[ubuntu/oracular-proposed] curl 8.8.0-1ubuntu1 (Accepted)

Fri May 24 14:13:11 UTC 2024

curl (8.8.0-1ubuntu1) oracular; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - debian/control: Don't build-depend on python3-impacket and stunnel4 on
      i386 so we can drop it (and its dependencies) from the i386 partial port.
      It's only used for the tests, which do not block the build in any case.
  * Drop CVE-2024-0853 CVE-2024-2004 and CVE-2024-2398 fixes, now upstream

curl (8.8.0-1) unstable; urgency=medium

  * New upstream version 8.8.0
  * Refresh patches
  * Revert "Temporarily disable LDAP support on 32-bit non-x86"
  * d/patches: Drop merged patches
  * d/p/docs_makefile...: Upstream patch to fix curl-config regression
  * d/libcurl*.symbols: Add new symbol curl_multi_waitfds

curl (8.7.1-5) unstable; urgency=high

  * d/p/content_encoding_brotli_and_others...patch: New patch to fix an
    encoding regression. Thank you to Jeroen Ooms and the curl developers
    (Daniel Stenberg and Stefan Eissing) for reporting and pointing out the
    fix.

curl (8.7.1-4) unstable; urgency=medium

  * d/p/curl-8_7_1-h2-ngtcp2-write-error-handling.diff: New patch to address
    git+http2 issue. Thanks to Stefan Eissing <stefan at eissing.org> for
    doing the backport.

curl (8.7.1-3) unstable; urgency=medium

  [ Carlos Henrique Lima Melara ]
  * d/p/fix-regression-in-curlinfo.patch: add patch from upstream, thanks to
    Antonio Terceiro for reporting it (closes: #1069292)

  [ Samuel Henrique ]
  * d/libcurl3t64-gnutls.lintian-overrides: Drop unused override

curl (8.7.1-2) unstable; urgency=medium

  [ Carlos Henrique Lima Melara ]
  * d/rules: fix sed substitution regex for curl-config
  * d/rules: make a call to dpkg-buildflags in curl-config to get CFLAGS
    (Closes: #1057138)
  * d/control: suggests dpkg-dev for -dev packages so we get dpkg goodies
  * d/libcurl4-doc.docs: list each markdown file to be installed
  * d/make-manpages-reproducible.patch: import from upstream
  * d/p/fix-regression-on-chunked-post.patch: add new patch from upstream

  [ Sergio Durigan Junior ]
  * d/p/openldap-create-ldap-URLs-correctly-for-IPv6-addresses.patch:
    (Closes: #1053643)

  [ Samuel Henrique ]
  * d/rules: Run tests in parallel
  * d/p/test1901...: New patch to confirm regression fix

curl (8.7.1-1) unstable; urgency=medium

  * New upstream version 8.7.1
    - Fix CVE-2024-2004: Usage of disabled protocol
    - Fix CVE-2024-2398: HTTP/2 push headers memory-leak
  * d/patches: Drop patches present on this release

curl (8.6.0-4) unstable; urgency=medium

  [ Carlos Henrique Lima Melara ]
  * d/libcurl*.links: use substitution variables instead of executable files

  [ Simon McVittie ]
  * d/control: Add a build-profile that disables LDAP support
    (closes: #1066981)
  * Temporarily disable LDAP support on 32-bit non-x86 (closes: #1066982)
  * Temporarily disable build-time tests on 32-bit non-x86

curl (8.6.0-3.2) unstable; urgency=medium

  * Non-maintainer upload.
  * Fix wrong X-Time64-Compat for libcurl4t64.  Closes: #1065315.

curl (8.6.0-3.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Rename libraries for 64-bit time_t transition.  Closes: #1061992

curl (8.6.0-3) unstable; urgency=medium

  * d/p/vtls_revert_receive_max_buffer_add_test_case.patch: New patch to fix
    tls regression (closes: #1063462)

curl (8.6.0-2) unstable; urgency=medium

  * d/p/sendf_ignore_response_body_to_head.patch: New upstream patch to fix a
    compat issue (closes: #1063342)
  * d/control: Switch from pkg-config to pkgconf

curl (8.6.0-1) unstable; urgency=medium

  [ Samuel Henrique ]
  * New upstream version 8.6.0
    - Fix CVE-2024-0853: OCSP verification bypass with TLS session reuse
  * Drop upstream patches from 8.6.0
  * Update approach for installing manpages
  * d/copyright: Update copyright

