-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 25 Jan 2018 22:34:49 +0000 Source: curl Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc Architecture: source amd64 all Version: 7.38.0-4+deb8u9 Distribution: jessie-security Urgency: high Maintainer: Alessandro Ghedini <ghedo@debian.org> Changed-By: Alessandro Ghedini <ghedo@debian.org> Description: curl - command line tool for transferring data with URL syntax libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4-doc - documentation for libcurl libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.38.0-4+deb8u9) jessie-security; urgency=high . * Fix HTTP authentication leak in redirects as per CVE-2018-1000007 https://curl.haxx.se/docs/adv_2018-b3bf.html Checksums-Sha1: 4398428b575d39f864c95de33cf01a9d800bba1c 2669 curl_7.38.0-4+deb8u9.dsc bd427f3356f3e2d3bc96a05b83b1566ab37680b6 45284 curl_7.38.0-4+deb8u9.debian.tar.xz e1f3ad70541a90e7ea403d70b0e9b3596f5ee3d6 200742 curl_7.38.0-4+deb8u9_amd64.deb 0c8f7b08c7d3e360348363f032d999af8b4f426d 259734 libcurl3_7.38.0-4+deb8u9_amd64.deb 415648d13dca94a0ed0ed5825fd19607e9019c73 251654 libcurl3-gnutls_7.38.0-4+deb8u9_amd64.deb bc492ad2bee9696e36d48354458a35b329815ce1 263600 libcurl3-nss_7.38.0-4+deb8u9_amd64.deb da2ea10c68633897810797df8969367f1abe4c6b 337378 libcurl4-openssl-dev_7.38.0-4+deb8u9_amd64.deb d8f441c2adaa0a5e2d93c0008f982b9c31c78a84 328742 libcurl4-gnutls-dev_7.38.0-4+deb8u9_amd64.deb 1b025e9ee13d1ad4107b738a71c8cf82885737fa 341212 libcurl4-nss-dev_7.38.0-4+deb8u9_amd64.deb 30cba6fc1664454591ae05ca1bc402ad6b4266ca 3373616 libcurl3-dbg_7.38.0-4+deb8u9_amd64.deb c6346374c6600b7869a808b68663c55373c70d1f 1067016 libcurl4-doc_7.38.0-4+deb8u9_all.deb Checksums-Sha256: 3d5ec4e24e0231cebba82f605e713bf13790b49427902e4dd4f7fc8aa4130d33 2669 curl_7.38.0-4+deb8u9.dsc 60bd8df25ebcbd391b6a1de9692b262fecde1ecf598c9017d2a805b1043d12e4 45284 curl_7.38.0-4+deb8u9.debian.tar.xz 95a8f1d1d89ee111d7de78bab583d096a56a3ffea3e19f4604fca05809c97fb9 200742 curl_7.38.0-4+deb8u9_amd64.deb b5966a443226c6a03821e4371b2c59aa52a24d15a0457b5f392f3329e98ef30e 259734 libcurl3_7.38.0-4+deb8u9_amd64.deb bef3395c9bf2ddb93153bf6839372ae08b3e4f19b5e4e33c13561ae8c0d5f8de 251654 libcurl3-gnutls_7.38.0-4+deb8u9_amd64.deb 4b63c73636e7cf2b780a23c6db4658f3dcc551f958b7775f90c16e5865441a99 263600 libcurl3-nss_7.38.0-4+deb8u9_amd64.deb df24f078b93251769133487f4ddea1e1b3639ac5eafb33d41533c2c7671adf39 