-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 26 Jan 2016 22:39:38 +0000 Source: curl Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc Architecture: source amd64 all Version: 7.38.0-4+deb8u3 Distribution: jessie-security Urgency: medium Maintainer: Alessandro Ghedini <ghedo@debian.org> Changed-By: Alessandro Ghedini <ghedo@debian.org> Description: curl - command line tool for transferring data with URL syntax libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4-doc - documentation for libcurl libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.38.0-4+deb8u3) jessie-security; urgency=medium . * Fix NTLM credentials not-checked for proxy connection re-use as per CVE-2016-0755 http://curl.haxx.se/docs/adv_20160127A.htm Checksums-Sha1: f8c3323c720df4876af8e906d9730994d8afe82c 2655 curl_7.38.0-4+deb8u3.dsc 357580f1f162f0930566ca3bf5f53d4fe57b98d0 33672 curl_7.38.0-4+deb8u3.debian.tar.xz f290eeea3cc1a1e02c57cf6ee65f955b4d97947c 200112 curl_7.38.0-4+deb8u3_amd64.deb eda1fe28d916fa438ad35f771368c63c418a2a8f 258592 libcurl3_7.38.0-4+deb8u3_amd64.deb 9472de9f516e3eb3fca908c2e2ab333c2b09c72a 251134 libcurl3-gnutls_7.38.0-4+deb8u3_amd64.deb 37ca1d6f76f8311d124b3962239e0ec65ed08c0c 262310 libcurl3-nss_7.38.0-4+deb8u3_amd64.deb 363dc08f18f03ffe4564ec74be1641ef4d0bb1f4 336096 libcurl4-openssl-dev_7.38.0-4+deb8u3_amd64.deb b145923112ffb3f69300536608d4e965c33a092f 327398 libcurl4-gnutls-dev_7.38.0-4+deb8u3_amd64.deb 93cfa336452a86bd5ca660e934dde855276a5e10 339978 libcurl4-nss-dev_7.38.0-4+deb8u3_amd64.deb 4dd5e6372cfbfc9e4faa0f5542a65ba726130ea9 3362668 libcurl3-dbg_7.38.0-4+deb8u3_amd64.deb cef3b6d9d99caee4d1aef5fef59360561e86fcd3 1067038 libcurl4-doc_7.38.0-4+deb8u3_all.deb Checksums-Sha256: ff078bf3a2491118aa042b824fd28a0482a2e2b1fae14a69377dd6f368f4bfd1 2655 curl_7.38.0-4+deb8u3.dsc 4fabe8fcc105f370fd245bf6d4d4f66c51057e39f7a46369e2e4e4781e24c02f 33672 curl_7.38.0-4+deb8u3.debian.tar.xz 123244fe098953770c01556acca5be43db4c1b755006f82ac9e99b7239419367 200112 curl_7.38.0-4+deb8u3_amd64.deb 2ca04951d5e0e8c4879422ee9017a0e6a8ee6cc078a33c3ba79f7801235c7cba 258592 libcurl3_7.38.0-4+deb8u3_amd64.deb 355f444a28977ca2b58dbd6261f36e035e6781ea600f8985bddc55799011c997 251134 libcurl3-gnutls_7.38.0-4+deb8u3_amd64.deb 70483893e16a26d57881d9a1c76e35e9b5eb06e667a340e609b6cdf52f8a9b39 262310 libcurl3-nss_7.38.0-4+deb8u3_amd64.deb