-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Tue, 30 Dec 2014 11:58:52 +0100 Source: curl Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg Architecture: source amd64 Version: 7.26.0-1+wheezy12 Distribution: wheezy-security Urgency: high Maintainer: Alessandro Ghedini <ghedo@debian.org> Changed-By: Alessandro Ghedini <ghedo@debian.org> Description: curl - command line tool for transferring data with URL syntax libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.26.0-1+wheezy12) wheezy-security; urgency=high . * Fix URL request injection vulnerability as per CVE-2014-8150 http://curl.haxx.se/docs/adv_20150108B.html * Set urgency=high accordingly Checksums-Sha1: 1db9348a47e1bccbcc981c387fe66cbab5703b8c 2518 curl_7.26.0-1+wheezy12.dsc 1dc4144c07916f9344872d5f331f9d6c44e30898 41033 curl_7.26.0-1+wheezy12.debian.tar.gz b021871d4fa95367ffa2c826492250e8babc8d7f 269684 curl_7.26.0-1+wheezy12_amd64.deb 707153bf5dc8bf8663888e849006fd0d817bee68 331066 libcurl3_7.26.0-1+wheezy12_amd64.deb 5133b45a541517118258552c583846332a5d7514 321780 libcurl3-gnutls_7.26.0-1+wheezy12_amd64.deb 8679e8014c2a92ecbc65dd36157b8f07a63e3971 328580 libcurl3-nss_7.26.0-1+wheezy12_amd64.deb b91f8dc6c60e29b47cfc7bcda649c17e0ce75da6 1272646 libcurl4-openssl-dev_7.26.0-1+wheezy12_amd64.deb da598b59c400ab94de0fba1eb3d75542d610fa78 1261130 libcurl4-gnutls-dev_7.26.0-1+wheezy12_amd64.deb 75fa68e730add95170492f06f2f9bb6588757e60 1268840 libcurl4-nss-dev_7.26.0-1+wheezy12_amd64.deb bb196b7906a6801d1ec408864d5f467fba10f77a 3304406 libcurl3-dbg_7.26.0-1+wheezy12_amd64.deb Checksums-Sha256: 6c3d14b93b26b3d01a4ea2a63034e824a662ca1a006c7cfd8a160045c5276323 2518 curl_7.26.0-1+wheezy12.dsc d0de143816d58e287e23d6b760ed8986335ea184027e28be60bc5ac834ae8b0f 41033 curl_7.26.0-1+wheezy12.debian.tar.gz bb89cc1e1abf926260affa2a7fa2acf501a888cef344a6c4c2d627bf1ea013a5 269684 curl_7.26.0-1+wheezy12_amd64.deb 899a332e40a19e8c3b0e1b7c3c2e634ddb4a52a0f0baad7f70ff1676ea7d8679 331066 libcurl3_7.26.0-1+wheezy12_amd64.deb a2acdc5f5300d077138d6235e0fde8b34ee11f28f13948344f45c44f8fecc51c 321780 libcurl3-gnutls_7.26.0-1+wheezy12_amd64.deb 3391da990f463daa13481728fac8270b4bbcedc49cc6c47b23ff173b989e67f0 328580 libcurl3-nss_7.26.0-1+wheezy12_amd64.deb 19cb143b081dda1ff69c75eb7e60311c15fa794515e4f7d3106130e694fb028a 1272646 libcurl4-openssl-dev_7.26.0-1+wheezy12_amd64.deb 3fcec631d150a2498603d23a9bcf626dfeac773bd5b37fa1191e013ff8846cc2 1261130 libcurl4-gnutls-dev_7.26.0-1+wheezy12_amd64.deb 8240e52160a1e48b5a062386603f55fc36240eeb598b5ee7901bc05f9e632266 1268840 libcurl4-nss-dev_7.26.0-1+wheezy12_amd64.deb 3e7989fb6998c9739565b13beeb5194ff8b53bedce3f84a31c529e9a543ec246 3304406 libcurl3-dbg_7.26.0-1+wheezy12_amd64.deb Files: b3b9ecb589150ef3bff4d18941f1d22c 2518 web optional curl_7.26.0-1+wheezy12.dsc 0526db41a71e515af78641da4aa5cf19 41033 web optional curl_7.26.0-1+wheezy12.debian.tar.gz 95215bc115a4457d4eae6954ab2eec9f 269684 web optional curl_7.26.0-1+wheezy12_amd64.deb c810454a37ae4efa66b61b34b3b3f38b 331066 libs optional libcurl3_7.26.0-1+wheezy12_amd64.deb 65da8313d13eb86a2046b8d45e57283c 321780 libs optional libcurl3-gnutls_7.26.0-1+wheezy12_amd64.deb 346eafc64fd6dd7dbb32239df929f2e2 328580 libs optional libcurl3-nss_7.26.0-1+wheezy12_amd64.deb 379e29629fc28bfb3a1aee5b5cc939a9 1272646 libdevel optional libcurl4-openssl-dev_7.26.0-1+wheezy12_amd64.deb 1757a50fb25a38092dad1b0cce774bb1 1261130 libdevel optional libcurl4-gnutls-dev_7.26.0-1+wheezy12_amd64.deb b28eb6674eefc7c884fe41231473f062 1268840 libdevel optional libcurl4-nss-dev_7.26.0-1+wheezy12_amd64.deb c95c55f21462d16db78857aa8d9f9d2d 3304406 debug extra libcurl3-dbg_7.26.0-1+wheezy12_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBAgAGBQJUoqfPAAoJEK+lG9bN5XPLftsP/R+JrfiCIGPOzoRf5ECdJgj8 sfe8z397kNZTqfCozp4FspGhlcHqqy5MNrg//VI0gb2WjzxfpFHWdybhPbStY3cr kGTEWPrmLEtH5Q3mZw8Mx8R5Mok0A7D67p0ENT4j2iVPkBypAm0igYV2noOLOB1D +h1tCGez9FV/uAvsc7AKbi6iAMyDKrHAbXaVcTYJZVQfpuxqX8QaDfkHbTozPj1R X/+SBsQxXuNDS1EmNdfBt8nkQ13vlorB7BdXeSSOQC8xn7cwpFeIGES1abzELwiX HGlP+IoWqJTFAk/gXgRM2sWTgEa5J206nNcRcMb/YMl5s0PvukWxcpNQ0tZj3gx6 lxeCht3OYhXX3x9nkxm4MEi2awrSR1jqTS1dcdt2unr89wGGF/YdYmLID0IxLTkn Pd94dCS16VDDveO7XwvZBySBuTwG8iRjOozaxUQhNOkmifSVBcI4ayKRRkZgPizC Exw7HOugV9+WSmpJHWeCF9TU5fEYzY8dizDHOEDrmiqtar1oQpXpWeu6GPvsZSin WUID+YecEYU5dPX0nMJaxe+2nJWpDKkvN/gpVAloYDGfZNg3kfPYNgi4kVeiNhwO 67vcFjMcvXwX0/W2BUnDowcOVKgTVKXrpgWNPry7pOrk2jSLjnYUJw1YBfzLzL7w h4Xiqgb5W5KY42V6LZl7 =2MyH -----END PGP SIGNATURE-----