-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 16 Nov 2013 13:04:23 +0100 Source: curl Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg Architecture: mipsel Version: 7.26.0-1+wheezy5 Distribution: wheezy-security Urgency: high Maintainer: mipsel Build Daemon (mayer) Changed-By: Alessandro Ghedini Description: curl - command line tool for transferring data with URL syntax libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.26.0-1+wheezy5) stable-security; urgency=high . * Fix OpenSSL checking of a certificate CN or SAN name field when the digital signature verification is turned off as per CVE-2013-4545 http://curl.haxx.se/docs/adv_20131115.html * Set urgency=high accordingly Checksums-Sha1: e3530c2f9c29e248ca57c5200b657d125e07b735 267046 curl_7.26.0-1+wheezy5_mipsel.deb 65476daa746f927da0703f84269f613ca1ba9e16 328664 libcurl3_7.26.0-1+wheezy5_mipsel.deb 4bee839ae02052d3ef130b31499a667565c608e7 320374 libcurl3-gnutls_7.26.0-1+wheezy5_mipsel.deb c33e61e96a881bdbc6b11fb9c74739c8c215de5f 327348 libcurl3-nss_7.26.0-1+wheezy5_mipsel.deb e2c74cf5f6c2f190d7e0efec075169b2fd32ef0a 1260462 libcurl4-openssl-dev_7.26.0-1+wheezy5_mipsel.deb 0b08fd30332cbd91f3ebdc961ccef849f22d4224 1249980 libcurl4-gnutls-dev_7.26.0-1+wheezy5_mipsel.deb 414ece043399f7e989897c3a41b4b7eed509d270 1257040 libcurl4-nss-dev_7.26.0-1+wheezy5_mipsel.deb 45ddf67dd8b99633acdc0213a42115dad0a04b20 2846934 libcurl3-dbg_7.26.0-1+wheezy5_mipsel.deb Checksums-Sha256: cec0d02df1c2e3c8435d0d02101834ff0f13843ee5445bf17c7911e23babb623 267046 curl_7.26.0-1+wheezy5_mipsel.deb 5ad796053d2180adf79ed7da5bfb3aa3e5347e5aa1e5dcda027d19a328fb3b3f 328664 libcurl3_7.26.0-1+wheezy5_mipsel.deb e520a3c9f33349c607e015bef210fd7e6b6e1bb0c3d59e882e1590525b56f7b8 320374 libcurl3-gnutls_7.26.0-1+wheezy5_mipsel.deb 16799db2f3ae92093c4f6a982850c6b421e2c550b3a080a7ac05e22949f50b5c 327348 libcurl3-nss_7.26.0-1+wheezy5_mipsel.deb e6715208d8c18d2de46bc8aa0fed1ba17b7c534dcdeacd28f6933e9d1abf01a6 1260462 libcurl4-openssl-dev_7.26.0-1+wheezy5_mipsel.deb 22b1bc85f2f22c9297ab62e12095da19bad3f1cdc58ea9fe627aed28da595df0 1249980 libcurl4-gnutls-dev_7.26.0-1+wheezy5_mipsel.deb 21952e6ecbbba09dc49daa89031cd262126c50adfcf76146ab0fcb1a7b49608d 1257040 libcurl4-nss-dev_7.26.0-1+wheezy5_mipsel.deb d4e95961135fd155108b1e0ebec87abf1f58800a240a57be8e602e6a7192511b 2846934 libcurl3-dbg_7.26.0-1+wheezy5_mipsel.deb Files: fa83d79241a5357d2a7455647bcfd012 267046 web optional curl_7.26.0-1+wheezy5_mipsel.deb d093dd67bf2984b585c9a06e5acd736b 328664 libs optional libcurl3_7.26.0-1+wheezy5_mipsel.deb f83e1d888ed8bf3153708314d27074e8 320374 libs optional libcurl3-gnutls_7.26.0-1+wheezy5_mipsel.deb a2c9c10f9ef81effe2b6632db7640e2c 327348 libs optional libcurl3-nss_7.26.0-1+wheezy5_mipsel.deb 251659f9a03293a8dd057510905b86f4 1260462 libdevel optional libcurl4-openssl-dev_7.26.0-1+wheezy5_mipsel.deb a8afad3b8fb6f357bb46a9c97172391a 1249980 libdevel optional libcurl4-gnutls-dev_7.26.0-1+wheezy5_mipsel.deb d163a867264f777010cd291f55cd1283 1257040 libdevel optional libcurl4-nss-dev_7.26.0-1+wheezy5_mipsel.deb 81d01a34cbdefe2c726e07b0a11a76bb 2846934 debug extra libcurl3-dbg_7.26.0-1+wheezy5_mipsel.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBCAAGBQJSiRrDAAoJELj97cRKLRPH34AP/R+IGnSowfrEU167ORy7Vjj/ kBzsnuuBf1RWmrCvx4IYLS0WK+VdLwU5o9LD7cIcTOWZt6bsjQefAj6stwT7MFIC T9r6pBv5iu9b+EwraOmqZzNKuXOq9PP20TE5QiGJp6kXggL+No6jVN7j0anAqX52 qstyq3CVf2sxdeEZBNh+qQevGAef2xb/zeMZOINT7NGy91vCipvUcTgydnrI8fqe oybB/ThYJZN8aaKROyfg1YzuCFucnukt6ZB0srNCmgThGAj6I5yDFbYArgoy/0RC wKH/sUd38iF/zNPMq3Q9jFuTvc3hcNIcCvgaRMTIfoGiYkG/tXBxG0cp2B027ybH OZscZ9yJOfmYS2Yxy0NBS1kVoJ/ZSWznCo+wnd7T4Dt2vW13KSYzfPbPfBXqeyww xrljvd77PF1qOudZ/NySmNvESMAMlwhwlfsrCj+eDjf6Mr24v1YYgLasPhlxNSiV /tNBq/bFnH57kNJFWKMyuqHPED41JvvXYlO0bVD5AqTZUemiz0Bcmqb2MuJa8iRs p5+KISZ17LolY969OiqzZcPcXQk7jpnzELlA4vX5XWQRiPhp93vIM4BOzVGuMu1c bQEGMHqICmgvmZriN9r3WqdWaCOwfcov+eniGjjsMOc+r559qKmVpxH1ql5ADcgg FCfgYuTgEjtt0T90WJVA =/mKn -----END PGP SIGNATURE-----