-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Tue, 17 Dec 2013 13:16:19 +0100 Source: curl Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc Architecture: source amd64 all Version: 7.34.0-1 Distribution: unstable Urgency: high Maintainer: Alessandro Ghedini <ghedo@debian.org> Changed-By: Alessandro Ghedini <ghedo@debian.org> Description: curl - command line tool for transferring data with URL syntax libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4-doc - documentation for libcurl libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.34.0-1) unstable; urgency=high . * New upstream release - Fix GnuTLS checking of a certificate CN or SAN name field when the digital signature verification is turned off as per CVE-2013-6422 http://curl.haxx.se/docs/adv_20131217.html - Set urgency=high accordingly * Drop patches merged upstream: - 08_fix-typo.patch - 09_fix-urlglob.patch Checksums-Sha1: 8ae5ed7e021b5da79585d770a13b7deada851086 2548 curl_7.34.0-1.dsc b74b59380e1736b2528cc03016614a78d8aa074e 3528094 curl_7.34.0.orig.tar.gz 2974d2b9291ceb3eed0e181cb75bdf6299ffe3f4 28292 curl_7.34.0-1.debian.tar.gz d8457297edc2cdaf0486a31d0123fe5f60ea0858 202752 curl_7.34.0-1_amd64.deb 8f9a9febbac6427790b2b973e84d0f6753fd6b49 258666 libcurl3_7.34.0-1_amd64.deb b33fd50d1c82e964e6dea7f8ab019c6481a06775 251194 libcurl3-gnutls_7.34.0-1_amd64.deb 1b54e84dc2de3236c3e8b157c2a2ed2cbbbf236d 262220 libcurl3-nss_7.34.0-1_amd64.deb 8f7c69fb8171e4398c2e42b3c108061e54f8338d 333866 libcurl4-openssl-dev_7.34.0-1_amd64.deb 46aaf3510742769cf021dba2ab36f60e0a77fd9c 325682 libcurl4-gnutls-dev_7.34.0-1_amd64.deb d27827a28ddd29dc5bec07cc711b6eb32eb0c790 337908 libcurl4-nss-dev_7.34.0-1_amd64.deb d78aa09c5420e0f477502f95260c311e602336d4 3524080 libcurl3-dbg_7.34.0-1_amd64.deb 79d96d6c284bb9ebaec85123e75ee9fb26125ef0 990278 libcurl4-doc_7.34.0-1_all.deb Checksums-Sha256: 605984cdd618e3cd19345f760662cc05a42baa640fca0a38a44ebb9bccd2c477 2548 curl_7.34.0-1.dsc 0705271de8411a85460706e177cd0f1064ec07c0b9e140a66a916fb644696d6a 3528094 curl_7.34.0.orig.tar.gz e45408170010e2a657e09b020148e0137f52c29e37450f8554b0e4dffa1bba2e 28292 curl_7.34.0-1.debian.tar.gz e07cc5a9074c0a0715405860d825309397ccf3bcdc02c2a053b49c4557f370d5 202752 curl_7.34.0-1_amd64.deb 6229a6b934bfb6bf828c72d1c88534380126f990cdb28f9e9280cfca696398a5 258666 libcurl3_7.34.0-1_amd64.deb 3a3505d639af89065e0d0fb4a3af0e0c6ca42982523aa050f625f2c72a42a923 251194 libcurl3-gnutls_7.34.0-1_amd64.deb 