[ubuntu/plucky-proposed] curl 8.11.0-1ubuntu1 (Accepted)

Thu Nov 21 21:51:13 UTC 2024

curl (8.11.0-1ubuntu1) plucky; urgency=medium

  * Merge with Debian Unstable. Remaining changes:
    - debian/control: Don't build-depend on python3-impacket and stunnel4 on
      i386 so we can drop it (and its dependencies) from the i386 partial port.
      It's only used for the tests, which do not block the build in any case.
    - d/{control,rules}: Do not use gnutls for the curl binary.
    - d/{control,rules}: Drop nghttp3 & ngtcp2 depdendencies of
      libcurl-gnutls to avoid component-mismatch.
    - d/rules: Use libssh2-dev as it is in main (LP: #2076865).

curl (8.11.0-1) unstable; urgency=medium

  [ Samuel Henrique ]
  * New upstream version 8.11.0
  * Fix CVE-2024-9681: HSTS subdomain overwrites parent cache entry
   (closes: #1086804)
  * Update patches for the new release
  * d/rules: Drop '--enable-websockets', it's enabled by default now
  * d/libcurl*.symbols: Remove HIDDEN at HIDDEN 7.16.2
  * Add 5 upstream patches to fix regressions:
    - cmdline_ech_md_formatting_cleanups.patch
    - duphandle_also_init_netrc.patch
    - libssh_when_using_IPv6_numerical_address_add_brackets.patch
    - netrc_support_large_file_longer_lines_longer_tokens.patch
    - setopt_fix_CURLOPT_HTTP_CONTENT_DECODING.patch

  [ Carlos Henrique Lima Melara ]
  * d/rules: add sed rule to make curl-config get CPPFLAGS in run-time
  * d/control: move libldap2-dev to Depends and use newer libldap-dev name
  * d/control: move libkrb5-dev from Suggests to Depends for -dev packages

curl (8.10.1-2) unstable; urgency=medium

  * d/patches/gtls_add_p12_format_support.patch: New upstream patch for P12
    support

curl (8.10.1-1) unstable; urgency=medium

  * New upstream version 8.10.1
  * d/p/ZZZgnutls-build.patch: Update patch

curl (8.10.0-2) unstable; urgency=medium

  [ Simon McVittie ]
  * d/rules: Do not allow any undefined symbols when linking
  * ZZZgnutls-build.patch: Resync libraries used for GNUTLS flavour
    (closes: #1081514, #1081517, #1081533)
  * ZZZgnutls-build.patch: De-conditionalize libcurlu.la  parameters

curl (8.10.0-1) unstable; urgency=medium

  * New upstream version 8.10.0
    - Fix CVE-2024-8096 - OCSP stapling bypass with GnuTLS
    - Fix curl -w '%{size_header}' for GnuTLS (closes: #1076800)
  * d/copyright: Remove entry for deleted file tests/server/fake_ntlm.c
  * d/patches:
    - Refresh patches
    - ignore-SIGPIPE-after-init.patch: Drop patch, merged upstream
  * d/rules:
    - Replace buildconf invocation with autoreconf -fi
    - dh_installchangelogs: s/CHANGES/CHANGES.md
  * d/libcurl4-doc.docs: Remove dropped docs
  * d/libcurl4t64.lintian-overrides: Remove unused overrides