e48279afb03d12ff3bb8d0c6deb9a31828299d7b847817f8a9839936a2b2eeae 336096 libcurl4-openssl-dev_7.38.0-4+deb8u3_amd64.deb 955baa3cdad4c1831bc929add44476853c4619114326cd23fed12b1fbb622935 327398 libcurl4-gnutls-dev_7.38.0-4+deb8u3_amd64.deb 680b147e35cc9553f22dfc73a3a2381310ede371ce12cb0d84646b7fa0bb47ad 339978 libcurl4-nss-dev_7.38.0-4+deb8u3_amd64.deb ca37893d3054cf6735328a13c45421fd16dabcf45b4d24c372341da08b4a8871 3362668 libcurl3-dbg_7.38.0-4+deb8u3_amd64.deb 586a3d2a9980e3a8ff12a58caffe9e19a43ca0600bed9d4a6fe2272ab13670f3 1067038 libcurl4-doc_7.38.0-4+deb8u3_all.deb Files: 723594760db93dc16ee8f7525f03ddf3 2655 web optional curl_7.38.0-4+deb8u3.dsc 8700e6f55e0d05c7e90ed53c282e9158 33672 web optional curl_7.38.0-4+deb8u3.debian.tar.xz b0ff28bddd8dc40e10543ed898a12099 200112 web optional curl_7.38.0-4+deb8u3_amd64.deb 35c9533c4a9e155501d109c6346dfc26 258592 libs optional libcurl3_7.38.0-4+deb8u3_amd64.deb fd10aaf95091bcd7be4dcb9153d4ceec 251134 libs optional libcurl3-gnutls_7.38.0-4+deb8u3_amd64.deb eeb507ecce26470da10dae17c3457013 262310 libs optional libcurl3-nss_7.38.0-4+deb8u3_amd64.deb 11ca816f276587e7aadec96c0af777f4 336096 libdevel optional libcurl4-openssl-dev_7.38.0-4+deb8u3_amd64.deb 5c51f7ff3ce1ddd489c64af59ecf34a1 327398 libdevel optional libcurl4-gnutls-dev_7.38.0-4+deb8u3_amd64.deb db4cead16753d038996e9b5c2fb5d56b 339978 libdevel optional libcurl4-nss-dev_7.38.0-4+deb8u3_amd64.deb 6a35d6d17a54e516a21df5f89bf29bdc 3362668 debug extra libcurl3-dbg_7.38.0-4+deb8u3_amd64.deb dd575fd9191748371a3d173401ae3b8b 1067038 doc optional libcurl4-doc_7.38.0-4+deb8u3_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCgAGBQJWp/6JAAoJEK+lG9bN5XPLufgP/jYCSTbJW47HhQ4qdNmcsIbY q0VFnSyNT+4ngqSrLbaLrt0UZlEKnkN8YNS5LcP/sNN1a8DlhmBZ085zPlo6tZ+r 461Zca66DXYKXWvWwXG10+fylNl3KIAznz0lrAO/ge8LW2ObJZX/Ssc0EL/SWqE+ unhFAI0ifUw1x0Ep5tsAElza1pMMxpvx+5oo0pnCSaEsUc8KhBSpv4tOZmwcFtk/ wxyAppbtA4VDD6HWW6pY17zYjLN1Dvx83PgscbaDq4c+yLJbcOYbeLdSoyMRaoqF sJjpMV9mVr3Spqx7hB0YnKHbnQN3punwdhEb5jij730SAs2voDiWEAtwvIeqB0Lr 375aMNSO+SGjn9YScXiuzEsZc+FMyKc3UC5tG+CPMfZYeD9g0v4bSc6PsgZop1c3 o9SW7BTRLkq5HiaN9icNLgJ6ZUHeRvpM5aF6OTsCv5p4X/ePKPh3Xiy2yhEWmvs0 ctU+nBSxTtgLeV5ZVkPnHz2z5b+JZQsi9Zgog9jI6uLEfUPCyTaDhlZF6HSoVfL9 IOtQnzqI6tdNAKZ1dAbx6igxWaFaCLMWY5rkvNyMnH9oP3i3k1fUST3oua8+vLAr QY1tGhWkYWMqBXCltZRH1bfY79JlgpsP6X4TpPf5I1xtKJ52HGkIHaYhOPA++Eq0 Gqlfrbj2itC0wAWprCNU =QpeN -----END PGP SIGNATURE-----