diff -Nru curl-7.21.2/debian/changelog curl-7.21.2/debian/changelog --- curl-7.21.2/debian/changelog 2010-12-09 17:21:03.000000000 +0100 +++ curl-7.21.2/debian/changelog 2010-12-28 20:46:54.000000000 +0100 @@ -1,3 +1,14 @@ +curl (7.21.2-4ubuntu1) natty; urgency=low + + * Merge from debian unstable. Remaining changes: (LP: #693635, #637416) + - debian/control: + + Build-Depends: Replace libssh2-1-dev with openssh-server. + Drop stunnel since it's in universe, as well. + + Drop libssh2-1-dev from libcurl4-openssl-dev's Depends. + Above changes are necessary to be independent from the universe. + + -- Artur Rona Thu, 23 Dec 2010 01:42:41 +0100 + curl (7.21.2-4) unstable; urgency=low * support for curl library built against nss. @@ -25,18 +36,49 @@ -- Ramakrishnan Muthukrishnan Tue, 30 Nov 2010 17:35:29 +0530 +curl (7.21.2-1ubuntu1) natty; urgency=low + + * Merge with Debian unstable, remaining Ubuntu changes: (LP: #682286) + * debian/control: + - (Keep build deps in main) + - Drop build dependencies: stunnel, libssh2-1-dev + - Add build-dependency on openssh-server + - Drop libssh2-1-dev from libcurl4-openssl-dev's Depends. + + -- Robert Ancell Mon, 29 Nov 2010 17:26:37 +1100 + curl (7.21.2-1) unstable; urgency=low * New upstream release. -- Ramakrishnan Muthukrishnan Mon, 18 Oct 2010 11:13:17 +0530 +curl (7.21.1-1ubuntu1) natty; urgency=low + + * Merge from debian unstable. Remaining changes: + - Keep build deps in main: + - Drop build dependencies: stunnel, libssh2-1-dev + - Add build-dependency on openssh-server + - Drop libssh2-1-dev from libcurl4-openssl-dev's Depends. + + -- Matthias Klose Thu, 07 Oct 2010 16:53:40 +0200 + curl (7.21.1-1) unstable; urgency=low * New upstream release. -- Ramakrishnan Muthukrishnan Thu, 12 Aug 2010 08:20:48 +0530 +curl (7.21.0-1ubuntu1) maverick; urgency=low + + * Merge from debian unstable. Remaining changes: LP: #596334 + - Keep build deps in main: + - Drop build dependencies: stunnel, libssh2-1-dev + - Add build-dependency on openssh-server + - Drop libssh2-1-dev from libcurl4-openssl-dev's Depends. + + -- Bhavani Shankar Sun, 20 Jun 2010 13:56:28 +0530 + curl (7.21.0-1) unstable; urgency=low * New upstream. @@ -92,6 +134,16 @@ -- Domenico Andreoli Tue, 09 Feb 2010 13:06:39 +0100 +curl (7.19.7-1ubuntu1) lucid; urgency=low + + * Merge with Debian testing. Remaining changes: + - Keep build deps in main: + - Drop build dependencies: stunnel, libdb4.6-dev, libssh2-1-dev + - Add build-dependency on openssh-server + - Drop libssh2-1-dev from libcurl4-openssl-dev's Depends. + + -- Kees Cook Fri, 11 Dec 2009 19:33:21 -0800 + curl (7.19.7-1) unstable; urgency=low * New upstream release: @@ -102,6 +154,25 @@ -- Domenico Andreoli Thu, 05 Nov 2009 10:11:57 +0100 +curl (7.19.5-1ubuntu2) karmic; urgency=low + + * SECURITY UPDATE: SSL cert hostname checking bypass with NULL byte. + - add debian/patches/cert-null-cn: backported upstream changes. + - CVE-2009-2417 + + -- Kees Cook Thu, 13 Aug 2009 14:32:50 -0700 + +curl (7.19.5-1ubuntu1) karmic; urgency=low + + * Merge from Debian unstable (LP: #380281), remaining changes: + - Drop build dependencies: stunnel, libdb4.6-dev, libssh2-1-dev + - Add