[ubuntu/quantal] curl 7.25.0-1ubuntu1 (Accepted)

Andres Rodriguez andreserl at ubuntu.com
Tue May 22 19:50:29 UTC 2012


curl (7.25.0-1ubuntu1) quantal; urgency=low

  * Merge from Debian testing (LP: #1003049).  Remaining changes:
    - Drop dependencies not in main:
      + Build-Depends: Drop stunnel4 and libssh2-1-dev.
      + Drop libssh2-1-dev from libcurl4-openssl-dev's Depends.
    - Add new libcurl3-udeb package.
    - Add new curl-udeb package.
    - Also closes (LP: #855291)
  * debian/patches/CVE-2012-0036.patch: Dropped. CVE resolved upstream.

curl (7.25.0-1) unstable; urgency=low

  * New upstream release
    - Add --ssl-allow-beast and CURLOPT_SSL_OPTIONS (Closes: #658276)
    - Allow negative numbers as option value (Closes: #659591)
  * Add libssh2-1-dev to libcurl4-gnutls-dev and libcurl4-nss-dev Depends
  * Bump debhelper compat level to 9
    - Make *.links files executable to simplify rules file
  * Pass --as-needed ld flag to avoid unneeded dependencies
    - Add workaround_as_needed_bug to workaround a libtool bug
    - Drop dont_link_to_krb5 (not needed because of --as-needed)
  * Do some clean-up in debian/rules
  * Update debian/copyright format as in Debian Policy 3.9.3
  * Bump Standards-Version to 3.9.3
  * Explicit Conflicts in -dev packages (fixes binaries-have-file-conflict)
  * Add openssh-server to build depends to enable some more tests
  * Update upstream copyright years
  * Refresh patches

curl (7.24.0-1) unstable; urgency=high

  * New upstream release
    - Improve documentation for the --capath option (Closes: #628697)
    - Fix URL sanitization vulnerability as per CVE-2012-0036
      http://curl.haxx.se/docs/adv_20120124.html
    - Fix SSL CBC IV vulnerability as per CVE-2011-3389
      http://curl.haxx.se/docs/adv_20120124B.html
    - Set urgency=high accordingly
  * Remove curl_links_with_rt patch (curl links to librt anyway)
  * Improve descriptions of -dev and -dbg packages
  * Drop fix_manpage_spelling and versioned patches (merged upstream)
  * Refresh patches
  * Add keep_symbols_compat patch to not break backwards ABI compatibility
  * Enable libssh2 support for GnuTLS and NSS flavours too
    (libssh2 now uses libgcrypt instead of libssl)

curl (7.23.1-3) unstable; urgency=low

  * Enable security hardening flags
  * Remove libdb-dev from B-D (not used)
  * Improve short and  long descriptions
  * Provide proper *.symbols files (Closes: #651619)
  * Do not version Curl_* symbols (for internal use only)
  * Do not override dh_makeshlibs version anymore

curl (7.23.1-2) unstable; urgency=low

  * Bump shlibs version for libcurl3-nss (Closes: #650498)

curl (7.23.1-1) unstable; urgency=low

  * New upstream release
    - Do not use gnutls_priority_set_direct and
      gnutls_certificate_type_set_priority anymore (Closes: #624024)
  * Refresh patches
  * Add --enable-debug flag to configure (Closes: #648902)
  * One Provides/Replaces per line
  * libcurl4-openssl-dev Provides libcurl4-dev too (Closes: #644126)
  * Specify only 3 components for Standards-Version
    (the fourth is not really needed)
  * Move ca-certificates to Recommends in lib* packages (Closes: #546607)
  * Add NSS flavour to versioned symbols

