libcurl3-gnutls update appears to break https for apt-get

[Rick McBride]

Binary package hint: libcurl3-gnutls

Description: Ubuntu 8.10
Release: 8.10

libcurl3-gnutls:
  Installed: 7.18.2-1ubuntu4.1
  Candidate: 7.18.2-1ubuntu4.1
  Version table:
 *** 7.18.2-1ubuntu4.1 0
        500 http://security.ubuntu.com intrepid-security/main Packages
        100 /var/lib/dpkg/status
     7.18.2-1ubuntu4 0
        500 http://us.archive.ubuntu.com intrepid/main Packages

Today's security update to libcurl3-gnutls has broken the ability to update package lists from deb sources of type/transport https.

after applying the update the following message is recieved on apt-get update (or similar)
"W: Failed to fetch https://someuser:/<email address hidden>/main/source/Sources.gz Protocol https not supported or disabled in libcurl"

if you go to /var/cache/apt/archives/ and install the old libcurl3-gnutls package, it will work again.

This is causing significant problem for projects/teams using https protected PPAs

[Launchpad Janitor (janitor)]

This bug was fixed in the package curl - 7.18.2-8ubuntu3

---------------
curl (7.18.2-8ubuntu3) jaunty; urgency=low

  * Revert last patch due to https regression (LP: #337501)

 -- Jamie Strandboge <email address hidden> Tue, 03 Mar 2009 17:57:35 -0600

[Kees Cook (kees)]

Thanks for the this report. We've confirmed the issue and are working on a reverted version that should be published shortly. Sorry for the error!

[Marc Deslauriers (mdeslaur)]

We just released an update to fix this issue.

http://www.ubuntu.com/usn/USN-726-2