[ubuntu/saucy-proposed] curl 7.30.0-1ubuntu1 (Accepted)

[Sebastien Bacher]

curl (7.30.0-1ubuntu1) saucy; urgency=low

  * Resynchronize on Debian. Remaining changes:
    - Drop dependencies not in main:
      + Build-Depends: Drop stunnel4 and libssh2-1-dev.
      + Drop libssh2-1-dev from binary package Depends.
    - Add new libcurl3-udeb package.
    - Add new curl-udeb package.
  * Add warning to debian/patches/series.

curl (7.30.0-1) unstable; urgency=low

  * New upstream release
  * Update upstream copyright years
  * Drop patches merged upstream:
    - 08_NULL-pointer-dereference-on-close.patch
    - 09_CVE-213-1944.patch
    - 10_test1218-another-cookie-tailmatch-test.patch
  * Update patches:
    - 03_keep_symbols_compat.patch
    - 90_gnutls.patch
    - 99_nss.patch
  * Add libcurl4-doc package:
    - Move *.pdf and *.html files to the libcurl4-doc package
    - Add Suggests for -doc package to -dev packages
    - Move examples to the -doc package
  * Add Build-Depends on python which is used by some tests

curl (7.29.0-2.1) unstable; urgency=high

  * Non-maintainer upload.

  [ Alessandro Ghedini ]
  * Do not compress *.pdf files (Closes: #704093)

  [ Salvatore Bonaccorso ]
  * Add 09_CVE-213-1944.patch.
    Fix CVE-2013-1944: fix tailmatching to prevent cross-domain leakage.
    Cookies set for 'example.com' could accidentaly also be sent by libcurl
    to the 'bexample.com' (ie with a prefix to the first domain name).
    (Closes: #705274)
  * Add testcase for CVE-2013-1944.

curl (7.29.0-2) unstable; urgency=low

  * Fix a segfault when closing an unused multi handle (Closes: #701713)
  * Mention LDAPS in packages' long descriptions
  * Clean-up d/rules
    - Switch to short-form dh
    - Enable test suite on hurd and kfreebsd too
    - Enable GSSAPI support on hurd too

Date: Tue, 07 May 2013 12:16:37 +0200
Changed-By: Sebastien Bacher <seb128 at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/saucy/+source/curl/7.30.0-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Tue, 07 May 2013 12:16:37 +0200
Source: curl
Binary: curl curl-udeb libcurl3 libcurl3-udeb libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc
Architecture: source
Version: 7.30.0-1ubuntu1
Distribution: saucy
Urgency: high
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Sebastien Bacher <seb128 at ubuntu.com>
Description: 
 curl       - command line tool for transferring data with URL syntax
 curl-udeb  - Get a file from an HTTP, HTTPS or FTP server (udeb)
 libcurl3   - easy-to-use client-side URL transfer library (OpenSSL flavour)
 libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours)
 libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour)
 libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour)
 libcurl3-udeb - Multi-protocol file transfer library (OpenSSL) (udeb)
 libcurl4-doc - documentation for libcurl
 libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour)
 libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour)
 libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour)
Closes: 701713 704093 705274
Changes: 
 curl (7.30.0-1ubuntu1) saucy; urgency=low
 .
   * Resynchronize on Debian. Remaining changes:
     - Drop dependencies not in main:
       + Build-Depends: Drop stunnel4 and libssh2-1-dev.
       + Drop libssh2-1-dev from binary package Depends.
     - Add new libcurl3-udeb package.
     - Add new curl-udeb package.
   * Add warning to debian/patches/series.
 .
 curl (7.30.0-1) unstable; urgency=low
 .
   * New upstream release
   * Update upstream copyright years
   * Drop patches merged upstream:
     - 08_NULL-pointer-dereference-on-close.patch
     - 09_CVE-213-1944.patch
     - 10_test1218-another-cookie-tailmatch-test.patch
   * Update patches:
     - 03_keep_symbols_compat.patch
     - 90_gnutls.patch
     - 99_nss.patch
   * Add libcurl4-doc package:
     - Move *.pdf and *.html files to the libcurl4-doc package
     - Add Suggests for -doc package to -dev packages
     - Move examples to the -doc package
   * Add Build-Depends on python which is used by some tests
 .
 curl (7.29.0-2.1) unstable; urgency=high
 .
   * Non-maintainer upload.
 .
   [ Alessandro Ghedini ]
   * Do not compress *.pdf files (Closes: #704093)
 .
   [ Salvatore Bonaccorso ]
   * Add 09_CVE-213-1944.patch.
     Fix CVE-2013-1944: fix tailmatching to prevent cross-domain leakage.
     Cookies set for 'example.com' could accidentaly also be sent by libcurl
     to the 'bexample.com' (ie with a prefix to the first domain name).
     (Closes: #705274)
   * Add testcase for CVE-2013-1944.
 .
 curl (7.29.0-2) unstable; urgency=low
 .
   * Fix a segfault when closing an unused multi handle (Closes: #701713)
   * Mention LDAPS in packages' long descriptions
   * Clean-up d/rules
     - Switch to short-form dh
     - Enable test suite on hurd and kfreebsd too
     - Enable GSSAPI support on hurd too
Checksums-Sha1: 
 a64126023ed4fd44e9fd82d76029d40ac3acbbe8 2122 curl_7.30.0-1ubuntu1.dsc
 792fcf6473c3bbeb344dea1d64c7ff65731c1be5 3329809 curl_7.30.0.orig.tar.gz
 01242fcd5d17dd91a265581fc9186657361e793c 29639 curl_7.30.0-1ubuntu1.debian.tar.gz
Checksums-Sha256: 
 59ec57a77809f95f3549895937c1326c806afcb18e88451381d6f7ab4fcc0924 2122 curl_7.30.0-1ubuntu1.dsc
 361669c3c4b9baa5343e7e83bce695e60683d0b97b402e664bbaed42c15e95a8 3329809 curl_7.30.0.orig.tar.gz
 3aa586bd67c70d9f5f3ee8d2b6e30fee2ce0c4818b990d3743bf59de81d31243 29639 curl_7.30.0-1ubuntu1.debian.tar.gz
Files: 
 ae6ec88f86cbeaa1c2fe5f21acb62e52 2122 web optional curl_7.30.0-1ubuntu1.dsc
 60bb6ff558415b73ba2f00163fd307c5 3329809 web optional curl_7.30.0.orig.tar.gz
 e7b9d85cd37183a7bf0dabc139a90746 29639 web optional curl_7.30.0-1ubuntu1.debian.tar.gz
Original-Maintainer: Alessandro Ghedini <ghedo at debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlGI478ACgkQQxo87aLX0pKFFwCeMVbG8j/5siOA4gpYK/W4OZDh
cgEAoNmFiPaumlNKB9zpzywG75uskRnU
=tgri
-----END PGP SIGNATURE-----