[ubuntu/zesty-security] curl 7.52.1-4ubuntu1.4 (Accepted)

[Marc Deslauriers]

curl (7.52.1-4ubuntu1.4) zesty-security; urgency=medium

  * SECURITY UPDATE: NTLM buffer overflow via integer overflow
    - debian/patches/CVE-2017-8816.patch: avoid integer overflow for malloc
      size in lib/curl_ntlm_core.c
    - CVE-2017-8816
  * SECURITY UPDATE: FTP wildcard out of bounds read
    - debian/patches/CVE-2017-8817.patch: fix heap buffer overflow in
      setcharset in lib/curl_fnmatch.c, added tests to
      tests/data/Makefile.inc, tests/data/test1163.
    - CVE-2017-8817

Date: 2017-11-28 18:29:31.571534+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/curl/7.52.1-4ubuntu1.4
-------------- next part --------------
Sorry, changesfile not available.