6be6e855702ff8e995740fc28c9a7dfe742f3c83f46d84a5026e5ec0ce1482cc 262220 libcurl3-nss_7.34.0-1_amd64.deb 18cca0807cdfeeb7c6a9ad2bd3dac6e72dae004fabaabaf65554f6456faf7712 333866 libcurl4-openssl-dev_7.34.0-1_amd64.deb 3284eaa5c8d038a1531a89ac15e704e543f8ff082efb197aa8829fa3f8639fa3 325682 libcurl4-gnutls-dev_7.34.0-1_amd64.deb bc0edb16599cda8fb375ff050f2e550dc0b3cf5622b19a62dd4a82ec724365a5 337908 libcurl4-nss-dev_7.34.0-1_amd64.deb 07d3460263af3a20392016bdd9084f48f0f10b5c3579424bd0a7f0d4ccf62c78 3524080 libcurl3-dbg_7.34.0-1_amd64.deb 4350221dc43f8289a4d76176c48c1cd744a42c226e84efca1c3a2df82c9e61da 990278 libcurl4-doc_7.34.0-1_all.deb Files: 35dfa2d69aa959bd14431de0163faf9a 2548 web optional curl_7.34.0-1.dsc d5b7edccbd1793e3549842e01331da20 3528094 web optional curl_7.34.0.orig.tar.gz 6f3daaf93cb5eef4a1f6fcf25e980d42 28292 web optional curl_7.34.0-1.debian.tar.gz f1c706e2f890cf7d324cf22e2f02d040 202752 web optional curl_7.34.0-1_amd64.deb 5726d9f4dd14d18743d0d4b9ae6d2ee4 258666 libs optional libcurl3_7.34.0-1_amd64.deb ba761872e60b998d5273c15aba19f1fc 251194 libs optional libcurl3-gnutls_7.34.0-1_amd64.deb 9c0a9afcf37dd1de225bff9b20e89780 262220 libs optional libcurl3-nss_7.34.0-1_amd64.deb ce0af6cf7ee0a9f98b81aaee186b442c 333866 libdevel optional libcurl4-openssl-dev_7.34.0-1_amd64.deb 6d7539e4d2376b3c994119323347240e 325682 libdevel optional libcurl4-gnutls-dev_7.34.0-1_amd64.deb ce34ad53a1d84b8db5a3c5b57d69f3fd 337908 libdevel optional libcurl4-nss-dev_7.34.0-1_amd64.deb 8847c676acefdedeff7904e9e87f3832 3524080 debug extra libcurl3-dbg_7.34.0-1_amd64.deb 25e0dc82f2d0f8a5588f750babdf4d84 990278 doc optional libcurl4-doc_7.34.0-1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.15 (GNU/Linux) iQIcBAEBAgAGBQJSsEdJAAoJEK+lG9bN5XPLhEUQAIv1d7hvqZ3g3qH/qLvk5sXy 5iMuzxyO/MDvGQVeERu/B5aAHkSAsBIF6TO8Fth3Mky2zyY5K0LGVMVXl30vZpm1 iqlv1zg+9vrGbvRPf7wKEsLnjZo19ULXbo59GXM9BsD1M1VMgOOKb7zqLIRJfrgJ 16fyeNYQdVUFZ1AVsbcIRSiAgTcYBxmkMPWVeBHBiaPtPTcyl0troQzDXKhsY/V2 I33iDYA9tewWFDI0k720nIzKAR80oeRcmpmD4jvDaAb613QUW3mhKJyFJPe4ztkN V1tbCJywP8lEMeI0OK5G0yaJUnrHqgLJBQeKLhDHgqaqj4HgCHfVUe5ebfrdA9xP O8u5NtBwODvR6Lnw0qttleOZFuBrC1dr2IjStAUqse41vDbvSLg2suRhRuKgp/OJ TEFTuo/ST+nhHowFVUvQLcPwGNRPmRS+R6DSLndFj25PNMvL1j9I3ojdV006N/yV 9nIlGElDzE9N4Ped9dV8nHH66Sb2jE+0zUkBO7s2mQ5ISosVGzsPnFFzX9ypJuW/ oQVCMp7r63D6P7rF1e6OBwCLHkedhpwB2/Li/y1W53R0VUktHw//VcyIsRiWrpdC h5b1Oh+snfKY8TMv37Q8GBBSZpv9WKsdUTOJ1d0yy+hU3ZlXQJKm27B0jcePknH8 mQt72D+yjjC4G0jSzlag =dgQ5 -----END PGP SIGNATURE-----