Accepted curl 7.38.0-3 (source amd64 all) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Thu, 06 Nov 2014 11:40:24 +0100
Source: curl
Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc
Architecture: source amd64 all
Version: 7.38.0-3
Distribution: unstable
Urgency: high
Maintainer: Alessandro Ghedini <ghedo@debian.org>
Changed-By: Alessandro Ghedini <ghedo@debian.org>
Description:
curl - command line tool for transferring data with URL syntax
libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour)
libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours)
libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour)
libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour)
libcurl4-doc - documentation for libcurl
libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour)
libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour)
libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour)
Closes: 763372
Changes:
curl (7.38.0-3) unstable; urgency=high
.
* Enable all hardening options (Closes: #763372)
* Fix duphandle read out of bounds as per CVE-2014-3707
http://curl.haxx.se/docs/adv_20141105.html
* Set urgency=high accordingly
Checksums-Sha1:
fbb68c6488f077918653466842428827328f2d60 2625 curl_7.38.0-3.dsc
bd2ccfb0b261cd677296b91a885a9e49cc61da15 29672 curl_7.38.0-3.debian.tar.xz
3cf59d173cbaa70ed8c40150255fc2e240d6c95a 199746 curl_7.38.0-3_amd64.deb
ebfec8dfb48c52a32a21344347da9a54de0fc4da 257774 libcurl3_7.38.0-3_amd64.deb
81a52ec8c7c2160950586aaad3d26d1d1a93421f 250008 libcurl3-gnutls_7.38.0-3_amd64.deb
404f04af6b4cfc1df6c93aaabf51a1fe58137766 261414 libcurl3-nss_7.38.0-3_amd64.deb
7e2cc3818471afd28b6355bbd81ff584ed60835e 334980 libcurl4-openssl-dev_7.38.0-3_amd64.deb
59fad661a68e41eb2f9e73547245adac3d7edd00 326546 libcurl4-gnutls-dev_7.38.0-3_amd64.deb
997bd1130b3b5a1b355563932d8acb4ca11ede85 338878 libcurl4-nss-dev_7.38.0-3_amd64.deb
21e651526be10fca9ffb89388ee88d78a572a41b 3363876 libcurl3-dbg_7.38.0-3_amd64.deb
e490a4aa07cc719f0769738e39d40374851d5b75 1066708 libcurl4-doc_7.38.0-3_all.deb
Checksums-Sha256:
b8a9c8fe51d8daf1a02543486152c691f520717f49d6def04c42651f461e7e9f 2625 curl_7.38.0-3.dsc
cf7f168df721818613f61c4c63a693f4246305264498add3d413bc4344253542 29672 curl_7.38.0-3.debian.tar.xz
7bb70075e63c2a4c7cd3c8effca58aee833eed681e91a0ea5f68fd8ba2c5036a 199746 curl_7.38.0-3_amd64.deb
edc15c700e6f3adfa1e960e2aee8f4c83ca003bb5e39385def42558d370993b3 257774 libcurl3_7.38.0-3_amd64.deb
376b89798245f768c414b03e2cfcf1ac83ce3274dfe21bc3b0ea78078b116999 250008 libcurl3-gnutls_7.38.0-3_amd64.deb
53b3782940384d358c62c94bf6e22f2059d631acdbba87a89811b1081374728e 261414 libcurl3-nss_7.38.0-3_amd64.deb
f129c165df740ebfa7e196e4bece9022007cdc292711d35281f5da7b63e603ad 334980 libcurl4-openssl-dev_7.38.0-3_amd64.deb
e5bf6ecad8260aaee81d67c643479de9e651bc1b538590dccc1ae9c5726e4537 326546 libcurl4-gnutls-dev_7.38.0-3_amd64.deb
746295a7af720a02458e471d97e91c588460feba02cfefbaf3c88d6e3c82859d 338878 libcurl4-nss-dev_7.38.0-3_amd64.deb
ed827747b294abf1791dadd872a51ab6e5eabef08ebdceb7a078804f983f0400 3363876 libcurl3-dbg_7.38.0-3_amd64.deb
3dfaa27523503d0f399b385ba932cc195b7c3ede81d2e24cd306cfc07267c2a1 1066708 libcurl4-doc_7.38.0-3_all.deb
Files:
94e7bc87163b1b4b8752fed294113644 2625 web optional curl_7.38.0-3.dsc
0799e5f30434b88f286c82303a4bc672 29672 web optional curl_7.38.0-3.debian.tar.xz
2d7e17bd61255910efbf9c5a780f5307 199746 web optional curl_7.38.0-3_amd64.deb
8ae2f085343faec34da96591ed860bba 257774 libs optional libcurl3_7.38.0-3_amd64.deb
69d98baa26a0bc76e15616a4242b9583 250008 libs optional libcurl3-gnutls_7.38.0-3_amd64.deb
4e3c06e5f0ea2c968a1951cb3265486b 261414 libs optional libcurl3-nss_7.38.0-3_amd64.deb
386d819ca24fcf0e302bf31b729294b1 334980 libdevel optional libcurl4-openssl-dev_7.38.0-3_amd64.deb
608e54284104aa63a900b3410d7a7312 326546 libdevel optional libcurl4-gnutls-dev_7.38.0-3_amd64.deb
1c1ffed4ef30bba3a3df2833623632aa 338878 libdevel optional libcurl4-nss-dev_7.38.0-3_amd64.deb
7c1eaf73ebbb4931ee196e7d8cfa6923 3363876 debug extra libcurl3-dbg_7.38.0-3_amd64.deb
2ecf2a93363bbddecd01f63e5da0dc6b 1066708 doc optional libcurl4-doc_7.38.0-3_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=FCOj
-----END PGP SIGNATURE-----
Reply to: