-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 16 Nov 2013 13:04:23 +0100 Source: curl Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg Architecture: ia64 Version: 7.26.0-1+wheezy5 Distribution: wheezy-security Urgency: high Maintainer: ia64 Build Daemon (alkman) Changed-By: Alessandro Ghedini Description: curl - command line tool for transferring data with URL syntax libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.26.0-1+wheezy5) stable-security; urgency=high . * Fix OpenSSL checking of a certificate CN or SAN name field when the digital signature verification is turned off as per CVE-2013-4545 http://curl.haxx.se/docs/adv_20131115.html * Set urgency=high accordingly Checksums-Sha1: 6a58025829c9acb814cd733370d4a64d9df8f625 286972 curl_7.26.0-1+wheezy5_ia64.deb 83f6e841512fc733b59aadb4c68046de87b242fa 422748 libcurl3_7.26.0-1+wheezy5_ia64.deb 38dd997bcb9fd4b9c4b0c035382be12414aabed5 410224 libcurl3-gnutls_7.26.0-1+wheezy5_ia64.deb 9c16c5cc07f37046548f7d58f313d00633506897 420308 libcurl3-nss_7.26.0-1+wheezy5_ia64.deb 5a4ae57505a0b5330a95b47563dff5ba0622dd76 1379176 libcurl4-openssl-dev_7.26.0-1+wheezy5_ia64.deb 52c48aea57c5976f8b6fc3f55c0bc34da9cda2d3 1366870 libcurl4-gnutls-dev_7.26.0-1+wheezy5_ia64.deb bb3ae6d926f4284dc925072386f39226a767b271 1377220 libcurl4-nss-dev_7.26.0-1+wheezy5_ia64.deb 747f69c93ffe14039f7a53b80d93e1830e0bef9d 2883152 libcurl3-dbg_7.26.0-1+wheezy5_ia64.deb Checksums-Sha256: a8cb26b05d6de32cb59873b349c1e2b20d47312f0ba5fba5dea5b87331baed76 286972 curl_7.26.0-1+wheezy5_ia64.deb e7355d0a52a9af849948a2cb65827e4618bdd4b0c7f56dce0e44d2cb74a42d89 422748 libcurl3_7.26.0-1+wheezy5_ia64.deb 21b4af6d76b836e38f9e473f71da631e4ba9f1e6ed7faa81f88572d9d7a2adfa 410224 libcurl3-gnutls_7.26.0-1+wheezy5_ia64.deb 102df46f86ab4c969960c6d493a66ab62d19cb8ad69d2fe74400cffab65417d6 420308 libcurl3-nss_7.26.0-1+wheezy5_ia64.deb 2c72ddc7099a0b5dd84a7875affdc39943cbf12562bdd8a6dfd8235a2bb90845 1379176 libcurl4-openssl-dev_7.26.0-1+wheezy5_ia64.deb 41abda59b7dd6984d3a1fce737e1a176f51b35ddf6ac81f2fdde137964dbcd52 1366870 libcurl4-gnutls-dev_7.26.0-1+wheezy5_ia64.deb f983ee56d7aa595ce4edfa905e57629c285a352fd9249b7663d7d74ea12be302 1377220 libcurl4-nss-dev_7.26.0-1+wheezy5_ia64.deb 09cff8e5d59c3da51aa8c7ba830cbdc3eb0bc0c0708614ee2702fe4ab40f9fdd 2883152 libcurl3-dbg_7.26.0-1+wheezy5_ia64.deb Files: 29d7e1f4e82a03cf00fe76f443069863 286972 web optional curl_7.26.0-1+wheezy5_ia64.deb 809ec33be84e815a71210237fc397b8a 422748 libs optional libcurl3_7.26.0-1+wheezy5_ia64.deb a9c70351784d6f407e236a01bc332d89 410224 libs optional libcurl3-gnutls_7.26.0-1+wheezy5_ia64.deb 7bfc6768af1321ca738381be9ba43f46 420308 libs optional libcurl3-nss_7.26.0-1+wheezy5_ia64.deb 50ca1f52edc9aaad96c6590650c652c7 1379176 libdevel optional libcurl4-openssl-dev_7.26.0-1+wheezy5_ia64.deb 190d0d5203f6b29d6f957a861c6eed78 1366870 libdevel optional libcurl4-gnutls-dev_7.26.0-1+wheezy5_ia64.deb cb2bd27f8956ebcac9e6810bde3e6317 1377220 libdevel optional libcurl4-nss-dev_7.26.0-1+wheezy5_ia64.deb 34a4a8d444d20514880603e8db53eb4b 2883152 debug extra libcurl3-dbg_7.26.0-1+wheezy5_ia64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBCAAGBQJSiMqsAAoJEA1SCNB5E/27Pg8P/0j9ozybwTz/688LaB41glUE rYuXMa8EmeVZcY26L6vMidgxGaDkvotmUPuopkhfjYkJDrTKjYwY8E2zmBW+SRxl dIzWj6DQ+kGFlKwIEwGOlDJHm2rXTNaM/XaGqTF25/O3MeL66Y50VZr85dQ2jxaY kiIemQ78qdRbTT6FO4K4G+dAQ8bpAwVFySgTd+5YQKDrFMrL70yvZ527uJBStOYG EUTVJfrmY/KJJ7NkWUmHBkXigUDYbClOKO73k5DdXlji61Z79M0N6dthyIW9JEiB gzZ7uKqBeAsdeu4zoo1mfAX5L0Bqjc77lW8iCq8h+L9fuNIamNr3qYKtkafkO7Ye QOa6q/OCEUV+yR9N3itSeNEJMtzs3itkWDb0aj48Cetfkt5YrLu5MEp2tPQ/EAfI EMQ3SCU1xl3wn83xdM8d2NecY4cNlexXT8I0C7ote3+cK00fg3EKAtka3nPTlD2w 4mpQN1LzJRkFXXo7+5YzIS0sQN+xwNP1ufoL/d/pBzddKu1YduB+xAadI4XqS9VT QDcp1POiLsXZts5qdiwmmqXWJ5DlNYnOFpogRJFiLWhit3dco0hP09ZxqTJrdVGZ YpHuYVjRHQNwGmWAS/pd/rC72KXim51RSLrZVWDTZ0BO3947e/Iv0RNv8eYufIs6 UUseesUUCElVAHxkdG6x =dYLJ -----END PGP SIGNATURE-----