[ubuntu/wily-proposed] curl 7.43.0-1ubuntu1 (Accepted)

[Marc Deslauriers]

curl (7.43.0-1ubuntu1) wily; urgency=medium

  * Merge from Debian. Remaining changes:
    - Drop dependencies not in main:
      + Build-Depends: Drop stunnel4 and libssh2-1-dev.
      + Drop libssh2-1-dev from binary package Depends.

curl (7.43.0-1) unstable; urgency=medium

  * New upstream release
    - Fix lingering HTTP credentials in connection re-use as per CVE-2015-3236
      http://curl.haxx.se/docs/adv_20150617A.html
    - Fix SMB send off unrelated memory contents as per CVE-2015-3237
      http://curl.haxx.se/docs/adv_20150617B.html
  * Refresh patches
  * Fix spelling-error-in-description

Date: Thu, 18 Jun 2015 07:39:39 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/curl/7.43.0-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 18 Jun 2015 07:39:39 -0400
Source: curl
Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc
Architecture: source
Version: 7.43.0-1ubuntu1
Distribution: wily
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description:
 curl       - command line tool for transferring data with URL syntax
 libcurl3   - easy-to-use client-side URL transfer library (OpenSSL flavour)
 libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours)
 libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour)
 libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour)
 libcurl4-doc - documentation for libcurl
 libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour)
 libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour)
 libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour)
Changes:
 curl (7.43.0-1ubuntu1) wily; urgency=medium
 .
   * Merge from Debian. Remaining changes:
     - Drop dependencies not in main:
       + Build-Depends: Drop stunnel4 and libssh2-1-dev.
       + Drop libssh2-1-dev from binary package Depends.
 .
 curl (7.43.0-1) unstable; urgency=medium
 .
   * New upstream release
     - Fix lingering HTTP credentials in connection re-use as per CVE-2015-3236
       http://curl.haxx.se/docs/adv_20150617A.html
     - Fix SMB send off unrelated memory contents as per CVE-2015-3237
       http://curl.haxx.se/docs/adv_20150617B.html
   * Refresh patches
   * Fix spelling-error-in-description
Checksums-Sha1:
 1ffc0af82c71fa200fed55c2563a39725488cc1c 2709 curl_7.43.0-1ubuntu1.dsc
 0214cb7174c505476f1fb0521ec7d987347cb748 4333385 curl_7.43.0.orig.tar.gz
 587847a6051488c21d49cfe92b875823d60ec8e6 28036 curl_7.43.0-1ubuntu1.debian.tar.xz
Checksums-Sha256:
 a133586c3d941d19ff17a1ab9cf6111944abac507214120e70f0eac9deca382e 2709 curl_7.43.0-1ubuntu1.dsc
 1a084da1edbfc3bd632861358b26af45ba91aaadfb15d6482de55748b8dfc693 4333385 curl_7.43.0.orig.tar.gz
 f090ba40f127790906efd1d0e883272f222141e9ec358c288f3e05dcb57a9b67 28036 curl_7.43.0-1ubuntu1.debian.tar.xz
Files:
 d7144bcb0c337c4eb35c841b53a0d531 2709 web optional curl_7.43.0-1ubuntu1.dsc
 3037f0b6ce03d434618e9db5506ae6be 4333385 web optional curl_7.43.0.orig.tar.gz
 cab217dea12c7bdcc0680c713d6dff75 28036 web optional curl_7.43.0-1ubuntu1.debian.tar.xz
Original-Maintainer: Alessandro Ghedini <ghedo at debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=hq8R
-----END PGP SIGNATURE-----