Format: 1.8 Date: Wed, 11 Aug 2021 17:39:44 -0600 Source: curl Binary: curl libcurl3-gnutls libcurl3-nss libcurl4 libcurl4-gnutls-dev libcurl4-nss-dev libcurl4-openssl-dev Built-For-Profiles: noudeb Architecture: ppc64el Version: 7.74.0-1.3ubuntu1 Distribution: impish-proposed Urgency: low Maintainer: Launchpad Build Daemon Changed-By: Dan Bungert Description: curl - command line tool for transferring data with URL syntax libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.74.0-1.3ubuntu1) impish; urgency=low . * Merge from Debian unstable. Remaining changes: + SECURITY UPDATE: TELNET stack contents disclosure - debian/patches/CVE-2021-22898.patch: check sscanf() for correct number of matches in lib/telnet.c. - CVE-2021-22898 + SECURITY UPDATE: Bad connection reuse due to flawed path name checks - debian/patches/CVE-2021-22924.patch: fix connection reuse checks for issuer cert and case sensitivity in lib/url.c, lib/urldata.h, lib/vtls/gtls.c, lib/vtls/nss.c, lib/vtls/openssl.c, lib/vtls/vtls.c. - CVE-2021-22924 + SECURITY UPDATE: TELNET stack contents disclosure again - debian/patches/CVE-2021-22925.patch: fix option parser to not send uninitialized contents in lib/telnet.c. - CVE-2021-22925 + d/p/openldap-replace-ldap_-prefix-on-private-functions.patch: Fix FTBFS with OpenLDAP 2.5. Patch renamed to reduce likelihood of numbering overlap in patches with Debian upstream. Checksums-Sha1: 9e2409254191f2792d7067506fff558780d21cb2 164966 curl-dbgsym_7.74.0-1.3ubuntu1_ppc64el.ddeb 16a708480ad093052a5acb5ea3f788ceb08a3e19 12315 curl_7.74.0-1.3ubuntu1_ppc64el.buildinfo 3c407b4c43b775d6674a47903af2c731d10e9df3 183250 curl_7.74.0-1.3ubuntu1_ppc64el.deb 9aa7b35923265ce16ac177055a0805ce98d37a53 1147926 libcurl3-gnutls-dbgsym_7.74.0-1.3ubuntu1_ppc64el.ddeb 6b489ef8e982c421b3519a8a45b0fad4306a77de 342284 libcurl3-gnutls_7.74.0-1.3ubuntu1_ppc64el.deb 2bd55a9deba31c7b0bd006db309e27f077a1cb30 1186316 libcurl3-nss-dbgsym_7.74.0-1.3ubuntu1_ppc64el.ddeb a40241786fe7de56c9537098f78f051475fc5615 351736 libcurl3-nss_7.74.0-1.3ubuntu1_ppc64el.deb a88ac0fa7724d1ca03ee15aa5dc9055ea7f61b39 1171670 libcurl4-dbgsym_7.74.0-1.3ubuntu1_ppc64el.ddeb a3d97b618f8b3c31713c7103d35608a22970aaff 425662 libcurl4-gnutls-dev_7.74.0-1.3ubuntu1_ppc64el.deb 0703de32b2a9148913355ed82b1a20a8701b1456 437762 libcurl4-nss-dev_7.74.0-1.3ubuntu1_ppc64el.deb b1a06f2fdaea48806f51e6b7716750fcd2109006 429148 libcurl4-openssl-dev_7.74.0-1.3ubuntu1_ppc64el.deb b4a794c713a3856b4517d0c334d559d9bcfcfa79 347702 libcurl4_7.74.0-1.3ubuntu1_ppc64el.deb Checksums-Sha256: b52eb5425ed6ab68b8802300e292ba7ee065669eab066a005cc5189625a09be1 