-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 13 Mar 2018 00:46:06 +0000 Source: curl Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc Architecture: mipsel Version: 7.52.1-5+deb9u5 Distribution: stretch-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-aql-02) Changed-By: Alessandro Ghedini Description: curl - command line tool for transferring data with URL syntax libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4-doc - documentation for libcurl libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.52.1-5+deb9u5) stretch-security; urgency=high . * Fix NIL byte out of bounds write due to FTP path trickery as per CVE-2018-1000120 https://curl.haxx.se/docs/adv_2018-9cd6.html * Fix LDAP NULL pointer dereference as per CVE-2018-1000121 https://curl.haxx.se/docs/adv_2018-97a2.html * Fix RTSP RTP buffer over-read as per CVE-2018-1000122 https://curl.haxx.se/docs/adv_2018-b047.html Checksums-Sha1: 4a44422be1509c1e762894ca55d8dc9657b15b69 127730 curl-dbgsym_7.52.1-5+deb9u5_mipsel.deb 02910e5aaf6b4cc1d4b0036be74f68f886d845c7 10284 curl_7.52.1-5+deb9u5_mipsel.buildinfo 74da31bdbbecd87149276950cfb9ad4b9188e44f 224780 curl_7.52.1-5+deb9u5_mipsel.deb fad1282cc94157fb42dbf066feaa8bf3c823bef2 4903908 libcurl3-dbg_7.52.1-5+deb9u5_mipsel.deb 74056d037b379d54cccbfdcf35fd0c2327bee337 275828 libcurl3-gnutls_7.52.1-5+deb9u5_mipsel.deb 0e9d030eb5038a019652a67ffa2ea900e39e707a 281444 libcurl3-nss_7.52.1-5+deb9u5_mipsel.deb dbe709dbc106d365833558eaaa3d1782b908cdf1 278010 libcurl3_7.52.1-5+deb9u5_mipsel.deb f202c7045c0edd01a1ecc04aeb247306d98ef9fb 384226 libcurl4-gnutls-dev_7.52.1-5+deb9u5_mipsel.deb 2dfb3d2d5fe03648f7273f584ae1a95fda8e9013 390598 libcurl4-nss-dev_7.52.1-5+deb9u5_mipsel.deb b8bedac3c02940fef23a12a43e2df48fd4aa6665 386774 libcurl4-openssl-dev_7.52.1-5+deb9u5_mipsel.deb Checksums-Sha256: a4a6a5403dd328c53ebd15b01a36b49579aa484da6dd0864fa6374d007b3b5f8 127730 curl-dbgsym_7.52.1-5+deb9u5_mipsel.deb 188ace466c3c49087122f17d9fad6d96d4b6797bdf81f5d80e1b19f5aee51ece 10284 curl_7.52.1-5+deb9u5_mipsel.buildinfo 4e8eb2b469ee508f5782046d3f21326e2cf9617b7913bdccb868b76fa38da758 224780 curl_7.52.1-5+deb9u5_mipsel.deb 1295d3bafa5fb567671579cea6ce448c448f08894873e669839ac30e5bcad6ed 4903908 libcurl3-dbg_7.52.1-5+deb9u5_mipsel.deb 81d580dd909cf1af2581aaf52d02e6062c9579edf4ad5a8688a6df57d6a61ce6 275828 libcurl3-gnutls_7.52.1-5+deb9u5_mipsel.deb 9d03b461006347277b2c0abffdff06c757ae848f56a942a6acbbb7d7720fe5a7 281444 libcurl3-nss_7.52.1-5+deb9u5_mipsel.deb 57153789c7e7f7620d3fd44b2d7554b5b020f500030705da41218461e150b749 278010 libcurl3_7.52.1-5+deb9u5_mipsel.deb a06d34edcba17e8f11429c700c416c81efd18096d761f42cd0aff62513839934 384226 libcurl4-gnutls-dev_7.52.1-5+deb9u5_mipsel.deb 96a92cbbd994e47e339e63aa9eeb2be8b13d7206cdcdaaba6469b4d7387869e1 390598 libcurl4-nss-dev_7.52.1-5+deb9u5_mipsel.deb 5e69b146f9068e92704ac4b182fe69cd218b8d1bbf2d275ce68da54ef71d169b 386774 libcurl4-openssl-dev_7.52.1-5+deb9u5_mipsel.deb Files: e71eca4a73556da32ccd4470913804b6 127730 debug extra curl-dbgsym_7.52.1-5+deb9u5_mipsel.deb 9626579c81b3c56ec11c7f80e92e92ed 10284 web optional curl_7.52.1-5+deb9u5_mipsel.buildinfo 3b8ff842fdf836869559baa9b0907a1b 224780 web optional curl_7.52.1-5+deb9u5_mipsel.deb 1883e84a14c45a41d786724d4a0f836b 4903908 debug extra libcurl3-dbg_7.52.1-5+deb9u5_mipsel.deb 11a45f0c7c825fecab78c433d399fd12 275828 libs optional libcurl3-gnutls_7.52.1-5+deb9u5_mipsel.deb 054d43daf4e3177e20b6c1e98138750c 281444 libs optional libcurl3-nss_7.52.1-5+deb9u5_mipsel.deb d0ee3b6050523ffd428d6811bf1ee25e 278010 libs optional libcurl3_7.52.1-5+deb9u5_mipsel.deb 42c496aafefcb93e6cc1dba8abe8fa7b 384226 libdevel optional libcurl4-gnutls-dev_7.52.1-5+deb9u5_mipsel.deb 912b1a2111ea402e84340d99b52047e1 390598 libdevel optional libcurl4-nss-dev_7.52.1-5+deb9u5_mipsel.deb 3646baf04a9d339e06628a4a4899e787 386774 libdevel optional libcurl4-openssl-dev_7.52.1-5+deb9u5_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE8LsAivyiIMJwIWL+rKl/uKakjvMFAlqogCEACgkQrKl/uKak jvOUig//RffPrE7h2n9MQa6a266hH8rPkRUhHPtPtrkZVBGzCIb+0SnAgxVrvNzf BfMnDuk7ZIKI4uPmHBxxPl6PMnguLzP7jAnYgNdh0oDFhBRuzwVpTD3/3kc8UfXc Zcfyg9J2SbiF5qFJjHEqQzr+nC3jz6ji1Ot7bTrvSoWonyEcO+gmGih5iiUiUw5h /IBGe+DySYSs2RZi2S/jvhXpixPE3TePRuZwWdZDpRt37b5TsPZyvdzWVJD1/SKO HZoYKku6Z5oCB3KCD3O0nwOVN54ktAJGrBrZRglvxSpemlgF+YYY82Taw1gqt4v8 Z9OAGtsGlf3qdQhMU01hFxr5DnrhAoTvCUk2mKxLmbGxXs8djILAE7DJfd898iBO /dJR+Ln/MwldCrW96UF/BJf0K/knOCAYDjXZSwHmi7pEQXzSmV9SlwbqiO3BKNQQ ttTdM4YCX+ARXkEsSjzhuK4z9yJkEvZKgFlqcrkZxnoaSV5oWNNct1dkSdSQhPSh 17XiMXZLRZanVjJvSksurndk1+HO07h2kaecFt2P/t/MBXjyO6ubQ4oo7TZajCkh zkhD3JCf/QJUebXtAom5B/Rw2xfVdmyJ48QOAlaLBH92EUWhbP/x0J4FTup3A3Cy RYQq8R4dHv46UVLEaPHs5udf1TOGRR+zjOVn57B+yxs5Y6FFNdY= =+8hM -----END PGP SIGNATURE-----