-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Sat, 16 Nov 2013 13:04:23 +0100 Source: curl Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg Architecture: s390 Version: 7.26.0-1+wheezy5 Distribution: wheezy-security Urgency: high Maintainer: s390x Build Daemon (zemlinsky) Changed-By: Alessandro Ghedini Description: curl - command line tool for transferring data with URL syntax libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.26.0-1+wheezy5) stable-security; urgency=high . * Fix OpenSSL checking of a certificate CN or SAN name field when the digital signature verification is turned off as per CVE-2013-4545 http://curl.haxx.se/docs/adv_20131115.html * Set urgency=high accordingly Checksums-Sha1: d0b25640bde454566a8df1951e9864fe9c74cb25 269940 curl_7.26.0-1+wheezy5_s390.deb cc4a8b0f5c71b66628002884561f84c7877f372a 343436 libcurl3_7.26.0-1+wheezy5_s390.deb af813195557015cf0758fcb9db23b7dbf29f58cb 333388 libcurl3-gnutls_7.26.0-1+wheezy5_s390.deb d956d418f159419627f4c0c7c7df7f81412722a9 340706 libcurl3-nss_7.26.0-1+wheezy5_s390.deb e3bd1ccc9f9ff27ec733aa0477a60a2022ff3821 1258466 libcurl4-openssl-dev_7.26.0-1+wheezy5_s390.deb 567fed0fed34207087fb03a8982c5ad7430f8510 1247118 libcurl4-gnutls-dev_7.26.0-1+wheezy5_s390.deb 5e8703ed241348e5db995d490f257184ba49e932 1254514 libcurl4-nss-dev_7.26.0-1+wheezy5_s390.deb a167b3eb55cbaef3a4d71178ff7c2ed29b025d82 2954824 libcurl3-dbg_7.26.0-1+wheezy5_s390.deb Checksums-Sha256: 8c9b11ff1f848a95f76a2e3f40a680ca981d52249ba4111b3f5abc639d32e40e 269940 curl_7.26.0-1+wheezy5_s390.deb fecbfe09aced8bf0e6a7f4aa6b24d6762f41abc73b07acf346c79db4ddcf386a 343436 libcurl3_7.26.0-1+wheezy5_s390.deb 353c3b15c8115c2064b883f9cbfb1bac4969c616323d25811c4ed90d63399323 333388 libcurl3-gnutls_7.26.0-1+wheezy5_s390.deb e22a448379dfa57275ab75e817bfd6d8d15bc4f1242aa4018be7e522f627ea6c 340706 libcurl3-nss_7.26.0-1+wheezy5_s390.deb b15a3daf0d02605df9bd78cdf7293eb132519f1e3b56494408b27a00696cb107 1258466 libcurl4-openssl-dev_7.26.0-1+wheezy5_s390.deb 5be9f8275c94c2280c71519d7279ee82a1b13d0f4ca02752aa53bc394f31cc81 1247118 libcurl4-gnutls-dev_7.26.0-1+wheezy5_s390.deb f6bb6f69d9b70fd45a056e543ad3aa6db140345de17230de65afee42f47ee575 1254514 libcurl4-nss-dev_7.26.0-1+wheezy5_s390.deb aa3fcbc72e87441c6f3ad99e9a7cf4e047e376f2fbc5d7ecf46e5a6605695933 2954824 libcurl3-dbg_7.26.0-1+wheezy5_s390.deb Files: 276d155673eabc5b8101875dc5662d6a 269940 web optional curl_7.26.0-1+wheezy5_s390.deb e0ca2f059eae42a80b4e734b5d9b1c21 343436 libs optional libcurl3_7.26.0-1+wheezy5_s390.deb 6dac4439545e9403d2dd017cc7861514 333388 libs optional libcurl3-gnutls_7.26.0-1+wheezy5_s390.deb 86946390ac0fc688df62eb7c3fb36309 340706 libs optional libcurl3-nss_7.26.0-1+wheezy5_s390.deb 4165fd5a5d8bce6a01587ce933b1d9ae 1258466 libdevel optional libcurl4-openssl-dev_7.26.0-1+wheezy5_s390.deb fcf581721e58bdfdb8b7078fdcee124c 1247118 libdevel optional libcurl4-gnutls-dev_7.26.0-1+wheezy5_s390.deb e40a79381974fb61cd71c31e5c6f4f06 1254514 libdevel optional libcurl4-nss-dev_7.26.0-1+wheezy5_s390.deb f6dea6ebb1a0d70e4c48f73715ef4458 2954824 debug extra libcurl3-dbg_7.26.0-1+wheezy5_s390.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBAgAGBQJSiMh6AAoJELClvkT9Bqi61hUP/0HoLKexS41SSDzdFEBpdcjo iqVSus74dN/+w6ZQSy2c0P77dZUMUPYmlgL26fRTjlT6JUlXG21e1C2Yi7VNqj+9 vjTatR8QaYrOm9AM0f4Fh6nRDlR8ojSceJY/d/OwEZWqpDNOygXN52KfyM8IZ79v DAVck4IsXAbLY894E8UwNeh0slv/bJ1Lxs/XuLLKe7hCQLfpk7QMi9srRjXBHSEJ Mboi7LFjbjd1vdaGOI85oBNhsJu3AHjkcMQOVZQIlhdSrcIjWnpe64QNDqUnN/I8 k+l41TAhFDnMETNL1KeZS7eG4nBT++3t+Xpuuv2czlcRLUK+Cu1LBsil6Ip8K/JP Yq/sRwwwHT0VHb1x/RGPm2n4xmcUOqYQwLOV2Mxg34kLJkj2jBHUVgeVGfedZIBY kXS6IT1yazbbebQBAprAhov0gxIXnFLokx0e6VUbqW0bmJ/ILYtFAq2cdYpI8JRL fc3kmUsPqU5D2RgRtKoV98qU5Btj1g0yJ4F5N81fc+nGcLRKhWaZQ0PhPzKGjhjm Do2Ne9N9p4Sk6CVkOq8yB0S2SCYPR7/S/rzdqmG3cyj7PR4vZ5LuLGICxzB83w0n +BURyXygjA1r8lM4V5WxsjjbJnvDo2A5u7kJtG47lxt6HLKitpj8c85VMtr4TmYy N0bh0zhHLdvCzaxsgi6G =VIN5 -----END PGP SIGNATURE-----