  [ Carlos Henrique Lima Melara ]
  * d/control: exclude dependency on gnutls-bin for tests on ppc64el
    (Closes: #1059952)

Date: Fri, 24 May 2024 16:08:30 +0200
Changed-By: Gianfranco Costamagna <locutusofborg at debian.org>
Maintainer: Debian Curl Maintainers <team+curl at tracker.debian.org>
https://launchpad.net/ubuntu/+source/curl/8.8.0-1ubuntu1
-------------- next part --------------
Format: 1.8
Date: Fri, 24 May 2024 16:08:30 +0200
Source: curl
Built-For-Profiles: noudeb
Architecture: source
Version: 8.8.0-1ubuntu1
Distribution: oracular
Urgency: high
Maintainer: Debian Curl Maintainers <team+curl at tracker.debian.org>
Changed-By: Gianfranco Costamagna <locutusofborg at debian.org>
Closes: 1053643 1057138 1059952 1061992 1063342 1063462 1065315 1066981 1066982 1069292
Changes:
 curl (8.8.0-1ubuntu1) oracular; urgency=medium
 .
   * Merge with Debian unstable. Remaining changes:
     - debian/control: Don't build-depend on python3-impacket and stunnel4 on
       i386 so we can drop it (and its dependencies) from the i386 partial port.
       It's only used for the tests, which do not block the build in any case.
   * Drop CVE-2024-0853 CVE-2024-2004 and CVE-2024-2398 fixes, now upstream
 .
 curl (8.8.0-1) unstable; urgency=medium
 .
   * New upstream version 8.8.0
   * Refresh patches
   * Revert "Temporarily disable LDAP support on 32-bit non-x86"
   * d/patches: Drop merged patches
   * d/p/docs_makefile...: Upstream patch to fix curl-config regression
   * d/libcurl*.symbols: Add new symbol curl_multi_waitfds
 .
 curl (8.7.1-5) unstable; urgency=high
 .
   * d/p/content_encoding_brotli_and_others...patch: New patch to fix an
     encoding regression. Thank you to Jeroen Ooms and the curl developers
     (Daniel Stenberg and Stefan Eissing) for reporting and pointing out the
     fix.
 .
 curl (8.7.1-4) unstable; urgency=medium
 .
   * d/p/curl-8_7_1-h2-ngtcp2-write-error-handling.diff: New patch to address
     git+http2 issue. Thanks to Stefan Eissing <stefan at eissing.org> for
     doing the backport.
 .
 curl (8.7.1-3) unstable; urgency=medium
 .
   [ Carlos Henrique Lima Melara ]
   * d/p/fix-regression-in-curlinfo.patch: add patch from upstream, thanks to
     Antonio Terceiro for reporting it (closes: #1069292)
 .
   [ Samuel Henrique ]
   * d/libcurl3t64-gnutls.lintian-overrides: Drop unused override
 .
 curl (8.7.1-2) unstable; urgency=medium
 .
   [ Carlos Henrique Lima Melara ]
   * d/rules: fix sed substitution regex for curl-config
   * d/rules: make a call to dpkg-buildflags in curl-config to get CFLAGS
     (Closes: #1057138)
   * d/control: suggests dpkg-dev for -dev packages so we get dpkg goodies
   * d/libcurl4-doc.docs: list each markdown file to be installed
   * d/make-manpages-reproducible.patch: import from upstream
   * d/p/fix-regression-on-chunked-post.patch: add new patch from upstream
 .
   [ Sergio Durigan Junior ]
   * d/p/openldap-create-ldap-URLs-correctly-for-IPv6-addresses.patch:
     (Closes: #1053643)
 .
   [ Samuel Henrique ]
   * d/rules: Run tests in parallel
