-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Sat, 16 Nov 2013 13:04:23 +0100 Source: curl Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg Architecture: armhf Version: 7.26.0-1+wheezy5 Distribution: wheezy-security Urgency: high Maintainer: armhf Build Daemon (hoiby) Changed-By: Alessandro Ghedini Description: curl - command line tool for transferring data with URL syntax libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.26.0-1+wheezy5) stable-security; urgency=high . * Fix OpenSSL checking of a certificate CN or SAN name field when the digital signature verification is turned off as per CVE-2013-4545 http://curl.haxx.se/docs/adv_20131115.html * Set urgency=high accordingly Checksums-Sha1: 1f162dc413ec179304d045e8f9476b02e73f930c 265706 curl_7.26.0-1+wheezy5_armhf.deb 41fcf4b1f41274a73c95c95ee75c11ec4cd3c67d 301332 libcurl3_7.26.0-1+wheezy5_armhf.deb 316492d5febfb4f8349581d052819ea9d55c2343 292670 libcurl3-gnutls_7.26.0-1+wheezy5_armhf.deb 4b556f17f5239c752be4108d5be235c9afb0f6bb 300164 libcurl3-nss_7.26.0-1+wheezy5_armhf.deb a5534bdad49200b9c81915065feed5ca2ac0c323 1206716 libcurl4-openssl-dev_7.26.0-1+wheezy5_armhf.deb 9dcec02c22240dd1fa8a3b15ddcd3e5e97e3a35f 1198620 libcurl4-gnutls-dev_7.26.0-1+wheezy5_armhf.deb 450ae2800dc9e14a9f8f45632dae18eaddf66c0a 1205410 libcurl4-nss-dev_7.26.0-1+wheezy5_armhf.deb 25e40dcb784bee8cd9d569b8038efae0082130cc 2837504 libcurl3-dbg_7.26.0-1+wheezy5_armhf.deb Checksums-Sha256: b1b8ff601c73ff1d5e2c9d5a5afaafdc90fb5d048664ca7cd549fddefa85be1d 265706 curl_7.26.0-1+wheezy5_armhf.deb 263db369d2cec17945f5c63ff72fd709fdf17f8a296dfa40a2aa4fbdf31fe227 301332 libcurl3_7.26.0-1+wheezy5_armhf.deb 10fcd4323384b0c125503ec05d2bb817618cada6e7599647309ad52fab3d5496 292670 libcurl3-gnutls_7.26.0-1+wheezy5_armhf.deb 78552cc9bbe7cf046f87255403021439e79f5ec73cef12d4147e122a448b7f80 300164 libcurl3-nss_7.26.0-1+wheezy5_armhf.deb e328a31b6c01862044a775f8a51cda3ce5856807798c2027716075d4a162a2e9 1206716 libcurl4-openssl-dev_7.26.0-1+wheezy5_armhf.deb 500e456c637921e5b02eef3179c49c02450c4985fee638f409b649e5bae479dd 1198620 libcurl4-gnutls-dev_7.26.0-1+wheezy5_armhf.deb 1072dd78a2f9d9b7e3a573669b5fb01fd07226f86c66859110c84bf811030bc5 1205410 libcurl4-nss-dev_7.26.0-1+wheezy5_armhf.deb 6d08f689fe7e0ebef0844a477d5c625cb36b331330e2aa5049b69b1d46bf7bde 2837504 libcurl3-dbg_7.26.0-1+wheezy5_armhf.deb Files: ca36409766e6d0ee692328a4020cfd35 265706 web optional curl_7.26.0-1+wheezy5_armhf.deb beec9c9334ca39142a296f5835ada9c8 301332 libs optional libcurl3_7.26.0-1+wheezy5_armhf.deb 3a4dba58c2804ac6c8266c946caf9cd9 292670 libs optional libcurl3-gnutls_7.26.0-1+wheezy5_armhf.deb 8cce9ce622e024a5d855e5bae4ebf71d 300164 libs optional libcurl3-nss_7.26.0-1+wheezy5_armhf.deb cf9400c94189abfaa3f033d58c2b4cd4 1206716 libdevel optional libcurl4-openssl-dev_7.26.0-1+wheezy5_armhf.deb ab0a72662cfbcb5d9f54a184232fc72e 1198620 libdevel optional libcurl4-gnutls-dev_7.26.0-1+wheezy5_armhf.deb 68983acfd709e978c59952c9628f26d4 1205410 libdevel optional libcurl4-nss-dev_7.26.0-1+wheezy5_armhf.deb 62c8c6fed55684ff9174a03ff6ac0f50 2837504 debug extra libcurl3-dbg_7.26.0-1+wheezy5_armhf.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBAgAGBQJSiOM1AAoJEPPgL1AAGcYuNA4QALkA1JkTgg4G1X9DwGhC4JzK nzK9ta+LTb/Fz3QeAPmyGMGClunHVjjtBh7FQm5+xeWtSmQju4h8JPgRGlJKbmeE 5mbXCQgHQ/obCkHuhp7Xqv/3v1sEorBjY5Mvx0QT8FaIA0iCsafq/u+XC87XuS10 SQlo52DzTXC/nWLRpOf8UC/Auf1IoCVzMQdbCPg/8DhEkH69/IwXftcnlIJQmZTl 0rgCNh7ZnS4H4B3NbKKlSVzXUA55eZfM0+PwuEZ+QMCogZahZ1ZsUyWrdQf0Nmjx dPaULYS1wu4adryflJzWzVklJIBvXv0me3xBj4dR/XI5AWm2jYjKarr8CzJR00U4 NF6zfOM9qiQMUNfkfzGHlvyCu49ZvQ8A+LK8w1EiRH86fncymmODwXGy75baddfG mNfKOhjcVTuoCStngoEB1DaSDiHBcI2UohLqeL7mfEhhNAT/Mxq8EX8lVp5u0Vhy XRwQSYNFE+InqGlEUvR5mWaVRqANojqlF6UsU7FW+xH7nGoXDfo/H8pGAJSe6g1Y zDpUj8arkXF/rLkInafxiFdk2UrQsTEcH7Ue4otQFICr/JY7lhSh7cCoYMN65HPp 7mG04MBheSc/UzKBAn1Zu2Wo9cmL5CfF2Tct3sulbnmUhrvU/Uh9bALluaHWvkwA y1GWBKOSOX2Ru2qrrsK9 =HduV -----END PGP SIGNATURE-----