[USN-3765-1] curl vulnerability


–===============6272746266103015695==
Content-Type: multipart/signed; micalg=”pgp-sha256″;
protocol=”application/pgp-signature”; boundary=”=-YISwWWeO6qixShYhQUnt”

–=-YISwWWeO6qixShYhQUnt
Content-Type: text/plain; charset=”UTF-8″
Content-Transfer-Encoding: base64
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==

–=-YISwWWeO6qixShYhQUnt
Content-Type: application/pgp-signature; name=”signature.asc”
Content-Description: This is a digitally signed message part
Content-Transfer-Encoding: 7bit

—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2
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=V8gL
—–END PGP SIGNATURE—–

–=-YISwWWeO6qixShYhQUnt–

–===============6272746266103015695==
Content-Type: text/plain; charset=”utf-8″
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

LS0gCnVidW50dS1zZWN1cml0eS1hbm5vdW5jZSBtYWlsaW5nIGxpc3QKdWJ1bnR1LXNlY3VyaXR5
LWFubm91bmNlQGxpc3RzLnVidW50dS5jb20KTW9kaWZ5IHNldHRpbmdzIG9yIHVuc3Vic2NyaWJl
IGF0OiBodHRwczovL2xpc3RzLnVidW50dS5jb20vbWFpbG1hbi9saXN0aW5mby91YnVudHUtc2Vj
dXJpdHktYW5ub3VuY2UK

–===============6272746266103015695==–