-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 16 May 2018 19:54:32 +0200 Source: curl Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg Architecture: source amd64 Version: 7.26.0-1+wheezy25+deb7u1 Distribution: wheezy-security Urgency: high Maintainer: Alessandro Ghedini <ghedo@debian.org> Changed-By: Chris Lamb <lamby@debian.org> Description: curl - command line tool for transferring data with URL syntax libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Closes: 898856 Changes: curl (7.26.0-1+wheezy25+deb7u1) wheezy-security; urgency=high . * CVE-2018-1000301: Prevent an issue where curl could have be tricked into reading data beyond the end of a heap based buffer used to store downloaded content. (Closes: #898856) Checksums-Sha1: e1503294208b4596a864f49a711d6ed0e1a8848d 2562 curl_7.26.0-1+wheezy25+deb7u1.dsc 66e1fd0312f62374b96fe02e644f66202fd6324b 3073624 curl_7.26.0.orig.tar.gz 8972b781e0f0cdfbd35ab85a948d23beaad5007f 74387 curl_7.26.0-1+wheezy25+deb7u1.debian.tar.gz 7bae1ebdb6acd3002bc8690fbea200bf372a9fa4 273442 curl_7.26.0-1+wheezy25+deb7u1_amd64.deb f219f11d5495ebac9a7fdc747056b5316add6988 335258 libcurl3_7.26.0-1+wheezy25+deb7u1_amd64.deb 031fd64ee9a8f470551d102eb8c66338196ba1af 326422 libcurl3-gnutls_7.26.0-1+wheezy25+deb7u1_amd64.deb 8b98402d36538862513898c740a773f675e2a706 332912 libcurl3-nss_7.26.0-1+wheezy25+deb7u1_amd64.deb 7a6da8a498b2cc68a30d620b1dc52e1f235cc014 1276218 libcurl4-openssl-dev_7.26.0-1+wheezy25+deb7u1_amd64.deb 2dfac00bd104cd043bb541a94cb0ad990ddba0b4 1265776 libcurl4-gnutls-dev_7.26.0-1+wheezy25+deb7u1_amd64.deb 6f6ecd60da5e91c2f5330a2929d967e6f30173f9 1272494 libcurl4-nss-dev_7.26.0-1+wheezy25+deb7u1_amd64.deb 6f445e5dfbb65da830e752cd45db9d56650adac2 3311234 libcurl3-dbg_7.26.0-1+wheezy25+deb7u1_amd64.deb Checksums-Sha256: cf96f8a0eb16b96e72c67fb5d198e8636dd0053aa7476d312dc300ed71e50210 2562 curl_7.26.0-1+wheezy25+deb7u1.dsc 79ccce9edb8aee17d20ad4d75e1f83a789f8c2e71e68f468e1bf8abf8933193f 3073624 curl_7.26.0.orig.tar.gz 263060d8592019c281cdbcd82cea0d0dc4c1abf0135c4cdc26ce10e5b8a69edd 74387 curl_7.26.0-1+wheezy25+deb7u1.debian.tar.gz 9d0d587f3f253f37b63cb972567c02052fa0a080b991470d3028cad4e0a8da95 273442 curl_7.26.0-1+wheezy25+deb7u1_amd64.deb 45f80975b9f995cb3b3b6c3bb041778cd441322474a70aaeab33c48bc8725794 335258 libcurl3_7.26.0-1+wheezy25+deb7u1_amd64.deb 539680c86e0038a0c3ada1f6a4132afa69a80de81dd4e9d46be54c75cfc49d6c 326422 libcurl3-gnutls_7.26.0-1+wheezy25+deb7u1_amd64.deb