build-dependency on openssh-server + - Drop libssh2-1-dev from libcurl4-openssl-dev's Depends. + - Call automake-1.9 with --add-missing --copy --force + * Fixes LP: #379477 + + -- Bhavani Shankar Tue, 26 May 2009 18:58:51 +0530 + curl (7.19.5-1) unstable; urgency=low * New upstream release @@ -113,6 +184,18 @@ -- Andreas Schuldei Sun, 24 May 2009 21:12:19 +0200 +curl (7.19.4-1ubuntu1) karmic; urgency=low + + * Merge from debian unstable, remaining changes: + - Drop build dependencies: stunnel, libdb4.6-dev, libssh2-1-dev + - Add build-dependency on openssh-server + - Drop libssh2-1-dev from libcurl4-openssl-dev's Depends. + - Call automake-1.9 with --add-missing --copy --force + * drop debian/patches/security_CVE-2009-0037.patch + - this patch is part of 7.19.4 + + -- Michael Vogt Wed, 29 Apr 2009 11:10:29 +0200 + curl (7.19.4-1) unstable; urgency=low * New upstream release @@ -124,6 +207,42 @@ -- Andreas Schuldei Thu, 02 Apr 2009 23:35:45 +0200 +curl (7.18.2-8ubuntu4) jaunty; urgency=low + + * SECURITY UPDATE: add fix for CVE-2009-0037 back in + - debian/patches/security_CVE-2009-0037.patch: updated patch to add missing + section to lib/easy.c + - CVE-2009-0037 + + -- Marc Deslauriers Tue, 03 Mar 2009 19:58:20 -0500 + +curl (7.18.2-8ubuntu3) jaunty; urgency=low + + * Revert last patch due to https regression (LP: #337501) + + -- Jamie Strandboge Tue, 03 Mar 2009 17:57:35 -0600 + +curl (7.18.2-8ubuntu2) jaunty; urgency=low + + * SECURITY UPDATE: Local file exposure via redirect + - debian/patches/security_CVE-2009-0037.patch: add logic to lib/url.c and + lib/urldata.h to limit what protocols curl will automatically follow via a + redirect. By default, it now follows all protocols except FILE and SCP. + - CVE-2009-0037 + + -- Marc Deslauriers Tue, 03 Mar 2009 16:27:30 -0500 + +curl (7.18.2-8ubuntu1) jaunty; urgency=low + + * Merge from debian unstable, remaining changes: LP: #314279 + - Drop the stunnel build dependency. + - Drop the build-dependency on libdb4.5-dev + - Add build-dependency on openssh-server + - Call automake-1.9 with --add-missing --copy --force. + - Drop libssh2-1-dev from libcurl4-openssl-dev's Depends. + + -- Bhavani Shankar Tue, 06 Jan 2009 12:16:22 +0530 + curl (7.18.2-8lenny1) stable-security; urgency=high * Applied upstream patch to fix arbitrary file access (CVE-2009-0037). @@ -137,6 +256,26 @@ -- Andreas Schuldei Fri, 26 Dec 2008 23:48:19 +0100 +curl (7.18.2-7ubuntu2) jaunty; urgency=low + + * drop change: + - "Added Recommends: on ca-certificate for curl package", libcurl3 + has a depends on ca-certificates already + + -- Michael Vogt Mon, 10 Nov 2008 13:08:07 +0100 + +curl (7.18.2-7ubuntu1) jaunty; urgency=low + + * Merge from debian unstable, remaining changes: + - Drop the stunnel build dependency. + - Drop the build-dependency on libdb4.5-dev + - Add build-dependency on openssh-server + - Drop libssh2-1-dev from libcurl4-openssl-dev's Depends. + - Call automake-1.9 with --add-missing --copy --force + - Added Recommends: on ca-certificate for curl package + + -- Michael Vogt Mon, 10 Nov 2008 12:55:54 +0100 + curl (7.18.2-7) unstable; urgency=low * disable c-ares support again, no fix