-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 13 Mar 2018 00:46:06 +0000 Source: curl Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc Architecture: s390x Version: 7.52.1-5+deb9u5 Distribution: stretch-security Urgency: high Maintainer: s390x Build Daemon (zani) Changed-By: Alessandro Ghedini Description: curl - command line tool for transferring data with URL syntax libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4-doc - documentation for libcurl libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.52.1-5+deb9u5) stretch-security; urgency=high . * Fix NIL byte out of bounds write due to FTP path trickery as per CVE-2018-1000120 https://curl.haxx.se/docs/adv_2018-9cd6.html * Fix LDAP NULL pointer dereference as per CVE-2018-1000121 https://curl.haxx.se/docs/adv_2018-97a2.html * Fix RTSP RTP buffer over-read as per CVE-2018-1000122 https://curl.haxx.se/docs/adv_2018-b047.html Checksums-Sha1: 1fb32f8aa40eee6855da19e2f05ba30e304bd32c 138994 curl-dbgsym_7.52.1-5+deb9u5_s390x.deb 6c107fdf766a771b0dfccea382668167c018e131 10285 curl_7.52.1-5+deb9u5_s390x.buildinfo bac1b4bb08746a61a0e6612b32876f2aca2cff61 225940 curl_7.52.1-5+deb9u5_s390x.deb 8375558dcdfc14442db61d47e18d4f11a673e83d 5246994 libcurl3-dbg_7.52.1-5+deb9u5_s390x.deb a7edf40aa600076e9fdee05ee7bb601987fcd6f6 277176 libcurl3-gnutls_7.52.1-5+deb9u5_s390x.deb 92b7f479fa3d1de051cbac0e4428fc35103dac59 282856 libcurl3-nss_7.52.1-5+deb9u5_s390x.deb f1fff6aadc21161146db0f4ca5b2525c2fb7858a 279262 libcurl3_7.52.1-5+deb9u5_s390x.deb bbdb26e6765ada0a69f55faa23434d83e3c4e5af 362644 libcurl4-gnutls-dev_7.52.1-5+deb9u5_s390x.deb c15112e4b17be2930a77af2376b7a77a0d51aa3b 368766 libcurl4-nss-dev_7.52.1-5+deb9u5_s390x.deb 6550d844c4b543449dc5dadf6b7bb99df1f26729 363884 libcurl4-openssl-dev_7.52.1-5+deb9u5_s390x.deb Checksums-Sha256: f7dbaa528ab876a8ee0c39d3581ec9628174671de56ecb4d59389b0107a87dea 138994 curl-dbgsym_7.52.1-5+deb9u5_s390x.deb bc05ce64b96e6ceb0cb1189cffc6dc0c9961f401abcddcbad7b76128cb074f9c 10285 curl_7.52.1-5+deb9u5_s390x.buildinfo 52129d096bd10ff233da98a6292cb42c2b19b7a0c46779b7d8cc83c166281fb6 225940 curl_7.52.1-5+deb9u5_s390x.deb b48547e6cf685147f9ea6a5cae3c12cb8a9cff8de9e176380f1bc9313fdc5b07 5246994 libcurl3-dbg_7.52.1-5+deb9u5_s390x.deb c0aa4885e7d2fd4a4e20aee09d3588a9863d6959656df41b2c16f3c836b5e978 277176 libcurl3-gnutls_7.52.1-5+deb9u5_s390x.deb cf9c4fdb44cac5459c044e2263a24d023f874012719774b930746f478b686d1d 282856 libcurl3-nss_7.52.1-5+deb9u5_s390x.deb 839a254135266012d3b0e7fa4d9eb437811ab2821d3384d055e69be71fa45a8f 279262 libcurl3_7.52.1-5+deb9u5_s390x.deb 762d1c8f783c4c4423db854faf493dae2caa30f0fec7ac2e4cf593f3e8c9ff52 362644 libcurl4-gnutls-dev_7.52.1-5+deb9u5_s390x.deb 95f99a8b34028afaec9af07b3e88cad7aa1266598ea21d54797efca2da8672c6 368766 libcurl4-nss-dev_7.52.1-5+deb9u5_s390x.deb 34804e77ac0062932be084d0cfb62dd9c521914574e4707264a783304b8e00ea 363884 libcurl4-openssl-dev_7.52.1-5+deb9u5_s390x.deb Files: e7abfed004e21fbb8779058661d338c8 138994 debug extra curl-dbgsym_7.52.1-5+deb9u5_s390x.deb b0ee77960d56849b97078977fa708467 10285 web optional curl_7.52.1-5+deb9u5_s390x.buildinfo 2d1e0a13f1a42e4119cedaf322ec9380 225940 web optional curl_7.52.1-5+deb9u5_s390x.deb ea44e49bd58c6e89a8cfe9e5a51b799c 5246994 debug extra libcurl3-dbg_7.52.1-5+deb9u5_s390x.deb 96a50a7804d7f39a2e33b623ffb5abf6 277176 libs optional libcurl3-gnutls_7.52.1-5+deb9u5_s390x.deb 1dc1c0c70ef06e023a8b7382b6c6897a 282856 libs optional libcurl3-nss_7.52.1-5+deb9u5_s390x.deb af814dd9383abdb832793d03f270a9c8 279262 libs optional libcurl3_7.52.1-5+deb9u5_s390x.deb 08c80c9065d10e75f0530f96abedfb21 362644 libdevel optional libcurl4-gnutls-dev_7.52.1-5+deb9u5_s390x.deb 16680fc5a4f53baea536519225b5a77c 368766 libdevel optional libcurl4-nss-dev_7.52.1-5+deb9u5_s390x.deb 3025b189e70530c8ed7411a89e331ff8 363884 libdevel optional libcurl4-openssl-dev_7.52.1-5+deb9u5_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE6wFE9JkCBDwFA9M/d2EHIc1vAycFAlqoYwwACgkQd2EHIc1v AycQMxAAvX2u/iac3rJ30j7uLAn4ibKYr0DovwnS3ejZCpW/8SemeR1X0+fgv6x9 anVad7FbMcY6neuwahbUuXM98aIpWtufrk/YbxzOh5db1M6zeZkU7z35RdojD6/5 5Ef7UisCwMkj/TldF/7DXCYXJvNie9LuI4azFORXjVoXRpavH6DA/vZo3+sTUnCG 1f88BnlREQPwV9L3MkZPHi5mTD1GNdPH9ZeoOjhBEkckb3mYQCrC0AJRZX50RRiH V+yGpaUgnlwDh68hC33VF8rc4g9xSZOaZTMCW8TDSL69YdLjrdMYv4Nv7nfQ4SZj a+ak4VozQhY9HPkTnBgkR5bsBoFadOHp/BBhs3XFo6unAaSwaf0zzuiPyJ5T+Do4 2zEiDncY5WRN/sTXiYWypIqaMrK8YY/Nl4p4D4LYQSP0vMdkUG0o/A6wTWxjMZfh 6I7h+tCilAgxJuLQ08IazoQHTzoZtYFqZI8BUdTNvv5qe8ig5kOHYwGWhS4r4uzi W4FSSRhFlVVgdDqSfMtJpIZU3XfuB+LGE7sBc1+EJK1LVvXur2cQxVhpL0OdRPQm AXgc+5gsZQqI4NesRoNwSh9J1yFhanCFIYaO2AGzpYa+rmZDi8Cauu5ro0ixx1bp da4uzMEdcnSwrET5DW+DcY/7jrNmGWRyWAG0EAWbMz/47SHZtRw= =nutn -----END PGP SIGNATURE-----