dc15cceaefe4857fb9d72ac7b7835c7f72e42feb40b6bcd80467b007e18578e8 332912 libcurl3-nss_7.26.0-1+wheezy25+deb7u1_amd64.deb 2828ee8eeb9d5d3e0aadc701f3527abd3a916b8ab70f6cf5571339dde290e3e6 1276218 libcurl4-openssl-dev_7.26.0-1+wheezy25+deb7u1_amd64.deb 5cc962f1dedc06dfe59a2e3a9df39f526ed9241ec29bd20b37b29b6f2574a830 1265776 libcurl4-gnutls-dev_7.26.0-1+wheezy25+deb7u1_amd64.deb 180f8704a333c12afec7a7fdb46eca0b7435e6434aceafa03dd8f205a5df1825 1272494 libcurl4-nss-dev_7.26.0-1+wheezy25+deb7u1_amd64.deb ff5bb7e7337eacfb4c10dd951b0952f24b68e2670894d44c24ce809cb15d1cbc 3311234 libcurl3-dbg_7.26.0-1+wheezy25+deb7u1_amd64.deb Files: 39ab313f15fe6cbb1c176c91fc4fa04f 2562 web optional curl_7.26.0-1+wheezy25+deb7u1.dsc 3fa4d5236f2a36ca5c3af6715e837691 3073624 web optional curl_7.26.0.orig.tar.gz e8bb9c34cfbc97f61b61bd978c0000c4 74387 web optional curl_7.26.0-1+wheezy25+deb7u1.debian.tar.gz 5ce20249e6d866458c2e4d78a2102efc 273442 web optional curl_7.26.0-1+wheezy25+deb7u1_amd64.deb f66a612b13b953472dff689efb584414 335258 libs optional libcurl3_7.26.0-1+wheezy25+deb7u1_amd64.deb 8f47d959ff402d7d587584e9926ffc9b 326422 libs optional libcurl3-gnutls_7.26.0-1+wheezy25+deb7u1_amd64.deb bdd32f9f4685b3d8cba6689e1d9365c1 332912 libs optional libcurl3-nss_7.26.0-1+wheezy25+deb7u1_amd64.deb 6b3cc5065b0744a289ba40034d6bccd6 1276218 libdevel optional libcurl4-openssl-dev_7.26.0-1+wheezy25+deb7u1_amd64.deb 4c92d7b8d489bab6f85ed513a7a4a8c4 1265776 libdevel optional libcurl4-gnutls-dev_7.26.0-1+wheezy25+deb7u1_amd64.deb 902de2cabf344ef311b52e389e866c82 1272494 libdevel optional libcurl4-nss-dev_7.26.0-1+wheezy25+deb7u1_amd64.deb 25530b02102f6ed3f57bd702887f07fd 3311234 debug extra libcurl3-dbg_7.26.0-1+wheezy25+deb7u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAlr8iiYACgkQHpU+J9Qx HlhHUA/+OiErB2mdR66UUhvHBl4tynzkK3e9NE+4KxkYhOgSaHy6V8Aj8yvb0mf5 +3TUVTd9R1BmbJpGLeVonaQ+8U8iV74oyzRPOqvMvk4OjLwLZ2B4/A2EezRgC2oF pXZmdPdUXTXH/F8mYOz56bpjZHcDIL90ACm4rqf6CpLHJqbKYF9orQBCTmPHXBgB TjikqYFVL/Ikmn3sBvCovgn5AV9BusJD6JupzOE2FrgfLDdbfPeuUVLRxsKrIWuB M2yAE7Dt9u9VFx9icdikXEUx6DzvdZBkZui12hkO+DPSK8hblYz8aQROpZZEXHtC 91DggcJGF7gxO89U+uKgugBVpwKj84M9Me4/18wOUl3MIjZeavxHl68X2l2JxZLJ qnK+LizOWIHF4MzZdLGt4M+aBiIyhmAc8DEKHJLhCCS4gVXCEs+Pg7eVXrMm9xyi hFoPN/Pb98y7Bl5yU+f1y578ILPiHmK/2HnG9Ullz/foqX0CLRI+vp4QGhSyX/hC iGgHgoF1mLT6irjDl/IKO/+qNLlrShAbZwbJesKDyrda+CSjRzFrRE4UAiNM/iD/ 5HWc3BGoTF4F5YM1uEEUrZNPiYSuFbTTgfXpO4iLXs2t9Kj5uM3wS42/QGg8MMsW Up3GylQto9aRxQiOAmYWRI83PBXeJRapghbVQ3NBDoUJMO+hyUM= =AFZ/ -----END PGP SIGNATURE-----
