Ubuntu
curl package

curl 7.19.7-1ubuntu1.7 source package in Ubuntu

Changelog

curl (7.19.7-1ubuntu1.7) lucid-security; urgency=medium

  * SECURITY UPDATE: wrong re-use of connections
    - debian/patches/CVE-2014-0138.patch: fix possible issues with NTLM
      HTTP logic, and extend new connection logic to other protocols in
      lib/http.c, lib/url.c, lib/urldata.h, add new tests to
      tests/data/Makefile.am, tests/data/test1418, tests/data/test1419.
    - CVE-2014-0138
  * SECURITY UPDATE: incorrect wildcard SSL certificate validation with
    literal IP addresses
    - debian/patches/CVE-2014-0139.patch: fix wildcard logic in
      lib/ssluse.c.
    - CVE-2014-0139
  * debian/patches/fix_test172.path: fix expired cookie causing test to
    fail.
  * debian/patches/disable_test519.path: disable test 519 as security
    update causes it to hang. Fixing this would require backporting new
    logic into tests/server/sws.c.
 -- Marc Deslauriers <email address hidden>   Mon, 14 Apr 2014 09:43:35 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Lucid
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
web
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
curl_7.19.7.orig.tar.gz 2.9 MiB 98d247406d2b5ef7621d7a5475dfcf48836b2b454e22c954cfbb379e6dbb44c7
curl_7.19.7-1ubuntu1.7.diff.gz 94.9 KiB 8234b1c4c4865e13363d26ebc75acb32c83454e12d52449d39a4b74bf9a7ade2
curl_7.19.7-1ubuntu1.7.dsc 2.1 KiB edaa470216f4bb2683ab81c89c769e7c8c4fd08e8fe720a168926dd50fccb779

View changes file

Binary packages built by this source

curl: No summary available for curl in ubuntu lucid.

No description available for curl in ubuntu lucid.

libcurl3: No summary available for libcurl3 in ubuntu lucid.

No description available for libcurl3 in ubuntu lucid.

libcurl3-dbg: No summary available for libcurl3-dbg in ubuntu lucid.

No description available for libcurl3-dbg in ubuntu lucid.

libcurl3-gnutls: No summary available for libcurl3-gnutls in ubuntu lucid.

No description available for libcurl3-gnutls in ubuntu lucid.

libcurl4-gnutls-dev: No summary available for libcurl4-gnutls-dev in ubuntu lucid.

No description available for libcurl4-gnutls-dev in ubuntu lucid.

libcurl4-openssl-dev: No summary available for libcurl4-openssl-dev in ubuntu lucid.

No description available for libcurl4-openssl-dev in ubuntu lucid.