[ubuntu/trusty-proposed] curl 7.34.0-1ubuntu1 (Accepted)

[Marc Deslauriers]

curl (7.34.0-1ubuntu1) trusty; urgency=low

  * Resynchronize on Debian, remaining changes
    - Drop dependencies not in main:
      + Build-Depends: Drop stunnel4 and libssh2-1-dev.
      + Drop libssh2-1-dev from binary package Depends.
    - Add new libcurl3-udeb package.
    - Add new curl-udeb package.
  * Dropped undocumented Build-Depends change to automake1.9.

curl (7.34.0-1) unstable; urgency=high

  * New upstream release
    - Fix GnuTLS checking of a certificate CN or SAN name field when the
      digital signature verification is turned off as per CVE-2013-6422
      http://curl.haxx.se/docs/adv_20131217.html
    - Set urgency=high accordingly
  * Drop patches merged upstream:
    - 08_fix-typo.patch
    - 09_fix-urlglob.patch

curl (7.33.0-2) unstable; urgency=low

  * Make -dev packages Multi-Arch: same too (Closes: #731309)
  * Bump Standards-Version to 3.9.5 (no changes needed)
  * Add 09_fix-urlglob.patch to fix URL globbing (Closes: #731855)

Date: Fri, 20 Dec 2013 09:13:22 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/trusty/+source/curl/7.34.0-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 20 Dec 2013 09:13:22 -0500
Source: curl
Binary: curl curl-udeb libcurl3 libcurl3-udeb libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc
Architecture: source
Version: 7.34.0-1ubuntu1
Distribution: trusty
Urgency: high
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 curl       - command line tool for transferring data with URL syntax
 curl-udeb  - Get a file from an HTTP, HTTPS or FTP server (udeb)
 libcurl3   - easy-to-use client-side URL transfer library (OpenSSL flavour)
 libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours)
 libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour)
 libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour)
 libcurl3-udeb - Multi-protocol file transfer library (OpenSSL) (udeb)
 libcurl4-doc - documentation for libcurl
 libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour)
 libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour)
 libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour)
Closes: 731309 731855
Changes: 
 curl (7.34.0-1ubuntu1) trusty; urgency=low
 .
   * Resynchronize on Debian, remaining changes
     - Drop dependencies not in main:
       + Build-Depends: Drop stunnel4 and libssh2-1-dev.
       + Drop libssh2-1-dev from binary package Depends.
     - Add new libcurl3-udeb package.
     - Add new curl-udeb package.
   * Dropped undocumented Build-Depends change to automake1.9.
 .
 curl (7.34.0-1) unstable; urgency=high
 .
   * New upstream release
     - Fix GnuTLS checking of a certificate CN or SAN name field when the
       digital signature verification is turned off as per CVE-2013-6422
       http://curl.haxx.se/docs/adv_20131217.html
     - Set urgency=high accordingly
   * Drop patches merged upstream:
     - 08_fix-typo.patch
     - 09_fix-urlglob.patch
 .
 curl (7.33.0-2) unstable; urgency=low
 .
   * Make -dev packages Multi-Arch: same too (Closes: #731309)
   * Bump Standards-Version to 3.9.5 (no changes needed)
   * Add 09_fix-urlglob.patch to fix URL globbing (Closes: #731855)
Checksums-Sha1: 
 6939a629a362a0f25ba0264f47cc89476c65229a 2746 curl_7.34.0-1ubuntu1.dsc
 b74b59380e1736b2528cc03016614a78d8aa074e 3528094 curl_7.34.0.orig.tar.gz
 b447789568576d15468b7ece84d30aaa0744d1f5 30465 curl_7.34.0-1ubuntu1.debian.tar.gz
Checksums-Sha256: 
 92d11fe8a6658bf40d7cacff107ae5598ad1aa419132a094f360ebb74182a8e7 2746 curl_7.34.0-1ubuntu1.dsc
 0705271de8411a85460706e177cd0f1064ec07c0b9e140a66a916fb644696d6a 3528094 curl_7.34.0.orig.tar.gz
 e4e06f9b5f910d6f66a2c4955a87607a29cda9677ab15f8e9749b041daf1c8bb 30465 curl_7.34.0-1ubuntu1.debian.tar.gz
Files: 
 1f5d2b0ac0f4483dae9f45f65b24989a 2746 web optional curl_7.34.0-1ubuntu1.dsc
 d5b7edccbd1793e3549842e01331da20 3528094 web optional curl_7.34.0.orig.tar.gz
 431766667cefff86df2c4e6bacf17437 30465 web optional curl_7.34.0-1ubuntu1.debian.tar.gz
Original-Maintainer: Alessandro Ghedini <ghedo at debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)
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=IKd0
-----END PGP SIGNATURE-----