-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 08 Aug 2021 22:57:19 +0300 Source: curl Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc Architecture: source Version: 7.52.1-5+deb9u15 Distribution: stretch-security Urgency: medium Maintainer: Alessandro Ghedini <ghedo@debian.org> Changed-By: Adrian Bunk <bunk@debian.org> Description: curl - command line tool for transferring data with URL syntax libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4-doc - documentation for libcurl libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.52.1-5+deb9u15) stretch-security; urgency=medium . * Non-maintainer upload by the LTS team. * CVE-2021-22898: Information disclosure in connection to telnet servers. * CVE-2021-22924: Bad connection reuse due to flawed path name checks. Checksums-Sha1: 23abf7da432d2caa79dcc9b4897733859dc06ab1 2797 curl_7.52.1-5+deb9u15.dsc 73097952ada80fbaff924c706ba57d1f77c38d00 3504621 curl_7.52.1.orig.tar.gz eb4723c08e4d50eaefadc8f88d51a95b1229219c 65336 curl_7.52.1-5+deb9u15.debian.tar.xz Checksums-Sha256: f1c9f7dcf78e359aeae4b1c293a1b40dae77d86bd05cf693864861caddfe7e7c 2797 curl_7.52.1-5+deb9u15.dsc a8984e8b20880b621f61a62d95ff3c0763a3152093a9f9ce4287cfd614add6ae 3504621 curl_7.52.1.orig.tar.gz 09a8a9d9aab7e63470bc6e97f59ed9edfdcda0ab30e205347d0beddbf9addc5b 65336 curl_7.52.1-5+deb9u15.debian.tar.xz Files: 10e9c440ec2bec0f292ce232a3d60d45 2797 web optional curl_7.52.1-5+deb9u15.dsc 4e1ef056e117b4d25f4ec42ac609c0d4 3504621 web optional curl_7.52.1.orig.tar.gz 08da9b2af1c33f48d5f8c78a32c40a71 65336 web optional curl_7.52.1-5+deb9u15.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEOvp1f6xuoR0v9F3wiNJCh6LYmLEFAmEVdOkACgkQiNJCh6LY mLFJnQ//SPEbJr2hDB2vCX5VuBGsMJy8MY3iB7hiCsmLWAbxMmn7pXz2SiUBFfnL JXscNtYjXsgz2b3Lup1CKRLMpCEQFbSXxxteJTAaW5vG3Ydkp78HnGdphN4fcYCr x/zKO9ScgvRzb0rDIcj1ImumV8n5NwafaiJWYxBSGQ+UjARK4DPQfcWrXVGkhRE6 9kRfXk8/tBsTzel451hi5ZrjPDijSq20AD1AMGl0RGFYyMBfaCO3slvY/qlFNLf1 +cGXDSzmAxgb2MYD5K0Iwx6S2SlZj+UZlT97TEZFmMckuR/zuxew+DbCkLYuXjft z8eg+cajHxyE9L7gmCybKq/yFOaFRIewMfNgho/sO8VBjw1g0LYFu08nhFyVyrxf ynleJtlPkoWwcpnrMOk+VohFIWZPbFPVvJtYmDJOXOCif1m+E39HjmvBSgIIZQIN N+2rWibSoskV6zfq7Ir5zDYjfA0ixwI8k7tOY0VB+49Gs18YgdiFXdRsuxzfQOc/ jm9cm5Z3mGe1Iv+mSkmRhwxtuLxT+ad+lV5hX7KsVTzo7UcchiJn3MFfnj7OHbAV 813ZIwh7W7VajEFpue9LojSNcZC57YaBr6JakOfWYvlyY8s1BYQY5HWNvVzcckff j+4LkcnbPUC3e8EdOmulcEq+RKPYNGScze7dnyre6Y8+4I7YMRY= =ZaIj -----END PGP SIGNATURE-----