-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 08 Sep 2018 11:55:45 +0100 Source: curl Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc Architecture: source amd64 all Version: 7.38.0-4+deb8u12 Distribution: jessie-security Urgency: high Maintainer: Alessandro Ghedini <ghedo@debian.org> Changed-By: Chris Lamb <lamby@debian.org> Description: curl - command line tool for transferring data with URL syntax libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4-doc - documentation for libcurl libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.38.0-4+deb8u12) jessie-security; urgency=high . * Fix an NTLM password overflow via integer overflow as per CVE-2018-14618 https://curl.haxx.se/docs/CVE-2018-14618.html. Checksums-Sha1: 2c395ecace8a245f63f7e90caf3734711eba52ee 2673 curl_7.38.0-4+deb8u12.dsc 40d8ec9063f076005535139c9229ac77c57f0300 4094034 curl_7.38.0.orig.tar.gz 8323dae84a6a20e517418acfa9677a332dcb36bb 48108 curl_7.38.0-4+deb8u12.debian.tar.xz 14ab9c52d746958443830828e3db6137bf377c67 200874 curl_7.38.0-4+deb8u12_amd64.deb d7dd6fdd62ac7d5a7645c7ba0bdd9d62c2729d61 260362 libcurl3_7.38.0-4+deb8u12_amd64.deb 5d6ae8909e0f6969c3f052294dd27fbf43c5955a 252576 libcurl3-gnutls_7.38.0-4+deb8u12_amd64.deb 7fc3de0e6a0fcbc14e8e0f71fa6991202bb9e81e 263620 libcurl3-nss_7.38.0-4+deb8u12_amd64.deb 5a8d113a302b2c54bb9d7021e0883f19a8f8e88c 336578 libcurl4-openssl-dev_7.38.0-4+deb8u12_amd64.deb 5133fb5c7fc34ae3c8ed3032df3c7256458aaf58 328494 libcurl4-gnutls-dev_7.38.0-4+deb8u12_amd64.deb d37a31a90463e645670b9334927780924028eaf9 340686 libcurl4-nss-dev_7.38.0-4+deb8u12_amd64.deb 2f14e8f5e803c68494257f88c32ffe56683d2dbb 3371022 libcurl3-dbg_7.38.0-4+deb8u12_amd64.deb b16a70c50ad15d7e8d9908f238ce8adea1a6d2b5 1066966 libcurl4-doc_7.38.0-4+deb8u12_all.deb Checksums-Sha256: 80f22d569e3532d1235cd883e3916972356c26d5b530a464135a9a4ee544e262 2673 curl_7.38.0-4+deb8u12.dsc 5661028aa6532882fa228cd23c99ddbb8b87643dbb1a7ea55c068d34a943dff1 4094034 curl_7.38.0.orig.tar.gz c64ecf02f9a9d493b85ee106da534d37ab284fd98010782fbaf2c2656958bd08 48108 curl_7.38.0-4+deb8u12.debian.tar.xz 5adb5b518953c273f3f8be430b7764aad51ccbe0262db7673acd4a1760c27b98 200874 curl_7.38.0-4+deb8u12_amd64.deb 44332fefe8504aa99671d626efe16672f3bf150e43f5dc4f286bd1362003cafa 260362 libcurl3_7.38.0-4+deb8u12_amd64.deb 6c2a2f7aec717688a108d14257ed5dc223ea240103355892eafd85d8e13c92cb 252576 libcurl3-gnutls_7.38.0-4+deb8u12_amd64.deb 3152e239329c1b964232ce4a21b44beebfb9d24cd1d813bce53b8c131c66c8ec 263620 