yet, just get stuff working again. @@ -180,6 +319,34 @@ -- Andreas Schuldei Fri, 27 Jun 2008 03:40:18 +0200 +curl (7.18.2-1ubuntu4) intrepid; urgency=low + + * Added Recommends: on ca-certificate for curl package (LP: #152781). + + -- Nick Ellery Fri, 10 Oct 2008 23:32:54 -0700 + +curl (7.18.2-1ubuntu3) intrepid; urgency=low + + * Call automake-1.9 with --add-missing --copy --force. (LP: #281561) + + -- Steve Kowalik Sat, 11 Oct 2008 15:10:30 +1100 + +curl (7.18.2-1ubuntu2) intrepid; urgency=low + + * No-change rebuild for libgnutls13 -> libgnutls26 transistion. + + -- Steve Kowalik Sat, 11 Oct 2008 01:28:05 +1100 + +curl (7.18.2-1ubuntu1) intrepid; urgency=low + + * Merge from debian unstable, remaining changes: + - Drop the stunnel build dependency. + - Drop the build-dependency on libdb4.5-dev + - Add build-dependency on openssh-server + - Drop libssh2-1-dev from libcurl4-openssl-dev's Depends. + + -- Michael Vogt Wed, 18 Jun 2008 15:21:57 +0200 + curl (7.18.2-1e1) experimental; urgency=low * testing c-ares-ipv6 integration patch @@ -214,6 +381,22 @@ -- Domenico Andreoli Thu, 17 Apr 2008 10:22:28 +0200 +curl (7.18.0-1ubuntu2) hardy; urgency=low + + * Use automake-1.9, as used by upstream. + + -- Matthias Klose Fri, 08 Feb 2008 13:24:07 +0000 + +curl (7.18.0-1ubuntu1) hardy; urgency=low + + * Merge from Debian; remaining changes: + - Drop the stunnel build dependency. + - Drop the build-dependency on libdb4.5-dev, add build-dependency on + openssh-server. + - Drop libssh2-1-dev from libcurl4-openssl-dev's Depends. + + -- Matthias Klose Fri, 08 Feb 2008 11:20:41 +0000 + curl (7.18.0-1) unstable; urgency=low * New upstream release. @@ -221,6 +404,33 @@ -- Domenico Andreoli Tue, 29 Jan 2008 02:16:25 +0100 +curl (7.17.1-1ubuntu4) hardy; urgency=low + + * No-change rebuild against libldap-2.4-2. + + -- Steve Langasek Tue, 22 Jan 2008 17:17:51 +0000 + +curl (7.17.1-1ubuntu3) hardy; urgency=low + + * And drop libssh2-1-dev from libcurl4-openssl-dev's Depends. + + -- Steve Kowalik Fri, 21 Dec 2007 00:55:12 +1100 + +curl (7.17.1-1ubuntu2) hardy; urgency=low + + * Drop libssh2-1-dev (universe) from Build-Depends (LP: #175891). + + -- Michael Bienia Wed, 12 Dec 2007 16:27:27 +0100 + +curl (7.17.1-1ubuntu1) hardy; urgency=low + + * Merge with Debian; remaining changes: + - Drop the stunnel build dependency. + * Drop the build-dependency on libdb4.5-dev, add build-dependency on + openssh-server. + + -- Matthias Klose Tue, 04 Dec 2007 01:09:30 +0100 + curl (7.17.1-1) unstable; urgency=low * New upstream release: @@ -259,6 +469,13 @@ -- Domenico Andreoli Wed, 22 Aug 2007 00:48:32 +0200 +curl (7.16.4-2ubuntu1) gutsy; urgency=low + + * Merge with Debian; remaining changes: + - Drop the stunnel build dependency. + + -- Matthias Klose Thu, 09 Aug 2007 09:16:47 +0200 + curl (7.16.4-2) unstable; urgency=low * Fixed regression with FTP sites not requesting PASS (closes: #435771). @@ -273,6 +490,44 @@ -- Domenico Andreoli Wed, 18 Jul 2007 16:44:30 +0200 +curl (7.16.2-6ubuntu5) gutsy; urgency=low + + * Added debian/patches/gnutls-verifications: actually perform expiration + and activation verifications (CVE-2007-3564). + + -- Kees Cook