[ubuntu/trusty-proposed] curl 7.35.0-1ubuntu1 (Accepted)

[Marc Deslauriers]

curl (7.35.0-1ubuntu1) trusty; urgency=medium

  * Resynchronize on Debian, remaining changes:
    - Drop dependencies not in main:
      + Build-Depends: Drop stunnel4 and libssh2-1-dev.
      + Drop libssh2-1-dev from binary package Depends.
    - Add new libcurl3-udeb package.
    - Add new curl-udeb package.

curl (7.35.0-1) unstable; urgency=high

  * New upstream release
    - Fix re-use of wrong HTTP NTLM connection as per CVE-2014-0015
      http://curl.haxx.se/docs/adv_20140129.html
    - Set urgency=high accordingly
  * Refresh patches

Date: Fri, 31 Jan 2014 08:42:28 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/trusty/+source/curl/7.35.0-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 31 Jan 2014 08:42:28 -0500
Source: curl
Binary: curl curl-udeb libcurl3 libcurl3-udeb libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc
Architecture: source
Version: 7.35.0-1ubuntu1
Distribution: trusty
Urgency: high
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 curl       - command line tool for transferring data with URL syntax
 curl-udeb  - Get a file from an HTTP, HTTPS or FTP server (udeb)
 libcurl3   - easy-to-use client-side URL transfer library (OpenSSL flavour)
 libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours)
 libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour)
 libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour)
 libcurl3-udeb - Multi-protocol file transfer library (OpenSSL) (udeb)
 libcurl4-doc - documentation for libcurl
 libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour)
 libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour)
 libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour)
Changes: 
 curl (7.35.0-1ubuntu1) trusty; urgency=medium
 .
   * Resynchronize on Debian, remaining changes:
     - Drop dependencies not in main:
       + Build-Depends: Drop stunnel4 and libssh2-1-dev.
       + Drop libssh2-1-dev from binary package Depends.
     - Add new libcurl3-udeb package.
     - Add new curl-udeb package.
 .
 curl (7.35.0-1) unstable; urgency=high
 .
   * New upstream release
     - Fix re-use of wrong HTTP NTLM connection as per CVE-2014-0015
       http://curl.haxx.se/docs/adv_20140129.html
     - Set urgency=high accordingly
   * Refresh patches
Checksums-Sha1: 
 6282a3bc85b6ec0bbbfc3cf6679a036a99269556 2729 curl_7.35.0-1ubuntu1.dsc
 35c2b1f8c56912ab7bebaa61cf4494c94a0ed0d1 3544496 curl_7.35.0.orig.tar.gz
 240e3ec2fb53838efeac501690a00d5b404ffcd9 30614 curl_7.35.0-1ubuntu1.debian.tar.gz
Checksums-Sha256: 
 cf86b7b024e9cddb200809e7630da63363abf0a53386c4b63463cd95fb10722e 2729 curl_7.35.0-1ubuntu1.dsc
 917d118fc5d61e9dd1538d6519bd93bbebf2e866882419781c2e0fdb2bc42121 3544496 curl_7.35.0.orig.tar.gz
 08c8d25b122fec612327f8060c57c60ed85507579b1a913baa03d3ca377a14da 30614 curl_7.35.0-1ubuntu1.debian.tar.gz
Files: 
 ab4728eac0a51336f6b67e8c82e46823 2729 web optional curl_7.35.0-1ubuntu1.dsc
 f5ae45ed6e86debb721b68392b5ce13c 3544496 web optional curl_7.35.0.orig.tar.gz
 c737dc72b18e29484b68d80c49227f3e 30614 web optional curl_7.35.0-1ubuntu1.debian.tar.gz
Original-Maintainer: Alessandro Ghedini <ghedo at debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=G2oR
-----END PGP SIGNATURE-----