[ubuntu/xenial-proposed] curl 7.47.0-1ubuntu1 (Accepted)

[Marc Deslauriers]

curl (7.47.0-1ubuntu1) xenial; urgency=medium

  * Merge from Debian. Remaining changes:
    - Drop dependencies not in main:
      + Build-Depends: Drop stunnel4, libssh2-1-dev, and libnghttp2-dev.
      + Drop libssh2-1-dev from binary package Depends.
      + debian/control: drop --with-nghttp2
    - Switch build depends from transitional libgnutsl28-dev to
      libgnutls-dev

curl (7.47.0-1) unstable; urgency=high

  * New upstream release
    - Fix NTLM credentials not-checked for proxy connection re-use
      as per CVE-2016-0755
      http://curl.haxx.se/docs/adv_20160127A.html
    - Set uyrgency=high accordingly
  * Remove hard-coded dependency on libgnutls (Closes: #812542)
  * Drop 08_fix-zsh-completion.patch (merged upstream)
  * Refresh patches

Date: Wed, 27 Jan 2016 14:59:25 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/curl/7.47.0-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 27 Jan 2016 14:59:25 -0500
Source: curl
Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc
Architecture: source
Version: 7.47.0-1ubuntu1
Distribution: xenial
Urgency: high
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description:
 curl       - command line tool for transferring data with URL syntax
 libcurl3   - easy-to-use client-side URL transfer library (OpenSSL flavour)
 libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours)
 libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour)
 libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour)
 libcurl4-doc - documentation for libcurl
 libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour)
 libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour)
 libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour)
Closes: 812542
Changes:
 curl (7.47.0-1ubuntu1) xenial; urgency=medium
 .
   * Merge from Debian. Remaining changes:
     - Drop dependencies not in main:
       + Build-Depends: Drop stunnel4, libssh2-1-dev, and libnghttp2-dev.
       + Drop libssh2-1-dev from binary package Depends.
       + debian/control: drop --with-nghttp2
     - Switch build depends from transitional libgnutsl28-dev to
       libgnutls-dev
 .
 curl (7.47.0-1) unstable; urgency=high
 .
   * New upstream release
     - Fix NTLM credentials not-checked for proxy connection re-use
       as per CVE-2016-0755
       http://curl.haxx.se/docs/adv_20160127A.html
     - Set uyrgency=high accordingly
   * Remove hard-coded dependency on libgnutls (Closes: #812542)
   * Drop 08_fix-zsh-completion.patch (merged upstream)
   * Refresh patches
Checksums-Sha1:
 a93e9fd9923b57b4aebf272eea128469f7b21518 2707 curl_7.47.0-1ubuntu1.dsc
 2f8d3edacb1073e1c8f67dc68bba6dc5f3fdbf85 4563163 curl_7.47.0.orig.tar.gz
 aabe6a8e6581e94cec7610b12b687f7d0f86bbdf 28652 curl_7.47.0-1ubuntu1.debian.tar.xz
Checksums-Sha256:
 1462bc527eb98ef9fc91cacdf403b2f1855a218134add42e0dd017377ff0bb54 2707 curl_7.47.0-1ubuntu1.dsc
 df01bd42af361978d9de7de8529718bcafe01897a544a7650139a1954c55bdfe 4563163 curl_7.47.0.orig.tar.gz
 7646a9eab6b0f13601931bbd7090aa37be93105ca80f1704ffdd86d545a87dc2 28652 curl_7.47.0-1ubuntu1.debian.tar.xz
Files:
 49301de4e6de142efa6472e8b3dd8608 2707 web optional curl_7.47.0-1ubuntu1.dsc
 5109d1232d208dfd712c0272b8360393 4563163 web optional curl_7.47.0.orig.tar.gz
 719eab2b27cd91604d5b5a2e6611ec1e 28652 web optional curl_7.47.0-1ubuntu1.debian.tar.xz
Original-Maintainer: Alessandro Ghedini <ghedo at debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=dR5i
-----END PGP SIGNATURE-----