-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 25 Jan 2018 22:34:49 +0000
Source: curl
Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc
Architecture: armel
Version: 7.38.0-4+deb8u9
Distribution: jessie-security
Urgency: high
Maintainer: armhf / armel Build Daemon (hoiby) <buildd_armhf-hoiby@buildd.debian.org>
Changed-By: Alessandro Ghedini <ghedo@debian.org>
Description:
 curl       - command line tool for transferring data with URL syntax
 libcurl3   - easy-to-use client-side URL transfer library (OpenSSL flavour)
 libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours)
 libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour)
 libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour)
 libcurl4-doc - documentation for libcurl
 libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour)
 libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour)
 libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour)
Changes:
 curl (7.38.0-4+deb8u9) jessie-security; urgency=high
 .
   * Fix HTTP authentication leak in redirects as per CVE-2018-1000007
     https://curl.haxx.se/docs/adv_2018-b3bf.html
Checksums-Sha1:
 a39b64b20302af3edc4e5da60c801dfc049d64c7 196450 curl_7.38.0-4+deb8u9_armel.deb
 bbe8df24ae092df420f78bc2735dbd23b5fc021b 232002 libcurl3_7.38.0-4+deb8u9_armel.deb
 0c883fbbd98be1f0d191647cef1ba0f756f11bcc 225384 libcurl3-gnutls_7.38.0-4+deb8u9_armel.deb
 920552a1ccca8cde9f4abac88dd6c02b1857cf2a 235536 libcurl3-nss_7.38.0-4+deb8u9_armel.deb
 c2897d0cadb97de8f4e4678a62dc94d3582b8196 316764 libcurl4-openssl-dev_7.38.0-4+deb8u9_armel.deb
 902118e2bed49e037f60616e661ec1c9d9554356 308730 libcurl4-gnutls-dev_7.38.0-4+deb8u9_armel.deb
 cfa24d3f1ed2260da4de26ad664fa3a36ac255de 320360 libcurl4-nss-dev_7.38.0-4+deb8u9_armel.deb
 1ca767c4cd306508d38a881ada3fb29c9f55ff44 3575990 libcurl3-dbg_7.38.0-4+deb8u9_armel.deb
Checksums-Sha256:
 f88c34a89eba54df8b7b77e60a28bc1e1c3d2988184c549a5d1abc03e6c431b7 196450 curl_7.38.0-4+deb8u9_armel.deb
 d15b2f943972a13f9fa5635c4314ca7f691f0e4383686605bcda2f6bbe30cd1a 232002 libcurl3_7.38.0-4+deb8u9_armel.deb
 2c130664901d28ee8530e333e9f6736356fc33c9e1bc32e982fc217ac0de3f95 225384 libcurl3-gnutls_7.38.0-4+deb8u9_armel.deb
 08c6b6d02dabb813148824d07eaee997b49fc67da75dd8d1236c1f591df21b42 235536 libcurl3-nss_7.38.0-4+deb8u9_armel.deb
 40fd3a56b68061924e9643d2012f0bc8c76fd36d21c3df1e08782b838c908904 316764 libcurl4-openssl-dev_7.38.0-4+deb8u9_armel.deb
 9649074ba7c5767613877a05fc76e6f2f8af3d707bf87b61bee76de7d3c8406a 308730 libcurl4-gnutls-dev_7.38.0-4+deb8u9_armel.deb
 441ad0638e1f44ddf8d1ccd8e282b7dd760f1d0efd2e029f7e48edd1c7eaf36c 320360 libcurl4-nss-dev_7.38.0-4+deb8u9_armel.deb
 b96b8916d0c49f23de8535166384b79e939443ac2ae9308352dc91b995ac481e 3575990 libcurl3-dbg_7.38.0-4+deb8u9_armel.deb
Files:
 fcd2f48a054e93a5d9bbfeb33d06000c 196450 web optional curl_7.38.0-4+deb8u9_armel.deb
 f64c571dd4c9802e743b64412a4dc36a 232002 libs optional libcurl3_7.38.0-4+deb8u9_armel.deb
 6e790c533c9876b6dea1b621c543f084 225384 libs optional libcurl3-gnutls_7.38.0-4+deb8u9_armel.deb
 8630f1b143ff03af16ed606cf826f8cd 235536 libs optional libcurl3-nss_7.38.0-4+deb8u9_armel.deb
 3745454c4dd9f4597adca351c6f05435 316764 libdevel optional libcurl4-openssl-dev_7.38.0-4+deb8u9_armel.deb
 d634faa06c2ec48b22a9f847574f38b8 308730 libdevel optional libcurl4-gnutls-dev_7.38.0-4+deb8u9_armel.deb
 614e7fc58b3b8330b68b6aa1b96d8de1 320360 libdevel optional libcurl4-nss-dev_7.38.0-4+deb8u9_armel.deb
 ba3d5b9d447ecfb6bedf7f3636b43c3d 3575990 debug extra libcurl3-dbg_7.38.0-4+deb8u9_armel.deb

-----BEGIN PGP SIGNATURE-----
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=Y/tf
-----END PGP SIGNATURE-----