[ubuntu/resolute-proposed] curl 8.18.0-1ubuntu1 (Accepted)

Ural Tunaboyu ural.tunaboyu at canonical.com
Thu Jan 15 08:24:17 UTC 2026 

curl (8.18.0-1ubuntu1) resolute; urgency=medium

  * Merge with Debian unstable (LP: #2138401). Remaining changes:
    - d/{control,rules}: drop nghttp3 and ngtcp2 dependencies in universe
    - d/control: do not use gnutls for the curl binary
    - d/control: don't build-depend on python3-impacket and stunnel on i386

curl (8.18.0-1) unstable; urgency=medium

  * New upstream version 8.18.0
  * debian/control:
      - Bump stds-version to 4.7.3.
      - Remove Priority field, it already defaults to optional.
      - Remove Rules-Requires-Root, it already defaults to no.
  * debian/copyright: bump packaging copyright years, happy 2026!

curl (8.18.0~rc3-1) unstable; urgency=medium

  * New upstream version 8.18.0~rc3
  * Refresh patches
  * d/copyright: Remove entries for files removed upstream
  * Refresh patches:
     - ZZZgnutls-build.patch
     - build-Divide-mit-krb5-gssapi-link-flags-between-LDFLAGS-a.patch
  * d/copyright: Remove entries for files removed upstream:
     - lib/vtls/mbedtls_threadlock.c
     - lib/vtls/mbedtls_threadlock.h

curl (8.18.0~rc2-1) unstable; urgency=medium

  * New upstream version 8.18.0~rc2
  * d/copyright: Remove entries for files removed upstream
  * d/patches:
    - Drop patches merged upstream:
      ~ fix-progress-meter-in-parallel-mode.patch
      ~ wcurl-CVE-2025-11563.patch
    - Update patches:
      ~ ZZZgnutls-build.patch:
        + Variables AM_CFLAGS and AM_LDFLAGS were dropped
          in lib/Makefile.am
        + Update patch's context.
      ~ build-Divide-mit-krb5-gssapi-link-flags-between-LDFLAGS-a.patch:
        + Context update.
        + Update patch offset.
      ~ 11_omit-directories-from-config.patch:
        + Update for upstream usage of double quotes (replacing single quotes)
          for variables and usage of '&& test' instead of '-a' in
          curl-config.in.
  * d/libcurl4-doc.docs: Some docs were converted to .md:
    - docs/FAQ.md
    - docs/KNOWN_BUGS.md
    - docs/TODO.md

curl (8.17.0-3) unstable; urgency=medium

  * d/p/fix-progress-meter-in-parallel-mode.patch: cherry-pick from upstream.

curl (8.17.0-2) unstable; urgency=medium

  * d/p/wcurl-CVE-2025-11563.patch: Import new upstream patch to fix
    CVE-2025-11563

