[ubuntu/mantic-proposed] curl 7.88.1-11ubuntu1 (Accepted)

[Gianfranco Costamagna]

curl (7.88.1-11ubuntu1) mantic; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Don't build-depend on python3-impacket on i386 so we can drop it
      (and its dependencies) from the i386 partial port.  It's only used for
      the tests, which do not block the build in any case.

curl (7.88.1-11) unstable; urgency=medium

  [ Carlos Henrique Lima Melara ]
  * Fix CVE-2023-32001: TOCTOU race condition in Curl_fopen():
    - Done by d/p/CVE-2023-32001.patch (Closes: #1041812).

  [ John Scott ]
  * LDAP backend: correct the usage of OpenLDAP-specific functionality being
    disabled with an upstream patch (Closes: #1041964)
    This corrects the improper fetching of binary attributes.
  * debian/tests: add a DEP-8 test that getting binary LDAP attributes works now

Date: Sat, 29 Jul 2023 21:51:16 +0200
Changed-By: Gianfranco Costamagna <locutusofborg at debian.org>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/curl/7.88.1-11ubuntu1
-------------- next part --------------
Format: 1.8
Date: Sat, 29 Jul 2023 21:51:16 +0200
Source: curl
Built-For-Profiles: noudeb
Architecture: source
Version: 7.88.1-11ubuntu1
Distribution: mantic
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Gianfranco Costamagna <locutusofborg at debian.org>
Closes: 1041812 1041964
Changes:
 curl (7.88.1-11ubuntu1) mantic; urgency=low
 .
   * Merge from Debian unstable. Remaining changes:
     - Don't build-depend on python3-impacket on i386 so we can drop it
       (and its dependencies) from the i386 partial port.  It's only used for
       the tests, which do not block the build in any case.
 .
 curl (7.88.1-11) unstable; urgency=medium
 .
   [ Carlos Henrique Lima Melara ]
   * Fix CVE-2023-32001: TOCTOU race condition in Curl_fopen():
     - Done by d/p/CVE-2023-32001.patch (Closes: #1041812).
 .
   [ John Scott ]
   * LDAP backend: correct the usage of OpenLDAP-specific functionality being
     disabled with an upstream patch (Closes: #1041964)
     This corrects the improper fetching of binary attributes.
   * debian/tests: add a DEP-8 test that getting binary LDAP attributes works now
Checksums-Sha1:
 6df455aa5f9ce21d70ff6514bf827b312ba631ae 3335 curl_7.88.1-11ubuntu1.dsc
 e833338dadcedd85c7f7284856e60af5fa846a2c 60460 curl_7.88.1-11ubuntu1.debian.tar.xz
 cfc8833357577b81887fd6ae68cb242f84c0f6c1 9676 curl_7.88.1-11ubuntu1_source.buildinfo
Checksums-Sha256:
 b188ed27edcd000737e0cfd324ebbe5cc94c483c49337ca4c53c1c6e092e0a47 3335 curl_7.88.1-11ubuntu1.dsc
 6f1024f77c7dfd5443e746485df0e8ff9c2bfe61da82a7115de17fea06ec9a9a 60460 curl_7.88.1-11ubuntu1.debian.tar.xz
 b2202b427309f565d4169e3b0518a15992d94cf9b9065b77cd66b126b3dfdf19 9676 curl_7.88.1-11ubuntu1_source.buildinfo
Files:
 10a6a961c0b78df8ea3ba92a3d09f024 3335 web optional curl_7.88.1-11ubuntu1.dsc
 f32d34ddc48e2ec75bda3671ca5e5be5 60460 web optional curl_7.88.1-11ubuntu1.debian.tar.xz
 e0406dbe37eed144b86835e07f75d5e5 9676 web optional curl_7.88.1-11ubuntu1_source.buildinfo
Original-Maintainer: Alessandro Ghedini <ghedo at debian.org>