Date: Thu, 21 Nov 2024 15:44:22 -0600
Changed-By: Simon Quigley <tsimonq2 at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/curl/8.11.0-1ubuntu1
-------------- next part --------------
Format: 1.8
Date: Thu, 21 Nov 2024 15:44:22 -0600
Source: curl
Built-For-Profiles: noudeb
Architecture: source
Version: 8.11.0-1ubuntu1
Distribution: plucky
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Simon Quigley <tsimonq2 at ubuntu.com>
Closes: 1076800 1081514 1081517 1081533 1086804
Launchpad-Bugs-Fixed: 2076865
Changes:
 curl (8.11.0-1ubuntu1) plucky; urgency=medium
 .
   * Merge with Debian Unstable. Remaining changes:
     - debian/control: Don't build-depend on python3-impacket and stunnel4 on
       i386 so we can drop it (and its dependencies) from the i386 partial port.
       It's only used for the tests, which do not block the build in any case.
     - d/{control,rules}: Do not use gnutls for the curl binary.
     - d/{control,rules}: Drop nghttp3 & ngtcp2 depdendencies of
       libcurl-gnutls to avoid component-mismatch.
     - d/rules: Use libssh2-dev as it is in main (LP: #2076865).
 .
 curl (8.11.0-1) unstable; urgency=medium
 .
   [ Samuel Henrique ]
   * New upstream version 8.11.0
   * Fix CVE-2024-9681: HSTS subdomain overwrites parent cache entry
    (closes: #1086804)
   * Update patches for the new release
   * d/rules: Drop '--enable-websockets', it's enabled by default now
   * d/libcurl*.symbols: Remove HIDDEN at HIDDEN 7.16.2
   * Add 5 upstream patches to fix regressions:
     - cmdline_ech_md_formatting_cleanups.patch
     - duphandle_also_init_netrc.patch
     - libssh_when_using_IPv6_numerical_address_add_brackets.patch
     - netrc_support_large_file_longer_lines_longer_tokens.patch
     - setopt_fix_CURLOPT_HTTP_CONTENT_DECODING.patch
 .
   [ Carlos Henrique Lima Melara ]
   * d/rules: add sed rule to make curl-config get CPPFLAGS in run-time
   * d/control: move libldap2-dev to Depends and use newer libldap-dev name
   * d/control: move libkrb5-dev from Suggests to Depends for -dev packages
 .
 curl (8.10.1-2) unstable; urgency=medium
 .
   * d/patches/gtls_add_p12_format_support.patch: New upstream patch for P12
     support
 .
 curl (8.10.1-1) unstable; urgency=medium
 .
   * New upstream version 8.10.1
   * d/p/ZZZgnutls-build.patch: Update patch
 .
 curl (8.10.0-2) unstable; urgency=medium
 .
   [ Simon McVittie ]
   * d/rules: Do not allow any undefined symbols when linking
   * ZZZgnutls-build.patch: Resync libraries used for GNUTLS flavour
     (closes: #1081514, #1081517, #1081533)
   * ZZZgnutls-build.patch: De-conditionalize libcurlu.la  parameters
 .
 curl (8.10.0-1) unstable; urgency=medium
 .
   * New upstream version 8.10.0
     - Fix CVE-2024-8096 - OCSP stapling bypass with GnuTLS
     - Fix curl -w '%{size_header}' for GnuTLS (closes: #1076800)
   * d/copyright: Remove entry for deleted file tests/server/fake_ntlm.c
   * d/patches:
     - Refresh patches
     - ignore-SIGPIPE-after-init.patch: Drop patch, merged upstream
   * d/rules:
     - Replace buildconf invocation with autoreconf -fi
     - dh_installchangelogs: s/CHANGES/CHANGES.md
   * d/libcurl4-doc.docs: Remove dropped docs
   * d/libcurl4t64.lintian-overrides: Remove unused overrides
Checksums-Sha1:
 36dc3cfa27a11e04bb3ba06aa874c309d4b13c29 3280 curl_8.11.0-1ubuntu1.dsc
 9648c31756362343f1a0daba881e189d6fe8b4f4 4167839 curl_8.11.0.orig.tar.gz
 f4280d937e832fbd7667be1022f24adb2296151a 488 curl_8.11.0.orig.tar.gz.asc
 adc23986e58f93bba2885ea1be6999d5afab42fe 57500 curl_8.11.0-1ubuntu1.debian.tar.xz
 cd1497a30350ebdc9f0e0741c1f00cf02b895cf7 9746 curl_8.11.0-1ubuntu1_source.buildinfo
Checksums-Sha256:
 69a87e9c0503c0ea8afa37bc77f2964c674c08c851c93c9826685788e1fa24ae 3280 curl_8.11.0-1ubuntu1.dsc
 264537d90e58d2b09dddc50944baf3c38e7089151c8986715e2aaeaaf2b8118f 4167839 curl_8.11.0.orig.tar.gz
 b709d6115f2dbf47e3bfb1bbb5b70b235476f8b1bd46973a8b3afe7b74149c52 488 curl_8.11.0.orig.tar.gz.asc
 ef78c51ffd8e9dac8071ec6e70d938efcb843b18c9e2d8017fcea41ccaa57255 57500 curl_8.11.0-1ubuntu1.debian.tar.xz
 e87b96eebc8e2da0db28ffc9369d981f30202b18b66c05514279aad5bc2ca647 9746 curl_8.11.0-1ubuntu1_source.buildinfo
Files:
 a598d8299b31e16842a8d0f7ff0c35bf 3280 web optional curl_8.11.0-1ubuntu1.dsc
 7b6b3613ed9be7b6c010e0750b2c48bb 4167839 web optional curl_8.11.0.orig.tar.gz
 f364acc2699870da6de43c123570d97b 488 web optional curl_8.11.0.orig.tar.gz.asc
 2a24eb61bc41d757e4dff3c9510a9d80 57500 web optional curl_8.11.0-1ubuntu1.debian.tar.xz
 486741ae06b612f72466f1512f232e53 9746 web optional curl_8.11.0-1ubuntu1_source.buildinfo
Original-Maintainer: Debian Curl Maintainers <team+curl at tracker.debian.org>