-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 01 Oct 2017 12:07:01 +0100 Source: curl Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc Architecture: source amd64 all Version: 7.52.1-5+deb9u1 Distribution: stretch-security Urgency: medium Maintainer: Alessandro Ghedini <ghedo@debian.org> Changed-By: Alessandro Ghedini <ghedo@debian.org> Description: curl - command line tool for transferring data with URL syntax libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4-doc - documentation for libcurl libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.52.1-5+deb9u1) stretch-security; urgency=medium . * Fix TFTP sends more than buffer size as per CVE-2017-1000100 https://curl.haxx.se/docs/adv_20170809B.html * Fix URL globbing out of bounds read as per CVE-2017-1000101 https://curl.haxx.se/docs/adv_20170809A.html * Fix FTP PWD response parser out of bounds read as per CVE-2017-1000254 https://curl.haxx.se/docs/adv_20171004.html Checksums-Sha1: abafe6d62058e5de0280e0ee7efcb1a9270f6e8d 2793 curl_7.52.1-5+deb9u1.dsc 73097952ada80fbaff924c706ba57d1f77c38d00 3504621 curl_7.52.1.orig.tar.gz 7d9b9a6c286a37c0602155c229401d16a44fc23b 34788 curl_7.52.1-5+deb9u1.debian.tar.xz 0570740376dabff270a8bca362da1584ec30c979 131978 curl-dbgsym_7.52.1-5+deb9u1_amd64.deb 900b6def60aad7748011814557f56ff4fe9c44ed 10596 curl_7.52.1-5+deb9u1_amd64.buildinfo 58f873d5bc921dc3f90dfe7a48bf39dbcb6456be 227026 curl_7.52.1-5+deb9u1_amd64.deb 23fe5b74305d19218b0579b649a6d88568eedda4 5000268 libcurl3-dbg_7.52.1-5+deb9u1_amd64.deb b391183707369fadfeb1b3ca9dc173ac8c47cc7f 289198 libcurl3-gnutls_7.52.1-5+deb9u1_amd64.deb fb3df743b5a3fcba48d00756a5ede435ecba00dd 294460 libcurl3-nss_7.52.1-5+deb9u1_amd64.deb 1a48f0d28d49ec349d8e473de797ea330b083270 290822 libcurl3_7.52.1-5+deb9u1_amd64.deb 33ad2fc5ac7bd8fe5b4fd21b6d4189104dd20194 827434 libcurl4-doc_7.52.1-5+deb9u1_all.deb 1bc061f12306f95377da325a947feee8776dee92 371644 libcurl4-gnutls-dev_7.52.1-5+deb9u1_amd64.deb 07366d5b86992a609d4d916d95836c3d5715f028 377454 libcurl4-nss-dev_7.52.1-5+deb9u1_amd64.deb 6c22a61823632f8a9068ed1a48eac60ffd593fb6 373528 libcurl4-openssl-dev_7.52.1-5+deb9u1_amd64.deb Checksums-Sha256: 63aa20ac041dc912d2c4d879f1dcedb703e84c77bb0997b68f1ae7f34234e31d 2793 curl_7.52.1-5+deb9u1.dsc a8984e8b20880b621f61a62d95ff3c0763a3152093a9f9ce4287cfd614add6ae 3504621 curl_7.52.1.orig.tar.gz c7ba15d40903398131ad1fdc84188bf3fabe7c9e150cfbd286b54295b6331eb9 34788 curl_7.52.1-5+deb9u1.debian.tar.xz 6ec2fa808968ebb7cb83374c4a62ffbbc6036d6e8404565ac6b6bab3c6baae0b 131978 curl-dbgsym_7.52.1-5+deb9u1_amd64.deb 744eada3b452b5ad033c0194bdfb67843818004d1ac8f8a52410191005b73bd0 10596 curl_7.52.1-5+deb9u1_amd64.buildinfo 130546aec7f2938205f0a5cdd7ac2f8a88f5f8b83816531cd4ddb7ec841db0fb 227026 curl_7.52.1-5+deb9u1_amd64.deb 94240dceff9fce204ae610603250aa3b5f417023c2002ec63912cbbf4e6f622f 5000268 libcurl3-dbg_7.52.1-5+deb9u1_amd64.deb