DSA-1738-1

NameDSA-1738-1
SourceDebian
Descriptioncurl - arbitrary file access
ReferencesCVE-2009-0037
Debian/oldstablenot vulnerable
Debian/stablenot vulnerable
Debian/testingnot known to be vulnerable
Debian/unstablenot known to be vulnerable.

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
curl (PTS)etch7.15.5-1etch2fixed
etch (security)7.15.5-1etch3fixed
lenny, lenny (security)7.18.2-8lenny3fixed

The next table lists affected binary packages.

Binary PackageReleaseVersionStatusArchitecures
curl, libcurl3, libcurl3-dbg, libcurl3-gnutls, libcurl3-gnutls-dev, libcurl3-openssl-devetch7.15.5-1etch2fixedalpha, amd64, arm, hppa, i386, ia64, mips, mipsel, powerpc, s390, sparc
etch (security)7.15.5-1etch3fixedalpha, amd64, arm, hppa, i386, ia64, mips, mipsel, powerpc, s390, sparc
curl, libcurl3, libcurl3-dbg, libcurl3-gnutls, libcurl4-gnutls-dev, libcurl4-openssl-devlenny, lenny (security)7.18.2-8lenny3fixedalpha, amd64, arm, armel, hppa, i386, ia64, mips, mipsel, powerpc, s390, sparc
libcurl3-devetch7.15.5-1etch2fixedall
etch (security)7.15.5-1etch3fixedall

The information above is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
curlsourceetch7.15.5-1etch2unknown
curlsourcelenny7.18.2-8lenny2unknown

Search for package or bug name: Reporting problems

Home - Testing Security Team - Debian Security - Imprint