[ubuntu/questing-proposed] curl 8.14.1-1ubuntu1 (Accepted)

[Ural Tunaboyu]

curl (8.14.1-1ubuntu1) questing; urgency=medium

  * Merge with Debian unstable (LP: #2113994). Remaining changes:
    - d/rules: use libssh2-dev as it is in main (LP #2076865)
    - d/{control,rules}: drop nghttp3 and ngtcp2 dependencies in universe
    - d/{control,rules}: do not use gnutls for the curl binary
    - debian/control: don't build-depend on python3-impacket and stunnel4 on i386

curl (8.14.1-1) unstable; urgency=medium

  * New upstream version 8.14.1
    - Fix CVE-2025-5399: WebSocket endless loop
  * d/p/multi_fix_add_handle_resizing: Drop patch, merged in 8.14.1

curl (8.14.0-1) unstable; urgency=medium

  * New upstream version 8.14.0
  * Drop vendored wcurl now that it's in the upstream tarball
  * d/copyright: Update for upstream moved files:
    - They were moved from lib/ to lib/curlx/:
       ~ lib/curlx/version_win32.c
       ~ lib/curlx/version_win32.h
       ~ lib/curlx/inet_pton.c
  * d/patches:
    - Refresh patches
    - ZZZgnutls-build.patch: Update to also work with tests/tunit makefile
    - multi_fix_add_handle_resizing.patch: New patch to fix regression
    - Drop patches merged upstream:
      ~ autotools_install_shell_completion_files_on_cross_build.patch
      ~ scripts_completion_pl_sort_the_completion_file_for_all_shells.patch

Date: Wed, 11 Jun 2025 13:36:53 -0700
Changed-By: Ural Tunaboyu <ural.tunaboyu at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Nick Rosbrook <nick.rosbrook at canonical.com>
https://launchpad.net/ubuntu/+source/curl/8.14.1-1ubuntu1
-------------- next part --------------
Format: 1.8
Date: Wed, 11 Jun 2025 13:36:53 -0700
Source: curl
Built-For-Profiles: noudeb
Architecture: source
Version: 8.14.1-1ubuntu1
Distribution: questing
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Ural Tunaboyu <ural.tunaboyu at canonical.com>
Launchpad-Bugs-Fixed: 2113994
Changes:
 curl (8.14.1-1ubuntu1) questing; urgency=medium
 .
   * Merge with Debian unstable (LP: #2113994). Remaining changes:
     - d/rules: use libssh2-dev as it is in main (LP #2076865)
     - d/{control,rules}: drop nghttp3 and ngtcp2 dependencies in universe
     - d/{control,rules}: do not use gnutls for the curl binary
     - debian/control: don't build-depend on python3-impacket and stunnel4 on i386
 .
 curl (8.14.1-1) unstable; urgency=medium
 .
   * New upstream version 8.14.1
     - Fix CVE-2025-5399: WebSocket endless loop
   * d/p/multi_fix_add_handle_resizing: Drop patch, merged in 8.14.1
 .
 curl (8.14.0-1) unstable; urgency=medium
 .
   * New upstream version 8.14.0
   * Drop vendored wcurl now that it's in the upstream tarball
   * d/copyright: Update for upstream moved files:
     - They were moved from lib/ to lib/curlx/:
        ~ lib/curlx/version_win32.c
        ~ lib/curlx/version_win32.h
        ~ lib/curlx/inet_pton.c
   * d/patches:
     - Refresh patches
     - ZZZgnutls-build.patch: Update to also work with tests/tunit makefile
     - multi_fix_add_handle_resizing.patch: New patch to fix regression
     - Drop patches merged upstream:
       ~ autotools_install_shell_completion_files_on_cross_build.patch
       ~ scripts_completion_pl_sort_the_completion_file_for_all_shells.patch
Checksums-Sha1:
 91f78ad71383007a7506396831a1ef4bc8348f3c 3259 curl_8.14.1-1ubuntu1.dsc
 d84a4b8baf1baaca33e31e809f5e770deb727c2f 4250332 curl_8.14.1.orig.tar.gz
 c892a3257a40081f754b33e6a10eca2453860307 488 curl_8.14.1.orig.tar.gz.asc
 250d776e8ae6e05dc9d0c5b1333d771b001ff2ed 52916 curl_8.14.1-1ubuntu1.debian.tar.xz
 8f41b6757bf95a26042e7551c402b94435452a8d 9230 curl_8.14.1-1ubuntu1_source.buildinfo
Checksums-Sha256:
 76148bec3c103e73fc9d3208918f22b8df15f03e53aaec8b46679265f640666a 3259 curl_8.14.1-1ubuntu1.dsc
 6766ada7101d292b42b8b15681120acd68effa4a9660935853cf6d61f0d984d4 4250332 curl_8.14.1.orig.tar.gz
 39cc2ec8ddc39d04e3e7101bbed46d858d0875cbb297a6bfa20959fa2bc7d5c7 488 curl_8.14.1.orig.tar.gz.asc
 fc6cae34d751baa888741ea6ce3ae1ed711ef8f42184b7b94defcf1fa8599dea 52916 curl_8.14.1-1ubuntu1.debian.tar.xz
 92f18a0311c10ad8603866c3483c2cb5c191c36f67d9f86a30b1b07600496634 9230 curl_8.14.1-1ubuntu1_source.buildinfo
Files:
 029a9b938ca7302d1e71063c7a0e5aa5 3259 web optional curl_8.14.1-1ubuntu1.dsc
 745dfc1da8c44eb9ce6ede16fd102c32 4250332 web optional curl_8.14.1.orig.tar.gz
 e90da3c198bfec67be08392e2a974103 488 web optional curl_8.14.1.orig.tar.gz.asc
 ae6f30e81c2cd25b83ac5ee1bebfce4b 52916 web optional curl_8.14.1-1ubuntu1.debian.tar.xz
 227d4a8d3b56915253059aa7d9dd435e 9230 web optional curl_8.14.1-1ubuntu1_source.buildinfo
Original-Maintainer: Debian Curl Maintainers <team+curl at tracker.debian.org>
Vcs-Git: https://git.launchpad.net/~uralt/ubuntu/+source/curl
Vcs-Git-Commit: 7aa160190cf7b870a2eb647d94ce6d7ea852ff16
Vcs-Git-Ref: refs/heads/merge-lp2113994-questing