a92699f3e3a992c805788787a8381b67a488e64ae8f235794bbcc78dbde42229 289198 libcurl3-gnutls_7.52.1-5+deb9u1_amd64.deb 0f58deb4ac714953b209701d3c0fb14dd6346765b2fed2e01f733d0bb50f28bb 294460 libcurl3-nss_7.52.1-5+deb9u1_amd64.deb 63045678a558af41235b258bb3f5daa0a9b38b14f9c0ca263ef619a419390e48 290822 libcurl3_7.52.1-5+deb9u1_amd64.deb f1a6d2d67a54bcf657c4acc556b7963970dead8e18e4814ac298425ef7db6c44 827434 libcurl4-doc_7.52.1-5+deb9u1_all.deb 077ef17bbabd4fab18943cfc2b9882f39bade78414dc0fb93a6bcfd61a93c02e 371644 libcurl4-gnutls-dev_7.52.1-5+deb9u1_amd64.deb 9ff94a3dd33994c0403a007e38597474a3fe088b0c8de872887182e81026ea90 377454 libcurl4-nss-dev_7.52.1-5+deb9u1_amd64.deb 0c047e561ae5c475918a6cf491374ce833818777cedf7b57ff40140a6a565b39 373528 libcurl4-openssl-dev_7.52.1-5+deb9u1_amd64.deb Files: 91c0ccf8db9ae628417cc62c363f6c17 2793 web optional curl_7.52.1-5+deb9u1.dsc 4e1ef056e117b4d25f4ec42ac609c0d4 3504621 web optional curl_7.52.1.orig.tar.gz 2ab88d336c09d714321bfde6c79e05b8 34788 web optional curl_7.52.1-5+deb9u1.debian.tar.xz 24985dd2542c4bd4ac37a30f55348ae1 131978 debug extra curl-dbgsym_7.52.1-5+deb9u1_amd64.deb 57d0b184beb112900f2deb1ad473ed6f 10596 web optional curl_7.52.1-5+deb9u1_amd64.buildinfo d2c20e806fe887741b8cf5fb391f6ae0 227026 web optional curl_7.52.1-5+deb9u1_amd64.deb 76e61a63d9df4e2b9cf906af285367e1 5000268 debug extra libcurl3-dbg_7.52.1-5+deb9u1_amd64.deb ec6740923b7456870c9db9849ff622b3 289198 libs optional libcurl3-gnutls_7.52.1-5+deb9u1_amd64.deb fa5b7972b1209189432d0141209bcdba 294460 libs optional libcurl3-nss_7.52.1-5+deb9u1_amd64.deb 31416c791d7b150f66e8e18ae0a2e6a6 290822 libs optional libcurl3_7.52.1-5+deb9u1_amd64.deb 91e7b4e9271895de444bb02fc3d7de57 827434 doc optional libcurl4-doc_7.52.1-5+deb9u1_all.deb 600977aa1ce50e637fa7b801b7ac6231 371644 libdevel optional libcurl4-gnutls-dev_7.52.1-5+deb9u1_amd64.deb 1c6b92ed1102ab0ccf8334ddc9ed0148 377454 libdevel optional libcurl4-nss-dev_7.52.1-5+deb9u1_amd64.deb 87435777f7c46e8f3baa4a68d2e4417a 373528 libdevel optional libcurl4-openssl-dev_7.52.1-5+deb9u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBsId305pBx+F583DbwzL4CFiRygFAlnRi2oACgkQbwzL4CFi Rygb6g//Z0olPIWo6oU/kqJGJqXRvQDeHHBUDHd6y/PcR9ASFVnmd00285nzpMiI R5ISWif1T3yodHBKUKU8mZRULTkCKJBLLb3aQkQDuUmd5yYnwocymVa1E0YE2mdU 0fsSrMj+GtiW2sfaYsOD2uRUq0x4SDYOGB/KdRt0zYytN69fyXJbBoIj2qaUIGiB CfkCEpdrlJ0WjUr9Kl/0ZqMj4im1Hwj77N2DpuMIfp7GwiudCNYetwZUIaETPYra +AZ2b0QZF4aT9kgeA8zo/gwT/v23tLfPoVuzf7LQvwRc1EAGCHOgF+zaM43oU3vh wRkAcrQU33Vai56y7glibTQb20h/kwrK3T04P+qislmak9DUcmmTJ9CDtbWwtDXj MaG6KuJdybsnTzvR3HSnyPH/SERb0/OgXmn59LH7ks0pEligqHT69ZiAZxq/JkTZ u5aexqDDYg8xqxlwaMW4zNRPzFgkUuKdyAcalgMPEyq3YPDG7dl8MHhmiPPdp3xj ykQxmoziknEjLvTEmILnzyYWtV/q8FdLnjgLdR5HhGlhaWc9PpapuKqp2reiB/1q GYmAZ16S+N6YyiCbblpz0IWdHMfxvIUIegskGaaRISgLojzxeUgMrrgcPDI0bIxG zTAuHTMIwh1GnhezfdW/heIjJi+lp+9P7kpuwy1cCUErhzBoxJI= =imrX -----END PGP SIGNATURE-----
