-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Wed, 09 Apr 2014 19:03:55 +0200 Source: curl Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg Architecture: source amd64 Version: 7.26.0-1+wheezy9 Distribution: wheezy-security Urgency: high Maintainer: Alessandro Ghedini <ghedo@debian.org> Changed-By: Alessandro Ghedini <ghedo@debian.org> Description: curl - command line tool for transferring data with URL syntax libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Closes: 742728 Changes: curl (7.26.0-1+wheezy9) wheezy-security; urgency=high . * Fix multiple security issues (Closes: #742728): - Fix connection re-use when using different log-in credentials as per CVE-2014-0138 http://curl.haxx.se/docs/adv_20140326A.html - Reject IP address wildcard matches as per CVE-2014-0139 http://curl.haxx.se/docs/adv_20140326B.html * Set urgency=high accordingly Checksums-Sha1: 431d40bd10041ee9ef833406d502e5cf068b19b4 2514 curl_7.26.0-1+wheezy9.dsc fbb6c7628e3d1415b1bb7162c8598b1a5a667161 35101 curl_7.26.0-1+wheezy9.debian.tar.gz b0825dd01cbdd61aaa28d2dd2855a117f510d99e 269554 curl_7.26.0-1+wheezy9_amd64.deb 4a4e875dfaf60952af36ca7cea3cbc62e7a42b37 330580 libcurl3_7.26.0-1+wheezy9_amd64.deb 1c6db430ba7377d475b95cea7933544b95237707 321228 libcurl3-gnutls_7.26.0-1+wheezy9_amd64.deb 658c75342c738ab7fd67f01a267fb6373022c826 327988 libcurl3-nss_7.26.0-1+wheezy9_amd64.deb 455fbc6fa1a14f363ad7c3d5304ec9e9baca9e31 1271882 libcurl4-openssl-dev_7.26.0-1+wheezy9_amd64.deb 6a76c03c0b5286b1a10958d3f438b9965ce8b26a 1260270 libcurl4-gnutls-dev_7.26.0-1+wheezy9_amd64.deb ec4212796d71e04ed2fdcd03b4fbc09831b91bc1 1268090 libcurl4-nss-dev_7.26.0-1+wheezy9_amd64.deb 055c7211531f11e5c48bcc01275309d569be2638 3296026 libcurl3-dbg_7.26.0-1+wheezy9_amd64.deb Checksums-Sha256: 39a17ff9e513d649d69c2b4b7748b1b82c5122bb276a35d6dbfed9ca446565ce 2514 curl_7.26.0-1+wheezy9.dsc ba0b15938ac47298715c1dc228d4c43628d0f45e0f84dd872970fe5797faebc0 35101 curl_7.26.0-1+wheezy9.debian.tar.gz 0e820c4e61bae6b354fff6a5a623b83a88d1ee43586ca8122b669752ca666115 269554 curl_7.26.0-1+wheezy9_amd64.deb 467091ee30f50cfd7e62f8e27993faa80c4b1ca447f6cd5d9fa36d7a42272e02 330580 libcurl3_7.26.0-1+wheezy9_amd64.deb 9e5c14a19c8dcf9f81bc556a5f9b93925969953569b3d7d229f41f1f2dd42a4f 321228 libcurl3-gnutls_7.26.0-1+wheezy9_amd64.deb f12529b795fb68b158de0e4067210d583a4dfc6a882d9dd55d83a88b75f508f1 327988 libcurl3-nss_7.26.0-1+wheezy9_amd64.deb fe0c692b0b84444132ee7942dad3124a1abb74de6ee7182737edcce3556b5cf4 1271882 libcurl4-openssl-dev_7.26.0-1+wheezy9_amd64.deb 0eca2a37ef3cec65e521393bd1a8976490fb9d7ce7c1b063de6ee1ba588285e3 1260270 libcurl4-gnutls-dev_7.26.0-1+wheezy9_amd64.deb dfec352a05a60c092f9b4df3f54d974230440a9c4c87a7abc816b318628fb347 1268090 libcurl4-nss-dev_7.26.0-1+wheezy9_amd64.deb 2481fb6992df60eeb085b50b85f0af6af878e25feddd2f61423c97e4833858ee 3296026 libcurl3-dbg_7.26.0-1+wheezy9_amd64.deb Files: b3ca14c09cc1578c7e1d9d2ccdd3a482 2514 web optional curl_7.26.0-1+wheezy9.dsc 80b65ccde47f3c2b78642632b8fb40e2 35101 web optional curl_7.26.0-1+wheezy9.debian.tar.gz 53a3a3b22ecac9d70c13ec76af99c984 269554 web optional curl_7.26.0-1+wheezy9_amd64.deb 8f335ba1736eb179e36ade1b8114d38e 330580 libs optional libcurl3_7.26.0-1+wheezy9_amd64.deb ab7b93711d220c807bc549d4d83a65d9 321228 libs optional libcurl3-gnutls_7.26.0-1+wheezy9_amd64.deb e5c5937fda51a21d8b6cec13bdfeb401 327988 libs optional libcurl3-nss_7.26.0-1+wheezy9_amd64.deb dde99dca21582e79fe515fea1833112e 1271882 libdevel optional libcurl4-openssl-dev_7.26.0-1+wheezy9_amd64.deb 81650ebce14eb0a6d2eb49deabc2ecf3 1260270 libdevel optional libcurl4-gnutls-dev_7.26.0-1+wheezy9_amd64.deb 70197c7ea81d7cdeb11028b507245079 1268090 libdevel optional libcurl4-nss-dev_7.26.0-1+wheezy9_amd64.deb 756c56fa6434fee73d7b33bc2af4c2dc 3296026 debug extra libcurl3-dbg_7.26.0-1+wheezy9_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBAgAGBQJTRYRWAAoJEK+lG9bN5XPLu+0P/jjNN33XJ7BcysVC1J4PYmvN Z+oWYGGnSl8d/mvm1IZrdr1+BBUOaBp5QdbDw4Higw1GSEMB+v+KwSq8srldjT1n QUnqny77rpQfSw55xg5jl/lPCnXL0PUIFcTQ58ZJfdjRaAKLTiy/htyltHledYo7 7dHgzDHcTiVOJjZjjb10pEDrH76+LWMpbJO11SLKUPtP8RTxcfe7SeasAI1nTVAl +V4pY2tRHmKwUU0pA41/x2/g/Rordlnh3IKYexnxjznbqOqVx8mrhTPq4GBNgXOC tY/IctbdXptFHt1KHlXQzccS7X7ZHJGW33hc5rIXAT+JeoNxzy+GGqqlYmYAGtX6 EOpM4odG8NS8j6pFBBVCPbP6aPGSz/ReLrtgYT7KpmSW/12AUz4XB+A3De6ous7s mJLZKsxL36PmArEv3Ufhq6LaflHjF1XcTlceS71766lB84hu5XPTHfvaZjr+hZ9L W7sVeG5ALD9W3+4YvRROhmVScPle1FcpxmDg+pqU0uwIRfJ3KZsgXpYx3IliJPQr Wk+hhr4JtZGMVwyx8KqRgOQluZkKZMTdoLxpEz5BDLuyhG5OwcWAy7PELPKwzToq IpcMcwgd3XjKQ86AOfh5DWIIHjsQFu+xBirHPUAGvTKcXqrpaq2OhETnXx/rM2Jz Xkcrwv6KL3bdaIYGto0z =pfHA -----END PGP SIGNATURE-----
