Ubuntu
curl package

curl 7.22.0-3ubuntu4.29 source package in Ubuntu

Changelog

curl (7.22.0-3ubuntu4.29) precise-security; urgency=medium

  [ Marc Deslauriers ]
  * SECURITY UPDATE: FTP redirect to malicious host via PASV response
    - debian/patches/CVE-2020-8284.patch: use CURLOPT_FTP_SKIP_PASV_IP by
      default in lib/url.c, src/main.c.
    - CVE-2020-8284
  * SECURITY UPDATE: FTP wildcard stack buffer overflow in libcurl
    - debian/patches/CVE-2020-8285.patch: make wc_statemach loop instead of
      recurse in lib/ftp.c.
    - CVE-2020-8285

 -- Leonidas Da Silva Barbosa <email address hidden>  Thu, 03 Dec 2020 11:42:29 -0300

Upload details

Uploaded by:
Leonidas S. Barbosa
Uploaded to:
Precise
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
web
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Precise updates main web
Precise security main web

Downloads

File Size SHA-256 Checksum
curl_7.22.0.orig.tar.gz 2.8 MiB 8fa54fdb229b5a014f454e67502fcca2516121f4d078e0be19103998a736279c
curl_7.22.0-3ubuntu4.29.debian.tar.gz 76.2 KiB a266ff1a52b4d61f4d0f8c23beac31eea347b40f14f9fbe0c2241a3dfe0be4b2
curl_7.22.0-3ubuntu4.29.dsc 2.7 KiB 17e93425ca5323dd172cb82b2f3d7f2b23c0a76a1da98e863126345464a7824f

View changes file

Binary packages built by this source

curl: Get a file from an HTTP, HTTPS or FTP server

 curl is a client to get files from servers using any of the supported
 protocols. The command is designed to work without user interaction
 or any kind of interactivity.
 .
 curl offers a busload of useful tricks like proxy support, user
 authentication, FTP upload, HTTP post, file transfer resume and more.

curl-udeb: Get a file from an HTTP, HTTPS or FTP server

 curl is a client to get files from servers using any of the supported
 protocols. The command is designed to work without user interaction
 or any kind of interactivity.
 .
 curl offers a busload of useful tricks like proxy support, user
 authentication, FTP upload, HTTP post, file transfer resume and more.
 .
 This package contains the curl binary for the Debian Installer (udeb)

libcurl3: Multi-protocol file transfer library (OpenSSL)

 libcurl is designed to be a solid, usable, reliable and portable
 multi-protocol file transfer library.
 .
 SSL support is provided by OpenSSL.
 .
 This is the shared version of libcurl.

libcurl3-dbg: libcurl compiled with debug symbols

 This contains the debug symbols of both the OpenSSL, GnuTLS and NSS versions
 of libcurl3. It might be useful in debug sessions of software which uses
 libcurl.

libcurl3-gnutls: Multi-protocol file transfer library (GnuTLS)

 libcurl is designed to be a solid, usable, reliable and portable
 multi-protocol file transfer library.
 .
 SSL support is provided by GnuTLS.
 .
 This is the shared version of libcurl.

libcurl3-nss: Multi-protocol file transfer library (NSS)

 libcurl is designed to be a solid, usable, reliable and portable
 multi-protocol file transfer library.
 .
 SSL support is provided by NSS.
 .
 This is the shared version of libcurl.

libcurl3-udeb: Multi-protocol file transfer library (OpenSSL)

 libcurl is designed to be a solid, usable, reliable and portable
 multi-protocol file transfer library.
 .
 SSL support is provided by OpenSSL.
 .
 This package contains the minimal runtime libraries for the Debian Installer
 (udeb).

libcurl4-gnutls-dev: Development files and documentation for libcurl (GnuTLS)

 These files (ie. includes, static library, manual pages) allow to
 build software which uses libcurl.
 .
 SSL support is provided by GnuTLS.
 .
 HTML and PDF versions of all the manual pages are also provided.

libcurl4-nss-dev: Development files and documentation for libcurl (NSS)

 These files (ie. includes, static library, manual pages) allow to
 build software which uses libcurl.
 .
 SSL support is provided by NSS.
 .
 HTML and PDF versions of all the manual pages are also provided.

libcurl4-openssl-dev: Development files and documentation for libcurl (OpenSSL)

 These files (ie. includes, static library, manual pages) allow to
 build software which uses libcurl.
 .
 SSL support is provided by OpenSSL.
 .
 HTML and PDF versions of all the manual pages are also provided.