Format: 1.8 Date: Tue, 18 Oct 2022 12:35:33 -0400 Source: curl Binary: curl libcurl3-gnutls libcurl3-nss libcurl4 libcurl4-gnutls-dev libcurl4-nss-dev libcurl4-openssl-dev Built-For-Profiles: noudeb Architecture: riscv64 Version: 7.81.0-1ubuntu1.6 Distribution: jammy Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: curl - command line tool for transferring data with URL syntax libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.81.0-1ubuntu1.6) jammy-security; urgency=medium . * SECURITY UPDATE: POST following PUT confusion - debian/patches/CVE-2022-32221.patch: when POST is set, reset the 'upload' field in lib/setopt.c. - CVE-2022-32221 * SECURITY UPDATE: HTTP proxy double-free - debian/patches/CVE-2022-42915.patch: restore the protocol pointer on error in lib/http_proxy.c, lib/url.c. - CVE-2022-42915 * SECURITY UPDATE: HSTS bypass via IDN - debian/patches/CVE-2022-42916.patch: use IDN decoded names for HSTS checks in lib/url.c. - CVE-2022-42916 Checksums-Sha1: 6e1a3892c95752bd6280949b554f9726413b9e91 155588 curl-dbgsym_7.81.0-1ubuntu1.6_riscv64.ddeb c0b62cff71676f8f7c8c21c94d25a1cb28874cff 12910 curl_7.81.0-1ubuntu1.6_riscv64.buildinfo 65d071ed1545256fdefc539a2026e5d22bfbb160 188416 curl_7.81.0-1ubuntu1.6_riscv64.deb 274b89ebee32be9467eebd57d968baaba279ba36 921994 libcurl3-gnutls-dbgsym_7.81.0-1ubuntu1.6_riscv64.ddeb 81413b440526dd0d8df871c40aecd7b45873008c 248958 libcurl3-gnutls_7.81.0-1ubuntu1.6_riscv64.deb 281e7b71bbe1e985b9043a80971a2440ce903bfe 963286 libcurl3-nss-dbgsym_7.81.0-1ubuntu1.6_riscv64.ddeb f9b08caa803d5f689aef57d77d6bd3c9df078cfb 258516 libcurl3-nss_7.81.0-1ubuntu1.6_riscv64.deb 8123d3b9cd141041ca07713925c1721254b73e9c 950188 libcurl4-dbgsym_7.81.0-1ubuntu1.6_riscv64.ddeb 906c09762c99bcdff3371e6f72b4b61592d5dac3 844542 libcurl4-gnutls-dev_7.81.0-1ubuntu1.6_riscv64.deb a417245a25c8853bc9a41d2c5ab70f3f52fbb266 866932 libcurl4-nss-dev_7.81.0-1ubuntu1.6_riscv64.deb b648f96f76e4d1d39c36ad3224b6ff68dc5d177d 865738 libcurl4-openssl-dev_7.81.0-1ubuntu1.6_riscv64.deb c4e74ac4b981b48df1e13293e9aa1387653b8643 256204 libcurl4_7.81.0-1ubuntu1.6_riscv64.deb Checksums-Sha256: 590d9e73dd5c0cb3a3cb33a6653b7b60d43c116478f5a1b35c173bd2ad02c6c9 155588 curl-dbgsym_7.81.0-1ubuntu1.6_riscv64.ddeb 909e3155ae4c6ff95ffe6d04539c898d2f97d1c4cd2d9939acff04cc7d99915d 12910 curl_7.81.0-1ubuntu1.6_riscv64.buildinfo 98a8e24c0f36b7126764ac5833df3d928ce16b123e7c03b78d382c456850a7aa 188416 curl_7.81.0-1ubuntu1.6_riscv64.deb 6b90b29d4d0b0851b7952c9c85f057efabe83d0b869946539ffdefad3b5f63ed 921994 libcurl3-gnutls-dbgsym_7.81.0-1ubuntu1.6_riscv64.ddeb 2353964234fdef4bde4a9ee528fa7e4d5d65a14fe43c96f4145904a60e59aac8 248958 libcurl3-gnutls_7.81.0-1ubuntu1.6_riscv64.deb e6d8286f94f1bced10f43161b21b8be6a14379cfc1abe2732e94c0a9d18bfeaf 963286 libcurl3-nss-dbgsym_7.81.0-1ubuntu1.6_riscv64.ddeb 13e1fd801904698accc0b9b1a299ec572c2dca53b996c5f0d30b948f62841157 258516 libcurl3-nss_7.81.0-1ubuntu1.6_riscv64.deb 4abcc1a2e8d5009bd3c499ad995eeb82bcefd8bd005c33d1861b41ad9ea3718e 950188 libcurl4-dbgsym_7.81.0-1ubuntu1.6_riscv64.ddeb dbf5b90686cb7f6e4be46357debb24376dbda5f4aceebdd00b218370ecb7c043 844542 libcurl4-gnutls-dev_7.81.0-1ubuntu1.6_riscv64.deb 278baf4c172feec050615777f0074974249791a954edbd8ba8734ce616ca037b 866932 libcurl4-nss-dev_7.81.0-1ubuntu1.6_riscv64.deb c6771b707ff9bdd67b4be6ef618535c834d9101c362f472e2eab5c281d1e321f 865738 libcurl4-openssl-dev_7.81.0-1ubuntu1.6_riscv64.deb 7729944fefaedac8194e0ae4b013b14ecae23f3aea061ade96bcc6ba2b5a2d43 256204 libcurl4_7.81.0-1ubuntu1.6_riscv64.deb Files: c94c6a99754ff1a09d5ea7d87825e93c 155588 debug optional curl-dbgsym_7.81.0-1ubuntu1.6_riscv64.ddeb bfd1849a902439b30f9d29a3dffe6d92 12910 web optional curl_7.81.0-1ubuntu1.6_riscv64.buildinfo 91e0949117f189f5d64ec181e4d46c45 188416 web optional curl_7.81.0-1ubuntu1.6_riscv64.deb 92a0cc162c5071613d4005e637c46962 921994 debug optional libcurl3-gnutls-dbgsym_7.81.0-1ubuntu1.6_riscv64.ddeb 0f69e95794a8bc0a4eb0ff83302f94d8 248958 libs optional libcurl3-gnutls_7.81.0-1ubuntu1.6_riscv64.deb 63336da4815b7d8f6bad67edcb0ed1d3 963286 debug optional libcurl3-nss-dbgsym_7.81.0-1ubuntu1.6_riscv64.ddeb 1ae4e55310f10c787b19a6e9b6a79367 258516 libs optional libcurl3-nss_7.81.0-1ubuntu1.6_riscv64.deb 134851f635474b2f661c93fe37fd42e1 950188 debug optional libcurl4-dbgsym_7.81.0-1ubuntu1.6_riscv64.ddeb 0093a1139719d6f512f4e2aef893b695 844542 libdevel optional libcurl4-gnutls-dev_7.81.0-1ubuntu1.6_riscv64.deb b25a4a91808d5d901e4d0d1dea9ad4f9 866932 libdevel optional libcurl4-nss-dev_7.81.0-1ubuntu1.6_riscv64.deb 02bbacaaadecd58baff0fa2eb3567607 865738 libdevel optional libcurl4-openssl-dev_7.81.0-1ubuntu1.6_riscv64.deb 924298e5ca7ba61bde3b2b666ddf84af 256204 libs optional libcurl4_7.81.0-1ubuntu1.6_riscv64.deb Original-Maintainer: Alessandro Ghedini