337378 libcurl4-openssl-dev_7.38.0-4+deb8u9_amd64.deb 76e8b0922c19e04173e946637eef27bceec4e37633a61edbec16e76a6e9666f0 328742 libcurl4-gnutls-dev_7.38.0-4+deb8u9_amd64.deb 82751ddcdae6894e2947beeb91401dc97a0748aaec71c009a3c3dc5e06988db2 341212 libcurl4-nss-dev_7.38.0-4+deb8u9_amd64.deb 0ed1865be2ff051b2f26457db0d73279471547cafe0a212254819b2c6a821dd3 3373616 libcurl3-dbg_7.38.0-4+deb8u9_amd64.deb 76ae7d3a0cdaa64474cc1c6ae909b9a5e084449e2a35dccdc17e4cbe96e211c7 1067016 libcurl4-doc_7.38.0-4+deb8u9_all.deb Files: f8a828b77a7dce3875fa45753a904fa2 2669 web optional curl_7.38.0-4+deb8u9.dsc cdd8cb2ac5ebd8e163158ed3be3019f3 45284 web optional curl_7.38.0-4+deb8u9.debian.tar.xz 8256a787c3b6873b1810e92a121e6d8f 200742 web optional curl_7.38.0-4+deb8u9_amd64.deb 550ad84e773623f17e27941201f44171 259734 libs optional libcurl3_7.38.0-4+deb8u9_amd64.deb 048af57abbeaa029b8c02d5c49fa3458 251654 libs optional libcurl3-gnutls_7.38.0-4+deb8u9_amd64.deb 101712434b20a785514a6abd4412cc9e 263600 libs optional libcurl3-nss_7.38.0-4+deb8u9_amd64.deb a462a38972e22ff200f3a32c5f478609 337378 libdevel optional libcurl4-openssl-dev_7.38.0-4+deb8u9_amd64.deb 092cd19dedd99cd5f01592a16df6a794 328742 libdevel optional libcurl4-gnutls-dev_7.38.0-4+deb8u9_amd64.deb e2564df81ab5e7661ad9f84774c32b9f 341212 libdevel optional libcurl4-nss-dev_7.38.0-4+deb8u9_amd64.deb 290e2ff3523b6f072ad3fd153dde622a 3373616 debug extra libcurl3-dbg_7.38.0-4+deb8u9_amd64.deb 1d4344daec668cb40b01016e4ed9a97d 1067016 doc optional libcurl4-doc_7.38.0-4+deb8u9_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBsId305pBx+F583DbwzL4CFiRygFAlpqY8wACgkQbwzL4CFi RyjhDBAAhmV1e5rL7zRmXpOwbgPOmEpySLl50m/RHv0ZPH/6sLBZwmP59aCez5GF iEf/wv1FIYFLYyA+YMjWpHRaaYQJXYoCXgNlfvViW0SMMa12DDZ63ryWbSGiM/25 TFyf996zUPmubKgdSDwhif2kFqAM6BA8gHKKD3xxf/oGmb+S2A1CyFrhWKF5Ig3n R/MczYT7F8MOjGuR660HKw2b/d93ZkuGuYUVxcm85NG/kp7by8t1W/4UDdTzzAiZ P2ZVi1+ee8uN60LUkjG8/6hZxCGVsM5TUaHXvtEUoobj+1DUwgGQ2RTtjYgRDkP0 TZygMq8sbo+07r2IX95StKXsh3/QBPYyORqshUO8PhL7JmQ4Zpdpl3/M3AKdopFq PYRBCPk+VR+b+rTejKS5U7KQKAUdm+ih+PwWrqUOi4dXRY6PtAOBzLd3ySapjiKc HyCNJA+R74we1qVGUw5FxxRU3VPPmPvaigtVuqDC6MFGJeI9bnJxQcEI7qMO5pA0 QMo7qHvEKugj4xQLLmR3lx0nmFfy8wIP+vf/p53LMlkGPBGismQvX125x117vqIl 4Dt0IGCmYxhmT6E06VljSn//Jz86+w1R+m6E4wRuzextPRB4BpXlX3f7PcL4dY/j adFlRWiIKyMIxJgWd87koDYp9rd7m6CaEvse+q9AQcmON22BPh4= =FxGN -----END PGP SIGNATURE-----
