Format: 1.8
Date: Mon, 29 Oct 2018 08:10:57 -0400
Source: curl
Binary: curl libcurl4 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl4-doc
Architecture: i386
Version: 7.58.0-2ubuntu3.5
Distribution: bionic
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lcy01-amd64-005.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 curl       - command line tool for transferring data with URL syntax
 libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour)
 libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour)
 libcurl4   - easy-to-use client-side URL transfer library (OpenSSL flavour)
 libcurl4-doc - documentation for libcurl
 libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour)
 libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour)
 libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour)
Changes:
 curl (7.58.0-2ubuntu3.5) bionic-security; urgency=medium
 .
   * SECURITY UPDATE: SASL password overflow via integer overflow
     - debian/patches/CVE-2018-16839-pre.patch: fix integer overflow check
       in lib/curl_ntlm_core.c, lib/curl_setup.h, lib/vauth/cleartext.c.
     - debian/patches/CVE-2018-16839.patch: fix check in
       lib/vauth/cleartext.c.
     - CVE-2018-16839
   * SECURITY UPDATE: warning message out-of-buffer read
     - debian/patches/oob-read.patch: fix bad arithmetic in src/tool_msgs.c.
     - CVE number pending
Checksums-Sha1:
 03d49f70521b104ad03e7995de21640e692cc537 128072 curl-dbgsym_7.58.0-2ubuntu3.5_i386.ddeb
 918a6b70fc6d550ad16ec95fa00b0ced959e0179 11228 curl_7.58.0-2ubuntu3.5_i386.buildinfo
 c785537edc2fcd8ad2feb1f1d73a513d8aa2e965 162068 curl_7.58.0-2ubuntu3.5_i386.deb
 400cf1f94ebe6efaf89e95117f456284e79e8d73 1150360 libcurl3-gnutls-dbgsym_7.58.0-2ubuntu3.5_i386.ddeb
 02b0ce4f70655e5237099158c3456a5f67d0d319 235948 libcurl3-gnutls_7.58.0-2ubuntu3.5_i386.deb
 f1f4ad61fc494a59c5d45b4c764cb0b96969e8e9 1175756 libcurl3-nss-dbgsym_7.58.0-2ubuntu3.5_i386.ddeb
 bfa7aabbc081625d4c5c10294378a0c3e18ef975 241928 libcurl3-nss_7.58.0-2ubuntu3.5_i386.deb
 e93b962c58ec75b27bbc24f4682c1e73d4eb4990 1171280 libcurl4-dbgsym_7.58.0-2ubuntu3.5_i386.ddeb
 7cfb7c273959341ab14eb0c5c1f1b1e70855e7ee 326356 libcurl4-gnutls-dev_7.58.0-2ubuntu3.5_i386.deb
 696599da9d5c813ef44cdddbaa91dcb8e52b7402 332692 libcurl4-nss-dev_7.58.0-2ubuntu3.5_i386.deb
 642463440e387c9bde41f9e6f88cab65095aa57a 328460 libcurl4-openssl-dev_7.58.0-2ubuntu3.5_i386.deb
 f2940b0c945b0554f77f5cffa96bbb4370f17a0d 238616 libcurl4_7.58.0-2ubuntu3.5_i386.deb
Checksums-Sha256:
 b9e0b9f344cd415ffa9a3b82844e01d1f65071b9f11e43a7eb6ac33b67557e6d 128072 curl-dbgsym_7.58.0-2ubuntu3.5_i386.ddeb
