-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Sun, 02 Nov 2014 16:07:47 +0100 Source: curl Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg Architecture: source amd64 Version: 7.26.0-1+wheezy11 Distribution: wheezy-security Urgency: high Maintainer: Alessandro Ghedini <ghedo@debian.org> Changed-By: Alessandro Ghedini <ghedo@debian.org> Description: curl - command line tool for transferring data with URL syntax libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.26.0-1+wheezy11) wheezy-security; urgency=high . * Fix duphandle read out of bounds as per CVE-2014-3707 http://curl.haxx.se/docs/adv_20141105.html * Set urgency=high accordingly Checksums-Sha1: ba4a742a95288143fe0196b83f42e21570ab949f 2518 curl_7.26.0-1+wheezy11.dsc d22fb4e6f6121e3d7e1ece33219dc4a37f53a994 40585 curl_7.26.0-1+wheezy11.debian.tar.gz f1256460a6b7d954263c8848ade9d51f93148d30 269654 curl_7.26.0-1+wheezy11_amd64.deb 4d1527b6b99f8722792bcab4ae8c228384ad8613 330848 libcurl3_7.26.0-1+wheezy11_amd64.deb 2867709c50d3c90d250259b407371208356b11b2 321634 libcurl3-gnutls_7.26.0-1+wheezy11_amd64.deb 2831501ca06f59f52568c43839c24ff238ccd39d 328324 libcurl3-nss_7.26.0-1+wheezy11_amd64.deb 9a5d75473ef5b503fd683cc457e63b0fc16b785b 1272432 libcurl4-openssl-dev_7.26.0-1+wheezy11_amd64.deb 4d2ab9d3a409d2bfeb58ad1b552e60503343bcc4 1260868 libcurl4-gnutls-dev_7.26.0-1+wheezy11_amd64.deb 765c8f6d410c19617d50ec858d910c03bcf27e45 1268626 libcurl4-nss-dev_7.26.0-1+wheezy11_amd64.deb ec2ec1d39fe99a6ce7f10c773e932737162e0227 3302370 libcurl3-dbg_7.26.0-1+wheezy11_amd64.deb Checksums-Sha256: 73a9d74113266c241a8e0c0c81ce9262000e59bb66bd1a6fb04adff90370b24d 2518 curl_7.26.0-1+wheezy11.dsc 360ca167f441e1655396a366cf22f0688c108725a666b68d92c2b0150a5b4c0b 40585 curl_7.26.0-1+wheezy11.debian.tar.gz 8ae297397b5ca9ddfef3ed5223934293d415a6c7044906c92dea2e5daeffe96a 269654 curl_7.26.0-1+wheezy11_amd64.deb 3e76d156e718e3565bcb928507ad41d680915233db82fc3c855d0449ed49df67 330848 libcurl3_7.26.0-1+wheezy11_amd64.deb 8d6ebbaeb79b884febb4ba268c662b8ccf9ebbabf99de701c6cd877da8fbe338 321634 libcurl3-gnutls_7.26.0-1+wheezy11_amd64.deb 672ff89bdf2145337fea5f36587fb103a1481c0e58b8020d105de9720f093acc 328324 libcurl3-nss_7.26.0-1+wheezy11_amd64.deb f503da532909864c1e3ca0eed31d67fccc5d46aa6e7c72358bc6a4a85b150a52 1272432 libcurl4-openssl-dev_7.26.0-1+wheezy11_amd64.deb ea5cbc83130ee4c06981b311f9674af63d60a95820814c7f2964483549590f0a 1260868 libcurl4-gnutls-dev_7.26.0-1+wheezy11_amd64.deb 8c90dbe12b26f07f629ffeb7cd4550f6d9bf3278031687625387929c2ce894af 1268626 libcurl4-nss-dev_7.26.0-1+wheezy11_amd64.deb 9f8923a50c5400d38c0edb3ffc4b6887b2878f069838f78d7fb0e5476333a4b6 3302370 libcurl3-dbg_7.26.0-1+wheezy11_amd64.deb Files: 5a01072dc02273483331f3aa3727c55c 2518 web optional curl_7.26.0-1+wheezy11.dsc a543c19f1fabb6cab468e103cd7dc21f 40585 web optional curl_7.26.0-1+wheezy11.debian.tar.gz 8621ebce1c960a7da93990c6b9518db4 269654 web optional curl_7.26.0-1+wheezy11_amd64.deb 7ccb0bbe8867e710efa21aa6d9bc90d1 330848 libs optional libcurl3_7.26.0-1+wheezy11_amd64.deb 5150024fc45f662b59891d4288fb29db 321634 libs optional libcurl3-gnutls_7.26.0-1+wheezy11_amd64.deb 05be59bcbdefc7715164afc0eac7d620 328324 libs optional libcurl3-nss_7.26.0-1+wheezy11_amd64.deb 077f4846333fe5ad4ff8257e35cb6c67 1272432 libdevel optional libcurl4-openssl-dev_7.26.0-1+wheezy11_amd64.deb b8f946c2ae2e8aa396f852dcf2582cf4 1260868 libdevel optional libcurl4-gnutls-dev_7.26.0-1+wheezy11_amd64.deb a37e216b7f4dab5da9efd1dff5b8793d 1268626 libdevel optional libcurl4-nss-dev_7.26.0-1+wheezy11_amd64.deb 2a4f1a75990a26a65239f8b7f986ef2b 3302370 debug extra libcurl3-dbg_7.26.0-1+wheezy11_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBAgAGBQJUWoKGAAoJEK+lG9bN5XPLDw8P+QHHnh/v4HO9jgXxFzugMNxM KRn0vMUmZhf+IFsMcu4x9bMS1JNX+DoPL+I6cdpzJAe8qYlqYkSjBdezKT+3yTpq xkZK5x7PcliU+MDZW93b7d+HR+yvlgA5NfpTbrX0nVOrTDkgsoQ0gRnN9gaSotUY AznwOILDXHGmZNsMhEt2fy0C4FekfISZplWlKl2wfJkf3W66Rth4hDmAktzWgXSa Iod5CTT7nQU6ktAENPXvjf+J0PoxOhG282RyPNKMMJkEKzAOjAE79BnJbUR+Cf8H IGng9PHZswM6/g8ySU1Zdm7EdApejyhIrXDn/rpU+cP3aAqEDsi4EQb3JbJMkyHK BKVDa0B97d7DA+Rk8vO+Zp+T1RroW4VXiMnicpxeJ9xCAiGi6G8n7N4gyhy5dI9A yKMVRu+QkcdcvkkQYlIPCMi+exTf0OpQ+r3eBW+70cvWy3SUBDWacNT95dgJz2d3 k4Wm9uwadDGE3o2qZyA2rBEmHGs2XrIKw6vF6TYqD07sZbtNU6zeFkF+wv6WZAab ykjqN5br4Nq7gGIq8COglvkFSBSViXczO6gA3Ui3U2xzL5fJreOlxcne0L4PLG0L nrZfTvKU+jUwNYLn2gE+Tad8MYivzbzJA/lbK359SSGDHwf3SWeeBQgyKQcz41y5 TGKrVEGiDMWrcYUBDpTx =v/D5 -----END PGP SIGNATURE-----