Date: Wed, 14 Jan 2026 11:47:19 -0800
Changed-By: Ural Tunaboyu <ural.tunaboyu at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Sebastien Bacher <sebastien.bacher at canonical.com>
https://launchpad.net/ubuntu/+source/curl/8.18.0-1ubuntu1
-------------- next part --------------
Format: 1.8
Date: Wed, 14 Jan 2026 11:47:19 -0800
Source: curl
Built-For-Profiles: noudeb
Architecture: source
Version: 8.18.0-1ubuntu1
Distribution: resolute
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Ural Tunaboyu <ural.tunaboyu at canonical.com>
Launchpad-Bugs-Fixed: 2138401
Changes:
 curl (8.18.0-1ubuntu1) resolute; urgency=medium
 .
   * Merge with Debian unstable (LP: #2138401). Remaining changes:
     - d/{control,rules}: drop nghttp3 and ngtcp2 dependencies in universe
     - d/control: do not use gnutls for the curl binary
     - d/control: don't build-depend on python3-impacket and stunnel on i386
 .
 curl (8.18.0-1) unstable; urgency=medium
 .
   * New upstream version 8.18.0
   * debian/control:
       - Bump stds-version to 4.7.3.
       - Remove Priority field, it already defaults to optional.
       - Remove Rules-Requires-Root, it already defaults to no.
   * debian/copyright: bump packaging copyright years, happy 2026!
 .
 curl (8.18.0~rc3-1) unstable; urgency=medium
 .
   * New upstream version 8.18.0~rc3
   * Refresh patches
   * d/copyright: Remove entries for files removed upstream
   * Refresh patches:
      - ZZZgnutls-build.patch
      - build-Divide-mit-krb5-gssapi-link-flags-between-LDFLAGS-a.patch
   * d/copyright: Remove entries for files removed upstream:
      - lib/vtls/mbedtls_threadlock.c
      - lib/vtls/mbedtls_threadlock.h
 .
 curl (8.18.0~rc2-1) unstable; urgency=medium
 .
   * New upstream version 8.18.0~rc2
   * d/copyright: Remove entries for files removed upstream
   * d/patches:
     - Drop patches merged upstream:
       ~ fix-progress-meter-in-parallel-mode.patch
       ~ wcurl-CVE-2025-11563.patch
     - Update patches:
       ~ ZZZgnutls-build.patch:
         + Variables AM_CFLAGS and AM_LDFLAGS were dropped
           in lib/Makefile.am
         + Update patch's context.
       ~ build-Divide-mit-krb5-gssapi-link-flags-between-LDFLAGS-a.patch:
         + Context update.
         + Update patch offset.
       ~ 11_omit-directories-from-config.patch:
         + Update for upstream usage of double quotes (replacing single quotes)
           for variables and usage of '&& test' instead of '-a' in
           curl-config.in.
   * d/libcurl4-doc.docs: Some docs were converted to .md:
     - docs/FAQ.md
     - docs/KNOWN_BUGS.md
     - docs/TODO.md
 .
 curl (8.17.0-3) unstable; urgency=medium
 .
   * d/p/fix-progress-meter-in-parallel-mode.patch: cherry-pick from upstream.
 .
 curl (8.17.0-2) unstable; urgency=medium
 .
   * d/p/wcurl-CVE-2025-11563.patch: Import new upstream patch to fix
     CVE-2025-11563
Checksums-Sha1:
 6f1ba90f61d2073504d67f114f863d078773ef10 3260 curl_8.18.0-1ubuntu1.dsc
 1a13070ccd2c5fe1d47cb34dd56138f69708f3f9 4182005 curl_8.18.0.orig.tar.gz
 7f7ce005ddf9339ce7ff7a59c347526c0cfccf4e 488 curl_8.18.0.orig.tar.gz.asc
 482b1f75a88ee097d9da81c12daa0e905d4e9237 55344 curl_8.18.0-1ubuntu1.debian.tar.xz
 91034b967e5185c9cb88b970045eb248a0d40dc6 10652 curl_8.18.0-1ubuntu1_source.buildinfo
Checksums-Sha256:
 a95f0b5e6c7b06da88a46946afd586ff5d94c61bdf95b9e7d8598fed62aad16a 3260 curl_8.18.0-1ubuntu1.dsc
 e9274a5f8ab5271c0e0e6762d2fce194d5f98acc568e4ce816845b2dcc0cf88f 4182005 curl_8.18.0.orig.tar.gz
 449692ee6cbadc99762d1daa86b3faf95d60f82b1d45ea1a33e37adda4bd194b 488 curl_8.18.0.orig.tar.gz.asc
 91e17b9c27b7a493823576da4804095bf727e08eb8d2997cde5f8061ea006a84 55344 curl_8.18.0-1ubuntu1.debian.tar.xz
 50341b56fd00b87d8fd546acf0b45d88bffef30ef6739e3b3cb9cd4aa1a2c3dd 10652 curl_8.18.0-1ubuntu1_source.buildinfo
Files:
 b4e86c6820bcc67bf0a2b377674cac1e 3260 web optional curl_8.18.0-1ubuntu1.dsc
 240a23f26602f24564468d9abecb32fd 4182005 web optional curl_8.18.0.orig.tar.gz
 18a4907c275b16ea8d281d8db2a27d09 488 web optional curl_8.18.0.orig.tar.gz.asc
 8b2ffe03f6c8f854cd7a5ef650e792e5 55344 web optional curl_8.18.0-1ubuntu1.debian.tar.xz
 eea8025ace52cb0e13554b60c45730a2 10652 web optional curl_8.18.0-1ubuntu1_source.buildinfo
Original-Maintainer: Debian Curl Maintainers <team+curl at tracker.debian.org>
Vcs-Git: https://git.launchpad.net/~seb128/ubuntu/+source/curl
Vcs-Git-Commit: 89378c26dec89bd59851f5ec55f3a2af3da93dac
Vcs-Git-Ref: refs/heads/merge-lp2138401-resolute

More information about the Resolute-changes mailing list