 598dcb49ddcd68f53c7464f995295259b098b3a564cb24d7636a2ffdd6639f55 11228 curl_7.58.0-2ubuntu3.5_i386.buildinfo
 7b3ef9ccd4a20b1601f67440f501f91cebaf7f33cea1f3f5aa09e0e643ac93a2 162068 curl_7.58.0-2ubuntu3.5_i386.deb
 e1fa6c0d9b494cd3666cc05650e22593ccf1f98b517412fdf8d6f54332220405 1150360 libcurl3-gnutls-dbgsym_7.58.0-2ubuntu3.5_i386.ddeb
 7a5a4d3de40fce3e580f91fdaed089879953d0bf3648d668ae12d23a04215bbc 235948 libcurl3-gnutls_7.58.0-2ubuntu3.5_i386.deb
 26c86681a7e4db5d4910aefcf0cd61a154adf84d92a1790dabb821f1c7f537d4 1175756 libcurl3-nss-dbgsym_7.58.0-2ubuntu3.5_i386.ddeb
 cc073fdf051c0c7f41e78b23d7160dcea1a742c56f34c8633983ddbcf8f8b210 241928 libcurl3-nss_7.58.0-2ubuntu3.5_i386.deb
 5e080f72957be4f753b85da6f903ed942003e728a67a99a5078c84a9b0c9cfaf 1171280 libcurl4-dbgsym_7.58.0-2ubuntu3.5_i386.ddeb
 bdd41d58d593eedaf778d00117e1df52c8840eaecfbdd9c730babca8cb29449f 326356 libcurl4-gnutls-dev_7.58.0-2ubuntu3.5_i386.deb
 8ffc74ec23d260f3caf5b02a72700cdd6f9b0c84820a07de028a9c39829a634e 332692 libcurl4-nss-dev_7.58.0-2ubuntu3.5_i386.deb
 d0831e389d5d54ab601748f3e0172cca8a682035387cf197ad63c545201f4874 328460 libcurl4-openssl-dev_7.58.0-2ubuntu3.5_i386.deb
 4c7f484848b0295504cffdfcfa138934ca97941e51a7eb4f6a672b1fa409b5e9 238616 libcurl4_7.58.0-2ubuntu3.5_i386.deb
Files:
 54b779b0f8964b57808f3bc949ca2efc 128072 debug optional curl-dbgsym_7.58.0-2ubuntu3.5_i386.ddeb
 f5c847b152cb785e65985d8d165b9165 11228 web optional curl_7.58.0-2ubuntu3.5_i386.buildinfo
 11dfcaacc77b8f8a547f3bf7e9e9247f 162068 web optional curl_7.58.0-2ubuntu3.5_i386.deb
 1c62d5400aba3d3706961b04563a44d4 1150360 debug optional libcurl3-gnutls-dbgsym_7.58.0-2ubuntu3.5_i386.ddeb
 b891490917b697b4ab886f24a1530cbf 235948 libs optional libcurl3-gnutls_7.58.0-2ubuntu3.5_i386.deb
 89b732c0cf1d3d102daa00ee2952d3eb 1175756 debug optional libcurl3-nss-dbgsym_7.58.0-2ubuntu3.5_i386.ddeb
 e49a2408121104a744acb64b489c3fa7 241928 libs optional libcurl3-nss_7.58.0-2ubuntu3.5_i386.deb
 ab2328ac932ef5850fdaa8cd1e6c52d0 1171280 debug optional libcurl4-dbgsym_7.58.0-2ubuntu3.5_i386.ddeb
 5b82b1c66a64a9668d3cfe8d531393c3 326356 libdevel optional libcurl4-gnutls-dev_7.58.0-2ubuntu3.5_i386.deb
 e3301b58e5ae52211c7cbf30218a2b19 332692 libdevel optional libcurl4-nss-dev_7.58.0-2ubuntu3.5_i386.deb
 dc9c285a0c2eaa5863ddbd02fcf43c51 328460 libdevel optional libcurl4-openssl-dev_7.58.0-2ubuntu3.5_i386.deb
 0cb35cb551c4adf9070cbd33b1878010 238616 libs optional libcurl4_7.58.0-2ubuntu3.5_i386.deb
Original-Maintainer: Alessandro Ghedini <ghedo@debian.org>