Format: 1.8 Date: Tue, 06 Apr 2021 08:43:24 -0400 Source: curl Binary: curl libcurl3-gnutls libcurl3-nss libcurl4 libcurl4-gnutls-dev libcurl4-nss-dev libcurl4-openssl-dev Built-For-Profiles: noudeb Architecture: riscv64 Version: 7.74.0-1ubuntu2 Distribution: hirsute-proposed Urgency: medium Maintainer: Launchpad Build Daemon <buildd@riscv64-qemu-lcy01-005.buildd> Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com> Description: curl - command line tool for transferring data with URL syntax libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Changes: curl (7.74.0-1ubuntu2) hirsute; urgency=medium . * SECURITY UPDATE: data leak via referer header field - debian/patches/CVE-2021-22876.patch: strip credentials from the auto-referer header field in lib/transfer.c. - CVE-2021-22876 * SECURITY UPDATE: TLS 1.3 session ticket proxy host mixup - debian/patches/CVE-2021-22890.patch: make sure we set and extract the correct session in lib/vtls/*. - CVE-2021-22890 Checksums-Sha1: 7f048838d0b11cccb7e6acded6a146be26d94281 145228 curl-dbgsym_7.74.0-1ubuntu2_riscv64.ddeb d14adb0c59a48c7daf6b0d910c7675f9774539a8 12317 curl_7.74.0-1ubuntu2_riscv64.buildinfo 376a82934ca9fb26fb8e9a66bcb0a30961b4ed7d 164036 curl_7.74.0-1ubuntu2_riscv64.deb dcb66341dc7c898343931c59db8ddee01cfc0579 804544 libcurl3-gnutls-dbgsym_7.74.0-1ubuntu2_riscv64.ddeb 188a3e524221e10fc5af723ac481aabc2e7684ff 219756 libcurl3-gnutls_7.74.0-1ubuntu2_riscv64.deb b975a260decfb96c2f6f5a1fb0bf6121272c8820 846456 libcurl3-nss-dbgsym_7.74.0-1ubuntu2_riscv64.ddeb 1099cc1f9f1a819e07bbb8d387bc3d2f420bad75 228476 libcurl3-nss_7.74.0-1ubuntu2_riscv64.deb 3282aa41d7b42f980d150b0711a98ef319674c01 821536 libcurl4-dbgsym_7.74.0-1ubuntu2_riscv64.ddeb 9d346d36eafbab26a49ca0e1d9dfcfc7594c533a 648664 libcurl4-gnutls-dev_7.74.0-1ubuntu2_riscv64.deb 845228872bd9409a3e05c2bdecc1b17b0308f4bc 666780 libcurl4-nss-dev_7.74.0-1ubuntu2_riscv64.deb ebeff996788b8eadfdd43cdf30095161303eb348 659756 libcurl4-openssl-dev_7.74.0-1ubuntu2_riscv64.deb 6f40c9cdae9223cee2168bd712529313913a9e18 223344 libcurl4_7.74.0-1ubuntu2_riscv64.deb Checksums-Sha256: 28b3bd2d41eb3863fd267207e5226d9515138454475bcff8e47f686badc06e70 145228 curl-dbgsym_7.74.0-1ubuntu2_riscv64.ddeb 66f3c459461694bcac717e48a2422df4dcdbf5760feacec73878d61406139fbd 12317 curl_7.74.0-1ubuntu2_riscv64.buildinfo 27c0fcd486b4c6f644d58e77ff522d701cf9c603285cb80aa2ab6404332a82f2 164036 curl_7.74.0-1ubuntu2_riscv64.deb 0ca90b35197ffe923c39cc45b84e97346400d0166bc0de02b299daaf25c1eb6e 804544 libcurl3-gnutls-dbgsym_7.74.0-1ubuntu2_riscv64.ddeb 967a5087ef3c94c1fb5d80449696b5803667885aae5e6473bb38b16a46c3ca49 219756 libcurl3-gnutls_7.74.0-1ubuntu2_riscv64.deb 03a1b49cf1dba8488ebfbcf1817acdfecdd955e8757b3370779be0b84efc171d 846456 libcurl3-nss-dbgsym_7.74.0-1ubuntu2_riscv64.ddeb c156f75d9a5b4bb2645a8bce428862a3f02b176435910838add3fafe8d1f8372 228476 libcurl3-nss_7.74.0-1ubuntu2_riscv64.deb ad8800c99d530950d163f1ead07481c17b71d3cb2dd7a12f67c23918e2d85759 821536 libcurl4-dbgsym_7.74.0-1ubuntu2_riscv64.ddeb b10cc92b9d5b17ad5f56a9046fb99247ce5773187ba3ea41754ab9db3eb4421d 648664 libcurl4-gnutls-dev_7.74.0-1ubuntu2_riscv64.deb 746d3ef2855beeb3c1b57371a08b87deb951fad37ba11ae2d8edcdebaddeafbc 666780 libcurl4-nss-dev_7.74.0-1ubuntu2_riscv64.deb c3668807d713d352f5fb16efccc1a22417198b7b0f019dd4cb4caa810f919982 659756 libcurl4-openssl-dev_7.74.0-1ubuntu2_riscv64.deb b84c5172653a5de587a8db044ff231879a5abd3511da3ac5bc6b70c68fd847f2 223344 libcurl4_7.74.0-1ubuntu2_riscv64.deb Files: d01d7c1861f62dbcd1ff4a418f52eeae 145228 debug optional curl-dbgsym_7.74.0-1ubuntu2_riscv64.ddeb 1f73ab307260c3a3c6c1feaa87547df8 12317 web optional curl_7.74.0-1ubuntu2_riscv64.buildinfo 2de9b1609e85622ba4fdfa3d376d24bb 164036 web optional curl_7.74.0-1ubuntu2_riscv64.deb bf29b885689d5ab3355388cf18032cb0 804544 debug optional libcurl3-gnutls-dbgsym_7.74.0-1ubuntu2_riscv64.ddeb 0f7658535c31c26c96f249a6dc117bc2 219756 libs optional libcurl3-gnutls_7.74.0-1ubuntu2_riscv64.deb 4ac976a2265039eac89cb077d64fb2c5 846456 debug optional libcurl3-nss-dbgsym_7.74.0-1ubuntu2_riscv64.ddeb bbc7279143a730010b16450c1715b34d 228476 libs optional libcurl3-nss_7.74.0-1ubuntu2_riscv64.deb 8f4fd5fc838a30b16f4d13cb0312b164 821536 debug optional libcurl4-dbgsym_7.74.0-1ubuntu2_riscv64.ddeb 0780887df1e6fd22a560115622d49848 648664 libdevel optional libcurl4-gnutls-dev_7.74.0-1ubuntu2_riscv64.deb a5ae1584459b2088d8a745a3f5d50302 666780 libdevel optional libcurl4-nss-dev_7.74.0-1ubuntu2_riscv64.deb 72db1a8f3df76c0578bd3ee603fece1b 659756 libdevel optional libcurl4-openssl-dev_7.74.0-1ubuntu2_riscv64.deb 5869b2db2d97ec33b3823d48fb607fd9 223344 libs optional libcurl4_7.74.0-1ubuntu2_riscv64.deb Original-Maintainer: Alessandro Ghedini <ghedo@debian.org>