-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Sat, 16 Nov 2013 13:04:23 +0100 Source: curl Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg Architecture: mips Version: 7.26.0-1+wheezy5 Distribution: wheezy-security Urgency: high Maintainer: mips Build Daemon (corelli) Changed-By: Alessandro Ghedini Description: curl - command line tool for transferring data with URL syntax libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.26.0-1+wheezy5) stable-security; urgency=high . * Fix OpenSSL checking of a certificate CN or SAN name field when the digital signature verification is turned off as per CVE-2013-4545 http://curl.haxx.se/docs/adv_20131115.html * Set urgency=high accordingly Checksums-Sha1: a67d63fc8474e0c162c8ff871b0a49c763e8a304 267462 curl_7.26.0-1+wheezy5_mips.deb 350552d24b966e1e8177b45599c0fca2dbab93b8 329442 libcurl3_7.26.0-1+wheezy5_mips.deb 3e1d0528e6e6ddb240760a2d8d4ec99072963349 320576 libcurl3-gnutls_7.26.0-1+wheezy5_mips.deb ed09cfc307b931233fa178bc10a007a198ac4ad2 328180 libcurl3-nss_7.26.0-1+wheezy5_mips.deb 676f93e365b9ea2c339d24d0c5a6d7c373ff03ea 1270822 libcurl4-openssl-dev_7.26.0-1+wheezy5_mips.deb 2345a5c613e27825bec336ebeccb51fb90edaa92 1259120 libcurl4-gnutls-dev_7.26.0-1+wheezy5_mips.deb fa8d8fea4bc015b13574b449d2957adf27a25b79 1267136 libcurl4-nss-dev_7.26.0-1+wheezy5_mips.deb 35fbf46feb6a4336861fd38297e3df0384098fc8 2934640 libcurl3-dbg_7.26.0-1+wheezy5_mips.deb Checksums-Sha256: dbc8943f71559fc7642bc613971a6d44e309c79e8a68366ebfbe98add4404ea9 267462 curl_7.26.0-1+wheezy5_mips.deb 295e8d9b68db7dabc4f74270229783b87b9a0ccc28016a64f7180de76052697f 329442 libcurl3_7.26.0-1+wheezy5_mips.deb 423fb636018ff689c495bb2c22ac815770876ce00da1397de4f8c1e6ecc047c8 320576 libcurl3-gnutls_7.26.0-1+wheezy5_mips.deb dedc7ed85decfda38075027ff2ac6eca985cd3d936f5d4a3853714911638a009 328180 libcurl3-nss_7.26.0-1+wheezy5_mips.deb f72549f278213b30a91ca14685c5fcc93d42542984229a1f4edb7a78bc761c76 1270822 libcurl4-openssl-dev_7.26.0-1+wheezy5_mips.deb 1badbcc55b1e047df762825df1c2efae72374897392b5fb58e31e5355eaa5a20 1259120 libcurl4-gnutls-dev_7.26.0-1+wheezy5_mips.deb 1b457251f805a5e8a866eba897665cc8bde3229bfda56c4ef87aeda4081f4a59 1267136 libcurl4-nss-dev_7.26.0-1+wheezy5_mips.deb 4531303d2b068772f523db3204386f1bfc04b01dbe6aa4e58ab4761410b64769 2934640 libcurl3-dbg_7.26.0-1+wheezy5_mips.deb Files: 83f8e8976f8323b52ebcc21636b954c8 267462 web optional curl_7.26.0-1+wheezy5_mips.deb 4ca02ddcbabeac0f4f617e7b1c5f169b 329442 libs optional libcurl3_7.26.0-1+wheezy5_mips.deb 3d186b142576f2841f6aee42a0c19f4b 320576 libs optional libcurl3-gnutls_7.26.0-1+wheezy5_mips.deb 6875623889a9563dc1e64d28fbecf36a 328180 libs optional libcurl3-nss_7.26.0-1+wheezy5_mips.deb c8dd888eb1356de78e9a61f8511fc5ce 1270822 libdevel optional libcurl4-openssl-dev_7.26.0-1+wheezy5_mips.deb b6eb425daf0d98e38b766ef6b769ab45 1259120 libdevel optional libcurl4-gnutls-dev_7.26.0-1+wheezy5_mips.deb 793986f6f8d459e9e18e2a6f5843cded 1267136 libdevel optional libcurl4-nss-dev_7.26.0-1+wheezy5_mips.deb 40df187f20b8249c28241a164eb52a0f 2934640 debug extra libcurl3-dbg_7.26.0-1+wheezy5_mips.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBAgAGBQJSiNcBAAoJEPfjxpjzVGIto4AP/3utSobpr/8ukTV6b5Or8IBs TtOxh69OBzRwSR4rS3WdfTHK1rQTmrvg2elTRK4fsalC6MO2jLsQkNbb0kpfhwT9 Tk2++wKr7t9FU2DxukZ8XjP9U18bzHG6/+sJ5cgfvQ5j4gOKLH6u1W1EMi4N+0/B nMUWfzHT7pLbVD+PG3fgxV/d0NfVr7eAY0z4fP0ebN0qVrH/VLwOblEUBogVBaws xZha/9MZs6pmKaZjCx1dkW3UOvH8NVuiQSBrioctZYFi81bg2WG4fU8kqfPfTuQz txRyBsCx/V00/2HxUBhL8CnWuKGsLbmb6blldZ2XNAsJ09EEE6jPYju2BnMCXxQh gVBDla7iMMef4V2jnc3lshOVDSg4kZ6hxRAimYmZfbnRy2tQ56eaO3XGvpd5UjCQ 6su68XzeW0tRi55JADMmr6Ax4MwO2zWZXkfUYloLKvSUj9m5Wi3Pt1GH8hURKi/5 9sFy6B2hJ5lThWYlW+iBKmQTMJlqcQIe0bpD1t86F5Viao+Yh/Hy+LpSl0ZDV2t2 mafVKYoR6L20qJKnderQ9OxgYR0seCcjbVqPJoYBM2oL/v9OyKTuFsiIAiS3JNGJ /vtWOeK9Zs1cI+2cSEETkLwu+V2DaNkhFeLQ5IyDKfF5qCuShdYK2Vk9hYdeS9s9 tXIUdkA0kRrBaKBgh9lD =+q+2 -----END PGP SIGNATURE-----