   * d/p/test1901...: New patch to confirm regression fix
 .
 curl (8.7.1-1) unstable; urgency=medium
 .
   * New upstream version 8.7.1
     - Fix CVE-2024-2004: Usage of disabled protocol
     - Fix CVE-2024-2398: HTTP/2 push headers memory-leak
   * d/patches: Drop patches present on this release
 .
 curl (8.6.0-4) unstable; urgency=medium
 .
   [ Carlos Henrique Lima Melara ]
   * d/libcurl*.links: use substitution variables instead of executable files
 .
   [ Simon McVittie ]
   * d/control: Add a build-profile that disables LDAP support
     (closes: #1066981)
   * Temporarily disable LDAP support on 32-bit non-x86 (closes: #1066982)
   * Temporarily disable build-time tests on 32-bit non-x86
 .
 curl (8.6.0-3.2) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Fix wrong X-Time64-Compat for libcurl4t64.  Closes: #1065315.
 .
 curl (8.6.0-3.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Rename libraries for 64-bit time_t transition.  Closes: #1061992
 .
 curl (8.6.0-3) unstable; urgency=medium
 .
   * d/p/vtls_revert_receive_max_buffer_add_test_case.patch: New patch to fix
     tls regression (closes: #1063462)
 .
 curl (8.6.0-2) unstable; urgency=medium
 .
   * d/p/sendf_ignore_response_body_to_head.patch: New upstream patch to fix a
     compat issue (closes: #1063342)
   * d/control: Switch from pkg-config to pkgconf
 .
 curl (8.6.0-1) unstable; urgency=medium
 .
   [ Samuel Henrique ]
   * New upstream version 8.6.0
     - Fix CVE-2024-0853: OCSP verification bypass with TLS session reuse
   * Drop upstream patches from 8.6.0
   * Update approach for installing manpages
   * d/copyright: Update copyright
 .
   [ Carlos Henrique Lima Melara ]
   * d/control: exclude dependency on gnutls-bin for tests on ppc64el
     (Closes: #1059952)
Checksums-Sha1:
 36c5fe5a51d7b7f0cdd3bce94aefa788b6896307 3396 curl_8.8.0-1ubuntu1.dsc
 27b90781ec6353d9b52e88e4802c7436b1ed0529 4152714 curl_8.8.0.orig.tar.gz
 1a8d13266cefedd2a922f56f431c71f29a1794be 488 curl_8.8.0.orig.tar.gz.asc
 086ce5ad6c798536dad12829dd6446464583db58 49448 curl_8.8.0-1ubuntu1.debian.tar.xz
 ad36c39246e508c00938559f90af52e218eed881 9724 curl_8.8.0-1ubuntu1_source.buildinfo
Checksums-Sha256:
 b7d229cf48d448e96b1b1f7d37b200c6e7deded28e9ce8c0f8800310b355de7a 3396 curl_8.8.0-1ubuntu1.dsc
 77c0e1cd35ab5b45b659645a93b46d660224d0024f1185e8a95cdb27ae3d787d 4152714 curl_8.8.0.orig.tar.gz
 200ce86394b29564df060eb6eaec7e5d107c214b30401ce920f294b3b9c107a6 488 curl_8.8.0.orig.tar.gz.asc
 24a04669ef112a427615d4e4070d2dc614bbb86e278f530e5ec164d4af96556f 49448 curl_8.8.0-1ubuntu1.debian.tar.xz
 0ad1ae99cd70d48c4a689b38932faa9a060ed95d56de806ca71b1bc7b0de64dc 9724 curl_8.8.0-1ubuntu1_source.buildinfo
Files:
 f95550a8c901ffa6eada76a0a84eecbd 3396 web optional curl_8.8.0-1ubuntu1.dsc
 2300048f61e6196678281a8612a873ef 4152714 web optional curl_8.8.0.orig.tar.gz
 f4ba3ea52c67a04741ee4fa2e876a331 488 web optional curl_8.8.0.orig.tar.gz.asc
 00e07035584d9cd0bad37d2b4cca7c88 49448 web optional curl_8.8.0-1ubuntu1.debian.tar.xz
 e631404747c69b9375c73f97639627b7 9724 web optional curl_8.8.0-1ubuntu1_source.buildinfo