[ubuntu/artful-security] curl 7.55.1-1ubuntu2.2 (Accepted)

[Marc Deslauriers]

curl (7.55.1-1ubuntu2.2) artful-security; urgency=medium

  * SECURITY UPDATE: NTLM buffer overflow via integer overflow
    - debian/patches/CVE-2017-8816.patch: avoid integer overflow for malloc
      size in lib/curl_ntlm_core.c
    - CVE-2017-8816
  * SECURITY UPDATE: FTP wildcard out of bounds read
    - debian/patches/CVE-2017-8817.patch: fix heap buffer overflow in
      setcharset in lib/curl_fnmatch.c, added tests to
      tests/data/Makefile.inc, tests/data/test1163.
    - CVE-2017-8817

Date: 2017-11-28 19:41:17.502492+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/curl/7.55.1-1ubuntu2.2
-------------- next part --------------
Sorry, changesfile not available.