libcurl3-nss_7.38.0-4+deb8u12_amd64.deb e568e467155997ea698447bcc52506ffaab500b386c91fab84232cd22c111878 336578 libcurl4-openssl-dev_7.38.0-4+deb8u12_amd64.deb 480ba52caa176afa12f01d90a7d192fd2eab24eaedb476fe3dae74246c626655 328494 libcurl4-gnutls-dev_7.38.0-4+deb8u12_amd64.deb 11136615090f6653c40df8d4ee319999ad88954210cb1ec36db7be0ec888f46d 340686 libcurl4-nss-dev_7.38.0-4+deb8u12_amd64.deb 0abd5f38901e46634f89ae58068849dab9a9b595d78b56942e9f9632c6ecd38b 3371022 libcurl3-dbg_7.38.0-4+deb8u12_amd64.deb 38263ffed802c9f7a4ad73d99dc3d7feda2af7e2c04584002fa5c315856d285d 1066966 libcurl4-doc_7.38.0-4+deb8u12_all.deb Files: 79da63add7aeb234794548c86172a1dc 2673 web optional curl_7.38.0-4+deb8u12.dsc b6e3ea55bb718f2270489581efa50a8a 4094034 web optional curl_7.38.0.orig.tar.gz 4002f60efd3f540e486d37bf56282323 48108 web optional curl_7.38.0-4+deb8u12.debian.tar.xz d247ca8fb28be63f31aee41e2707c121 200874 web optional curl_7.38.0-4+deb8u12_amd64.deb b8350f4025b10a5dcdb981b876676370 260362 libs optional libcurl3_7.38.0-4+deb8u12_amd64.deb b0a2d86afae78cacaf6477331dc54bfb 252576 libs optional libcurl3-gnutls_7.38.0-4+deb8u12_amd64.deb 33ae97377ad9187182a05ceedcaa421c 263620 libs optional libcurl3-nss_7.38.0-4+deb8u12_amd64.deb c68bf4f35556845728aa01bc7c89b5ea 336578 libdevel optional libcurl4-openssl-dev_7.38.0-4+deb8u12_amd64.deb d74e8d4c6bd30f693567cd8962504f9d 328494 libdevel optional libcurl4-gnutls-dev_7.38.0-4+deb8u12_amd64.deb 99f72ef27306b9fe29be971b322cc43f 340686 libdevel optional libcurl4-nss-dev_7.38.0-4+deb8u12_amd64.deb 92fe73232fb1da9a5500bd2cdd860ddd 3371022 debug extra libcurl3-dbg_7.38.0-4+deb8u12_amd64.deb c50fe07497ebf9ede1dc5c10001d8d96 1066966 doc optional libcurl4-doc_7.38.0-4+deb8u12_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAluTuHUACgkQHpU+J9Qx HlgyvRAAl6Vw/WWtn9JnyvrZjowfpSkUoFbVDDfDUGt4A9Q1wljQ/YeSDf1wTSBR MlxCka7GOL5UrHZxvmu8XQW9Omye4AqRI2BhcZby/4jiog9gwQsXHdNBhmWhMvkR 9AHTPo2xNi0pBm543J5HMDxokkCGXYlOVX0BsQ3qamuRVIGNtiDTWXhhXSb+mxaG NRMYUzdei1hDP7GqnJNqeWnO1DEr+8zjVgu8EGhJ2/Gl0wZce/tlLnSUniz1U9pU 0n1MYSgdNJuk4kmsbXk8I6GMf8dZJ0RsdvZHwHqfJU0NmT5tR2ogag+CMWW9C+zT OBmFt4ckSMP4Kz606bAeKlAIZ+uRpUVwGT1zpfgXRawPQTFd9M20Ppqe8rXYL+Y3 76BKEZGOCKCEnt6ZIRl/Pn7N8F00CylBUkbh5cmO+OqTGziFdNGY7VZLlzUt++EL XMjRTjqn4IAk0scf1RytTA/qP1okTg8OfASgYCbANUBRq9+hvPvKkgNrXuKBiDRa /UVao276ojwmGwrp2Su6Zpkx2HihFRuF/ulf7BGCdrA5HscNy0Q4sGXIxAocLMks yd16gS39NSIPcFfzPfVVb/omqt0tAcW6N76fgEXeF06F6AeLufEaJht5szyBUjPa WaFs0e1td4bwmAT8qw287e9S2D2DDZ78ypixlGhFyvl0HbUg7lg= =Y+Km -----END PGP SIGNATURE-----