6bf304d51 227688 libcurl3_7.38.0-4+deb8u9_arm64.deb 790696168edc175c7c28dba2fd0c284bdae634d9acc3991632bd632c06771fbc 220748 libcurl3-gnutls_7.38.0-4+deb8u9_arm64.deb 262c77c7e36cfa3a7b0e2b662035b9652dbd2c19301022189aa8317375028ed4 231094 libcurl3-nss_7.38.0-4+deb8u9_arm64.deb bc05206d8a9d3a70533c9261827d706d8e0050ad1c6064188649ec12c2b8975a 310196 libcurl4-openssl-dev_7.38.0-4+deb8u9_arm64.deb cc87eb07b236b41d1760fe7b77a362cdcedee11422069c66151aa252d4179221 302550 libcurl4-gnutls-dev_7.38.0-4+deb8u9_arm64.deb 631c9f718b6b23ac78303e7b7c9429dc1132c4f5377c430b6c781b4f0d6a6f49 314302 libcurl4-nss-dev_7.38.0-4+deb8u9_arm64.deb 61727ec35b214a24b0b3ea39cb01f9539e8b4d0c707f314db4b298986ab46ef6 3674280 libcurl3-dbg_7.38.0-4+deb8u9_arm64.deb Files: 9ee3be593a956948767aa7d95a14e211 194244 web optional curl_7.38.0-4+deb8u9_arm64.deb b09430b9c3f75cc685f4e6cfcf8bd793 227688 libs optional libcurl3_7.38.0-4+deb8u9_arm64.deb 95f8209a3a2533d1922ccd4ec38bc139 220748 libs optional libcurl3-gnutls_7.38.0-4+deb8u9_arm64.deb 242ac60925cce8a44b4271dc345bf4ea 231094 libs optional libcurl3-nss_7.38.0-4+deb8u9_arm64.deb bc4135ccbf78ae3d87c81d6bdd83b25c 310196 libdevel optional libcurl4-openssl-dev_7.38.0-4+deb8u9_arm64.deb 6278e3025cf523d5d5c1835b0226d55a 302550 libdevel optional libcurl4-gnutls-dev_7.38.0-4+deb8u9_arm64.deb 73905a6aba0debd980a86d392ddfe8da 314302 libdevel optional libcurl4-nss-dev_7.38.0-4+deb8u9_arm64.deb acc02d59543a5b982b1a2d2765348ec2 3674280 debug extra libcurl3-dbg_7.38.0-4+deb8u9_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE92W+jHA/BouwkM8n2AGWfWzDGuwFAlpqdHAACgkQ2AGWfWzD GuxFGw//Q2w14Q91r4Rbm199uVdWbmmkWf+kATZ6UogUIpC58RUpDCkPsW+nvD2O IseFgrEu/E0lli0stpKHvOQ0bS0WsiwGPDObPZxTFYA0lvy5NzDwjQO5GgKjaGKB IfepoCvdluWxitOKOX3hlLBs7RLHSPMm/g+d3vPaqCEwg3S+olSU7vNpuHT2b9EB ThtIocYrzT2ArimB21aFtCJAdK/OTW6uK1K3sTUWhcD7fhxpLZfsE8T7Oi9tx7z7 +AkzMerkZRwzTK/eaj8E1jYAinN1WAaZwlRUQ5K69W7+FY0CxbdREk0LC0OkKYIS +gMh4Re0t58a1Owhqm8sRofYQ0THjZysDRhQIO9Y/dYAHd6yh0p3freh+t8Xv+C2 8qRujXpDIm2FjRbQlSgG+s/0gzUbaw5F34hOOC+ntj9B/qG/Gl7sKcGLkgzo1cKq DeJ1TnRLZR9mUBHSi39RFgQz0Fb83yZpvgmFdUftcmleUGBVjZ0qEQ1zyvHXV81b aVds3Uei3dfsIA/5s5/v4bw0r60OD9u+P8QaZj/FBDZ4Yu7bG05ECiupTN0qzmAv WocI0dcW7XXovSuLQC9NtbNN9W6nBQUVwawS07Ixo0awTsJ4Kj3gjQBzxNDn22w9 DzM/ZhDej5JAaIebUZWFpZqeVfayscyS1eZ8r6/nhpfzHr7sB6k= =zax8 -----END PGP SIGNATURE-----