164966 curl-dbgsym_7.74.0-1.3ubuntu1_ppc64el.ddeb bbdd7fe3f1dc41026788bc356496db2ddd57572a1f6bb12bae6c71c3d9c72a10 12315 curl_7.74.0-1.3ubuntu1_ppc64el.buildinfo 738da4def3ae1247a18bd16de3bb121af9be3859c82465b17219fdcacb7f50c6 183250 curl_7.74.0-1.3ubuntu1_ppc64el.deb 6102dbc2ba2a93725cfff9c6732a3486864ec87434b0ff4fd26bc498e3b6a182 1147926 libcurl3-gnutls-dbgsym_7.74.0-1.3ubuntu1_ppc64el.ddeb a0209539481f6bfb5ef6d6cab329075a04e6300ebc78310cbfe2266e3ed341a5 342284 libcurl3-gnutls_7.74.0-1.3ubuntu1_ppc64el.deb d2e6d15697c96ea25158346a32e8b915eac2186728f94d2b95f36afa88c6ac33 1186316 libcurl3-nss-dbgsym_7.74.0-1.3ubuntu1_ppc64el.ddeb 5dfa0270bf7c73e8d69567e6904a14c2aec38a043a233484eb8e71d22941a388 351736 libcurl3-nss_7.74.0-1.3ubuntu1_ppc64el.deb 90ec0d246c7bd5bdcb4ed292e158b10f6e6991f4e0c2837028edfe648c6016c5 1171670 libcurl4-dbgsym_7.74.0-1.3ubuntu1_ppc64el.ddeb e462ef8d24a11596db787f9621bc5973521ec7d9594f49217d0fe2785dccb4f3 425662 libcurl4-gnutls-dev_7.74.0-1.3ubuntu1_ppc64el.deb 9735bfaa91b00209210e407e9e5fe1fbf4553eb9c362aa494abba4b03829e9fb 437762 libcurl4-nss-dev_7.74.0-1.3ubuntu1_ppc64el.deb 5d82a1f899362e5437d3a7ea21833e30890c6867eccc67aaff21b1a9f2c01016 429148 libcurl4-openssl-dev_7.74.0-1.3ubuntu1_ppc64el.deb 9b01711c170330546fb34dc42cd0e1dcec9631b2c73c5b7755f8bb864ed99fac 347702 libcurl4_7.74.0-1.3ubuntu1_ppc64el.deb Files: 1dfa4d2101139cfd13f7c6759ed336d9 164966 debug optional curl-dbgsym_7.74.0-1.3ubuntu1_ppc64el.ddeb 8cae12e7395d430623c137b1f47acf57 12315 web optional curl_7.74.0-1.3ubuntu1_ppc64el.buildinfo 3a4c58d1c4e09eeb57d869cf5438e61c 183250 web optional curl_7.74.0-1.3ubuntu1_ppc64el.deb f46484929252332c830d5ace3c61749a 1147926 debug optional libcurl3-gnutls-dbgsym_7.74.0-1.3ubuntu1_ppc64el.ddeb 230264a192ca7f2318c74171c9186ae2 342284 libs optional libcurl3-gnutls_7.74.0-1.3ubuntu1_ppc64el.deb 9aa06f80a06fb738e3fbca6d038d73be 1186316 debug optional libcurl3-nss-dbgsym_7.74.0-1.3ubuntu1_ppc64el.ddeb 137e2f291f33ba6ad8cd03ecfcd825f1 351736 libs optional libcurl3-nss_7.74.0-1.3ubuntu1_ppc64el.deb f7df1a85363d205715bae661de3b782c 1171670 debug optional libcurl4-dbgsym_7.74.0-1.3ubuntu1_ppc64el.ddeb f60c2eb890cfdce7e7e2849090edd688 425662 libdevel optional libcurl4-gnutls-dev_7.74.0-1.3ubuntu1_ppc64el.deb ad46cb1ec53c402ec1f68e2447e4d539 437762 libdevel optional libcurl4-nss-dev_7.74.0-1.3ubuntu1_ppc64el.deb 490bb601f6065d336fa530b5900a491f 429148 libdevel optional libcurl4-openssl-dev_7.74.0-1.3ubuntu1_ppc64el.deb ed99b463925e7ce17354133ca3aa7147 347702 libs optional libcurl4_7.74.0-1.3ubuntu1_ppc64el.deb Original-Maintainer: Alessandro Ghedini