-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 25 Jan 2018 22:34:49 +0000
Source: curl
Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc
Architecture: armhf
Version: 7.38.0-4+deb8u9
Distribution: jessie-security
Urgency: high
Maintainer: armhf / armel Build Daemon (hoiby) <buildd_armhf-hoiby@buildd.debian.org>
Changed-By: Alessandro Ghedini <ghedo@debian.org>
Description:
 curl       - command line tool for transferring data with URL syntax
 libcurl3   - easy-to-use client-side URL transfer library (OpenSSL flavour)
 libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours)
 libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour)
 libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour)
 libcurl4-doc - documentation for libcurl
 libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour)
 libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour)
 libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour)
Changes:
 curl (7.38.0-4+deb8u9) jessie-security; urgency=high
 .
   * Fix HTTP authentication leak in redirects as per CVE-2018-1000007
     https://curl.haxx.se/docs/adv_2018-b3bf.html
Checksums-Sha1:
 83cbf73083fd0acf6c2f50236361002071dace3c 196412 curl_7.38.0-4+deb8u9_armhf.deb
 3aff58574e6a356d1ae02939b8d05330b27e97cb 235896 libcurl3_7.38.0-4+deb8u9_armhf.deb
 dc95be8f73b7b893247b132451a4bd0b1b36463e 229224 libcurl3-gnutls_7.38.0-4+deb8u9_armhf.deb
 3b4ac5b512de72a6c5c751aa475cdc3b5fdcd72a 238806 libcurl3-nss_7.38.0-4+deb8u9_armhf.deb
 5cc4660257ad57753b43dfe90c5542920901e017 315776 libcurl4-openssl-dev_7.38.0-4+deb8u9_armhf.deb
 5f2493436e35626c3b276dab5f6db9f5236c64c1 307426 libcurl4-gnutls-dev_7.38.0-4+deb8u9_armhf.deb
 cf912c88e33804118143a079663db1142b25727a 319020 libcurl4-nss-dev_7.38.0-4+deb8u9_armhf.deb
 84d7699218d8f85ff9b7ec8ccf4a5d6aad17eed9 3566812 libcurl3-dbg_7.38.0-4+deb8u9_armhf.deb
Checksums-Sha256:
 00fff4a2bd9e9212c38452dea58244dd0ebeefd2867cb274687f62209bd1b62b 196412 curl_7.38.0-4+deb8u9_armhf.deb
 3f013d65d48fa0be5907d536d9abaf16b985383095a5d43948694ea6c4f7193e 235896 libcurl3_7.38.0-4+deb8u9_armhf.deb
 0b0f3c670ece79099507c588eecd52e1d2899b58a52ab9c3413dd0d06fe97c5f 229224 libcurl3-gnutls_7.38.0-4+deb8u9_armhf.deb
 da1ab6ce6942e47006afd9d4b3844c40c7f08c05f911ec0115a663a582136d31 238806 libcurl3-nss_7.38.0-4+deb8u9_armhf.deb
 f6d2ebb9d4ba2153cf3327cc36a45e6b35fa9c3bc4060f72de3a6788a62c9af4 315776 libcurl4-openssl-dev_7.38.0-4+deb8u9_armhf.deb
 01d6ad5150fb15dd0d487ce00199a896757d864e4c540d4d9f16738b9156ff15 307426 libcurl4-gnutls-dev_7.38.0-4+deb8u9_armhf.deb
 703ec118178357a3dfc86de1815b8431f326f36f6b2764a5114bf692b8e51f93 319020 libcurl4-nss-dev_7.38.0-4+deb8u9_armhf.deb
 d9ef41b9fe865788a1abb1bc6939f0d9a8feb94df6af766732ec1d49a12e929d 3566812 libcurl3-dbg_7.38.0-4+deb8u9_armhf.deb
Files:
 7f0cb5461c4fa2d9ccf7621c9f55affc 196412 web optional curl_7.38.0-4+deb8u9_armhf.deb
 bdc3cb46187dd8d0275d2d2bff09a5eb 235896 libs optional libcurl3_7.38.0-4+deb8u9_armhf.deb
 74eb3f0b31d138cbf37e3f1d63108155 229224 libs optional libcurl3-gnutls_7.38.0-4+deb8u9_armhf.deb
 086518b12e51523d7a4e0d5a26368f98 238806 libs optional libcurl3-nss_7.38.0-4+deb8u9_armhf.deb
 f880362b181f8c752dcb0009f5489ac4 315776 libdevel optional libcurl4-openssl-dev_7.38.0-4+deb8u9_armhf.deb
 7101cbb4284ba41c5387b136ff423ff7 307426 libdevel optional libcurl4-gnutls-dev_7.38.0-4+deb8u9_armhf.deb
 bc842f3f22e5f497d3f5648dc744f9d8 319020 libdevel optional libcurl4-nss-dev_7.38.0-4+deb8u9_armhf.deb
 17dcd24273a1f84f896234adf3ae88de 3566812 debug extra libcurl3-dbg_7.38.0-4+deb8u9_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=2eWE
-----END PGP SIGNATURE-----