Date: Tue, 22 May 2012 14:53:29 -0400
Changed-By: Andres Rodriguez <andreserl at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/quantal/+source/curl/7.25.0-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 22 May 2012 14:53:29 -0400
Source: curl
Binary: curl curl-udeb libcurl3 libcurl3-udeb libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg
Architecture: source
Version: 7.25.0-1ubuntu1
Distribution: quantal
Urgency: high
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Andres Rodriguez <andreserl at ubuntu.com>
Description: 
 curl       - command line tool for transferring data with URL syntax
 curl-udeb  - Get a file from an HTTP, HTTPS or FTP server (udeb)
 libcurl3   - easy-to-use client-side URL transfer library (OpenSSL flavour)
 libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours)
 libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour)
 libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour)
 libcurl3-udeb - Multi-protocol file transfer library (OpenSSL) (udeb)
 libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour)
 libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour)
 libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour)
Closes: 546607 624024 628697 644126 648902 650498 651619 658276 659591
Launchpad-Bugs-Fixed: 855291 1003049
Changes: 
 curl (7.25.0-1ubuntu1) quantal; urgency=low
 .
   * Merge from Debian testing (LP: #1003049).  Remaining changes:
     - Drop dependencies not in main:
       + Build-Depends: Drop stunnel4 and libssh2-1-dev.
       + Drop libssh2-1-dev from libcurl4-openssl-dev's Depends.
     - Add new libcurl3-udeb package.
     - Add new curl-udeb package.
     - Also closes (LP: #855291)
   * debian/patches/CVE-2012-0036.patch: Dropped. CVE resolved upstream.
 .
 curl (7.25.0-1) unstable; urgency=low
 .
   * New upstream release
     - Add --ssl-allow-beast and CURLOPT_SSL_OPTIONS (Closes: #658276)
     - Allow negative numbers as option value (Closes: #659591)
   * Add libssh2-1-dev to libcurl4-gnutls-dev and libcurl4-nss-dev Depends
   * Bump debhelper compat level to 9
     - Make *.links files executable to simplify rules file
   * Pass --as-needed ld flag to avoid unneeded dependencies
     - Add workaround_as_needed_bug to workaround a libtool bug
     - Drop dont_link_to_krb5 (not needed because of --as-needed)
   * Do some clean-up in debian/rules
   * Update debian/copyright format as in Debian Policy 3.9.3
   * Bump Standards-Version to 3.9.3
   * Explicit Conflicts in -dev packages (fixes binaries-have-file-conflict)
   * Add openssh-server to build depends to enable some more tests
   * Update upstream copyright years
   * Refresh patches
 .
 curl (7.24.0-1) unstable; urgency=high
 .
   * New upstream release
     - Improve documentation for the --capath option (Closes: #628697)
     - Fix URL sanitization vulnerability as per CVE-2012-0036
       http://curl.haxx.se/docs/adv_20120124.html
     - Fix SSL CBC IV vulnerability as per CVE-2011-3389
       http://curl.haxx.se/docs/adv_20120124B.html
     - Set urgency=high accordingly
   * Remove curl_links_with_rt patch (curl links to librt anyway)
   * Improve descriptions of -dev and -dbg packages
   * Drop fix_manpage_spelling and versioned patches (merged upstream)
   * Refresh patches
   * Add keep_symbols_compat patch to not break backwards ABI compatibility
   * Enable libssh2 support for GnuTLS and NSS flavours too
     (libssh2 now uses libgcrypt instead of libssl)
 .
 curl (7.23.1-3) unstable; urgency=low
 .
   * Enable security hardening flags
   * Remove libdb-dev from B-D (not used)
   * Improve short and  long descriptions
   * Provide proper *.symbols files (Closes: #651619)
   * Do not version Curl_* symbols (for internal use only)
   * Do not override dh_makeshlibs version anymore
 .
 curl (7.23.1-2) unstable; urgency=low
 .
   * Bump shlibs version for libcurl3-nss (Closes: #650498)
 .
 curl (7.23.1-1) unstable; urgency=low
 .
   * New upstream release
     - Do not use gnutls_priority_set_direct and
       gnutls_certificate_type_set_priority anymore (Closes: #624024)
   * Refresh patches
   * Add --enable-debug flag to configure (Closes: #648902)
   * One Provides/Replaces per line
   * libcurl4-openssl-dev Provides libcurl4-dev too (Closes: #644126)
   * Specify only 3 components for Standards-Version
     (the fourth is not really needed)
   * Move ca-certificates to Recommends in lib* packages (Closes: #546607)
   * Add NSS flavour to versioned symbols
Checksums-Sha1: 
 c5c51f9b8091a1c6254bd5829041be94b5b92eca 2740 curl_7.25.0-1ubuntu1.dsc
 5711ab08be96910b5ad8354a4331b17ffdd5876d 3064610 curl_7.25.0.orig.tar.gz
 d9ca4655887bbcd3e6908d44e02d080c2d4220a3 29952 curl_7.25.0-1ubuntu1.debian.tar.gz
Checksums-Sha256: 
 ff5513c4657698c84e32a345b235229342e9e442755c2b052fcd8cf5d0d00cd7 2740 curl_7.25.0-1ubuntu1.dsc
 622d571aac4f0176890bd79cc62dbd217e3e3a8997de6ded229024fe39ce635f 3064610 curl_7.25.0.orig.tar.gz
 c1d84ea3a79612e38c86ac814deb2b13cf935639cef5ad8e212df1a2d3938784 29952 curl_7.25.0-1ubuntu1.debian.tar.gz
Files: 
 b224cc7300224af434f24f5d01a9a51d 2740 web optional curl_7.25.0-1ubuntu1.dsc
 a56cbe2778b09769f8a5ba17d8f4d92a 3064610 web optional curl_7.25.0.orig.tar.gz
 f8c1c24b011914c1cd4920aa91affe7f 29952 web optional curl_7.25.0-1ubuntu1.debian.tar.gz
Original-Maintainer: Ramakrishnan Muthukrishnan <rkrishnan at debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=0zog
-----END PGP SIGNATURE-----


More information about the Quantal-changes mailing list