-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 16 Nov 2013 13:04:23 +0100 Source: curl Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg Architecture: powerpc Version: 7.26.0-1+wheezy5 Distribution: wheezy-security Urgency: high Maintainer: powerpc Build Daemon (porpora) Changed-By: Alessandro Ghedini Description: curl - command line tool for transferring data with URL syntax libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.26.0-1+wheezy5) stable-security; urgency=high . * Fix OpenSSL checking of a certificate CN or SAN name field when the digital signature verification is turned off as per CVE-2013-4545 http://curl.haxx.se/docs/adv_20131115.html * Set urgency=high accordingly Checksums-Sha1: 17f26f11c823eae63f1c3fa909cb7c3353a2e957 269346 curl_7.26.0-1+wheezy5_powerpc.deb 231988696f55740799adad5768d630cc606f4771 334762 libcurl3_7.26.0-1+wheezy5_powerpc.deb 65fe5a1362fce97a6c00928043d7d19852242a12 325010 libcurl3-gnutls_7.26.0-1+wheezy5_powerpc.deb 26abbb5ee6b8f30444bc23d9aa597143e67f2319 331542 libcurl3-nss_7.26.0-1+wheezy5_powerpc.deb b5d2b167d8ef1e8413a2cfe5bfda40f65ad8f1d2 1256574 libcurl4-openssl-dev_7.26.0-1+wheezy5_powerpc.deb 7972236816f69c3d0681973f356760a163146759 1245638 libcurl4-gnutls-dev_7.26.0-1+wheezy5_powerpc.deb fd16c1c14a4dc4212f13de6d916ef811b7d3be50 1252616 libcurl4-nss-dev_7.26.0-1+wheezy5_powerpc.deb 1ca264dd1b8fe8309279195118fc5c7cb01ef745 2973644 libcurl3-dbg_7.26.0-1+wheezy5_powerpc.deb Checksums-Sha256: 1408100240e8777da4eac3c97a6a97a1b1abd9de5edef0b15f56b5daeb68c7c7 269346 curl_7.26.0-1+wheezy5_powerpc.deb 49a81a90a1219e50cf4cec1d1ffe61942582b8e8770d7e70796608ed9313e096 334762 libcurl3_7.26.0-1+wheezy5_powerpc.deb 13cc061d18b8edc2d2556708ce17934fd54d86c1aa9403b182340da934853cef 325010 libcurl3-gnutls_7.26.0-1+wheezy5_powerpc.deb 0601c4d6146562101cb0a364e727ba203cc38800a7c514f678afa9e469526291 331542 libcurl3-nss_7.26.0-1+wheezy5_powerpc.deb 1f803108c32d187d2f0234736db77d10873099690e762ae1178dd07695c240e9 1256574 libcurl4-openssl-dev_7.26.0-1+wheezy5_powerpc.deb f74a3a3387a83fbcdde4a43264aa4592cea16c6aed02d756bfc2f530b79b9473 1245638 libcurl4-gnutls-dev_7.26.0-1+wheezy5_powerpc.deb 4ee9c1b111c5c17c0013c72422decda2cb4a4883e378f5f6d25edefaeb612667 1252616 libcurl4-nss-dev_7.26.0-1+wheezy5_powerpc.deb 327002daca3d928aed7c21734477efa832e5cb65a2eb73ad9979299e08aed145 2973644 libcurl3-dbg_7.26.0-1+wheezy5_powerpc.deb Files: 8b8bb4d31800d2c034a52231ccb2f89b 269346 web optional curl_7.26.0-1+wheezy5_powerpc.deb 2291e95b75e26b0a55898644a9fc94d1 334762 libs optional libcurl3_7.26.0-1+wheezy5_powerpc.deb 170b20216bac6780207768ebeb2563ac 325010 libs optional libcurl3-gnutls_7.26.0-1+wheezy5_powerpc.deb 1a7534cb9ffa971b52ec2a26774038e9 331542 libs optional libcurl3-nss_7.26.0-1+wheezy5_powerpc.deb 105ceffc861e632bc1c94e615f0e1a26 1256574 libdevel optional libcurl4-openssl-dev_7.26.0-1+wheezy5_powerpc.deb 5c808fd395af38cd2372bb4682345cdc 1245638 libdevel optional libcurl4-gnutls-dev_7.26.0-1+wheezy5_powerpc.deb c7a099f6122efb6f11b7988ceef8d395 1252616 libdevel optional libcurl4-nss-dev_7.26.0-1+wheezy5_powerpc.deb e7c196bb837f90a6a8806666e70da151 2973644 debug extra libcurl3-dbg_7.26.0-1+wheezy5_powerpc.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBCAAGBQJSiOyMAAoJEO3cbNlJ7FI7lasQAL1Iq8NSkNdvJOULpXutykGc CTFSk/PXrvuJzIRncxz3yuID1u48FxrktmkchN/dkGRz2G0HWyGMHogdg93rwyWs T1LmWacSRJF/iUCyzUPUv8tUlpuStZoTrjg3ofxu1QYoj0h/U9GNKby+HaLGUnn3 hl0HsbZQJnVC0tY6C0WNJjkj9o6z5ljVRQr0m5fBaz5y5j8zyOeFYbuUalbr+tX4 mOMdpfKTpSCT0kXOFzY+VrEm7gR8H0yTUXOSJqtpDqsu0fQRPGczDUt2KDOAUH++ 45f5o2geipNfbpmmkEnu3xXPcsh1ZDMJJ9KCG4CCGmfoVcx6AAD0Zsn+MqrFVEr+ 8x00FG062Nrubr7oVOVxpi9ga7702VQC84HjcADCh7MSL0dh5rVMRmxA1PFZ9vd+ cKbMoH0eRCEb84m+QSwH+a18KVd/2miZPpZkny+dNWhXoIKbuJtYeK+9l6VT5RSV /SSaVyQNXEmMZ6dtRgnOzmVJ66I9ok/ShBLMSjyuUqz+rdUffLPBvp7weetuRz2K 7dtGP44bZlq0Jw+NP8/LZufLlq3cMCYJFnsvADypsWWwZ7VkUYliWaUHOxh6th8f ns/THRlsDfflQF3umkV4Olo8W2UjXEGoFcVATFb2HusSxQvnPKtE2LOOLdPJ/hXd vtg/LEfmyK5iB4SY13CW =ZhSJ -----END PGP SIGNATURE-----