curl (7.47.0-1ubuntu2.5) xenial-security; urgency=medium
* SECURITY UPDATE: NTLM buffer overflow via integer overflow
- debian/patches/CVE-2017-8816.patch: avoid integer overflow for malloc
size in lib/curl_ntlm_core.c
- CVE-2017-8816
* SECURITY UPDATE: FTP wildcard out of bounds read
- debian/patches/CVE-2017-8817.patch: fix heap buffer overflow in
setcharset in lib/curl_fnmatch.c, added tests to
tests/data/Makefile.inc, tests/data/test1163.
- CVE-2017-8817
Date: 2017-11-28 18:23:24.225109+00:00
Changed-By: Marc Deslauriers <marc.deslauri...@canonical.com>
Signed-By: Ubuntu Archive Robot
<cjwatson+ubuntu-archive-ro...@chiark.greenend.org.uk>
https://launchpad.net/ubuntu/+source/curl/7.47.0-1ubuntu2.5
Sorry, changesfile not available.
--
Xenial-changes mailing list
Xenial-changes@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/xenial-changes
