-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 22 Feb 2020 15:01:46 +0000 Source: curl Architecture: source Version: 7.64.0-4+deb10u1 Distribution: buster-security Urgency: high Maintainer: Alessandro Ghedini <ghedo@debian.org> Changed-By: Alessandro Ghedini <ghedo@debian.org> Closes: 940009 940010 Changes: curl (7.64.0-4+deb10u1) buster-security; urgency=high . * Fix FTP-KRB double-free as per CVE-2019-5481 (Closes: #940009) https://curl.haxx.se/docs/CVE-2019-5481.html * Fix TFTP small blocksize heap buffer overflow as per CVE-2019-5482 (Closes: #940010) https://curl.haxx.se/docs/CVE-2019-5482.html Checksums-Sha1: ae93980e0ea4c1b6422a4c021bb07886f97713ce 2719 curl_7.64.0-4+deb10u1.dsc 5911d4400e988ae52368f2266a5f84378983dbde 4032645 curl_7.64.0.orig.tar.gz cdf07f206c76cc44371d0682cb3365eca7aaba98 34156 curl_7.64.0-4+deb10u1.debian.tar.xz 4b7957708661403bf3f55c2386c832dc31f3755e 11485 curl_7.64.0-4+deb10u1_amd64.buildinfo Checksums-Sha256: bdbc61f9785516009ae74bb3775e21bed7ab8fdd7bfef4a1a4f471d5218adf3e 2719 curl_7.64.0-4+deb10u1.dsc cb90d2eb74d4e358c1ed1489f8e3af96b50ea4374ad71f143fa4595e998d81b5 4032645 curl_7.64.0.orig.tar.gz 911407ad8d73d0592db7f1a015656089563bb7dab279ec33bff855adf56bcf1b 34156 curl_7.64.0-4+deb10u1.debian.tar.xz e642a4a10997c3496b6a9a2df2a47511283459b416f7940e7ceba3f7323a9ed6 11485 curl_7.64.0-4+deb10u1_amd64.buildinfo Files: a5844caa5a270df6c2ed34af36bf28d1 2719 web optional curl_7.64.0-4+deb10u1.dsc a026740d599a32bcbbe6e70679397899 4032645 web optional curl_7.64.0.orig.tar.gz 4bccebfc1a187f1dd99b7fa62451e5a8 34156 web optional curl_7.64.0-4+deb10u1.debian.tar.xz de5ba4c8ded7e95cf7e45ebc01a6874a 11485 web optional curl_7.64.0-4+deb10u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJFBAEBCgAvFiEEBsId305pBx+F583DbwzL4CFiRygFAl5RTJcRHGdoZWRvQGRl Ymlhbi5vcmcACgkQbwzL4CFiRyibpg//T7jDvM9EFdHWfky3RYM8hiDk+E92Urpo KMfvsfJpFJxrAXmL0fNVEW2UIrhHUcz/7As5RhGz73ebZyWz4F+d6TzQTCPEyV9z BzpYzaE2CW2fC9Gsi4pep+Iqj9YiKY4UL50SrWT2ornyfV7I0L9U6zRal9m4rwNj cUjYXakRAhyAWFmI39ELdO1GW01kAyN4fY2n4eCKiS3U5bT/mXNKv1c7oidtdmIQ vMEdp5vTlz5wO1+qwTmS4UczLsQX3Mjr3tbS4ua+0mzHQgGKWIBzbvXoeN+bnSXR JQf71nHMSGOqoYpLBH8Ybop3/9J2W+lHrpghUQ5vyHfInOJeWPNSlioGcAbGTIod QwPkl/bigzTuKzt123EjpNYp+QQXFScWpu4fERqakhG1cB+HNl/JlZmhKGOrxpvH VAEoqiOCXDoQjj1CFS5L5PEyNpzU1OEpBw2KzGwowqfaP1hNPnZsbMVslqIm/31B 4AKXTCBx2TaLiRWuVcfZCCWAIxUO7OA37kAW6rPmcMFr3Yq7x/nlh54f7ddlUZku uWUzl5++aOE8XDQnSnyKuk6ndhoDbxdXSJ+xjmX7Dtxynx6fOPTT/c1HqBNpaHXt wO9Jw/8L5+vvK+IbiZnTRxgPCU8v4R8ZYz9Ph2bF4uDgS2q6hqyBZIwtuLe4esCI KEzkmzf1140= =U7ES -----END PGP SIGNATURE-----