Wed, 27 Jun 2007 12:16:00 -0700 + +curl (7.16.2-6ubuntu4) gutsy; urgency=low + + * Completly revert the two previous changes - libcurl's symbols are + versioned. + + -- Steve Kowalik Wed, 4 Jul 2007 18:25:14 +1000 + +curl (7.16.2-6ubuntu3) gutsy; urgency=low + + * Add Conflicts and Replaces on older versions of libcurl4{,-gnutls} for + libcurl3{,-gnutls} so that upgrades don't blow up. + + -- Steve Kowalik Wed, 4 Jul 2007 11:56:50 +1000 + +curl (7.16.2-6ubuntu2) gutsy; urgency=low + + * Provide two transitional packages, libcurl4 and libcurl4-gnutls that + depend on their libcurl3 counterparts. + * Stop libcurl3 and libcurl3-gnutls Conflicting and Providing their + libcurl4 counterparts. + + -- Steve Kowalik Tue, 3 Jul 2007 19:03:20 +1000 + +curl (7.16.2-6ubuntu1) gutsy; urgency=low + + * Merge from Debian unstable + * Remaining Ubuntu changes: + - Drop the stunnel build dependency. + + -- Steve Kowalik Tue, 3 Jul 2007 01:16:24 +1000 + curl (7.16.2-6) unstable; urgency=low * Added missing libcurl3 symlinks (closes: #429945) @@ -280,6 +535,14 @@ -- Domenico Andreoli Sat, 23 Jun 2007 00:39:20 +0200 +curl (7.16.2-5ubuntu1) gutsy; urgency=low + + * Merge from Debian unstable + * Remaining Ubuntu changes: + - Drop the stunnel build dependency. + + -- Steve Kowalik Mon, 2 Jul 2007 22:38:33 +1000 + curl (7.16.2-5) unstable; urgency=low [ Steve Langasek ] @@ -294,6 +557,13 @@ -- Domenico Andreoli Wed, 20 Jun 2007 17:52:38 +0200 +curl (7.16.2-4ubuntu1) gutsy; urgency=low + + * Merge with Debian; remaining changes: + - Drop the stunnel build dependency. + + -- Matthias Klose Mon, 11 Jun 2007 19:02:21 +0200 + curl (7.16.2-4) unstable; urgency=low * Fixed configure.ac in case of build with GNUTLS (closes: #425013). @@ -302,6 +572,13 @@ -- Domenico Andreoli Sun, 20 May 2007 01:15:01 +0200 +curl (7.16.2-3ubuntu1) gutsy; urgency=low + + * Merge with Debian; remaining changes: + - Drop the stunnel build dependency. + + -- Matthias Klose Wed, 16 May 2007 15:16:54 +0200 + curl (7.16.2-3) unstable; urgency=low * Updated to db4.5 (closes: #421933). @@ -351,6 +628,20 @@ -- Domenico Andreoli Fri, 26 Jan 2007 14:26:55 +0100 +curl (7.15.5-1ubuntu2) feisty; urgency=low + + * Rebuild for changes in the amd64 toolchain. + * Set Ubuntu maintainer address. + + -- Matthias Klose Mon, 5 Mar 2007 01:14:05 +0000 + +curl (7.15.5-1ubuntu1) feisty; urgency=low + + * Merge from debian unstable. Remaining Ubuntu changes: + - debian/control: Drop libdb4.2 build dependency. + + -- Martin Pitt Mon, 30 Oct 2006 10:56:48 +0100 + curl (7.15.5-1) unstable; urgency=low * New upstream release: diff -Nru curl-7.21.2/debian/control curl-7.21.2/debian/control --- curl-7.21.2/debian/control 2010-12-09 17:21:03.000000000 +0100 +++ curl-7.21.2/debian/control 2010-12-23 02:08:01.000000000 +0100 @@ -1,8 +1,9 @@ Source: curl Section: web Priority: optional -Maintainer: Ramakrishnan Muthukrishnan -Build-Depends: debhelper (>> 5), autoconf, libtool, automake1.9, binutils (>= 2.14.90.0.7), libssl-dev, libgnutls-dev, libnss3-dev, zlib1g-dev, stunnel, libkrb5-dev [!hurd-i386], libidn11-dev, groff-base, libdb-dev (>= 4.7), libldap2-dev, quilt, libssh2-1-dev (>= 1.2), libgcrypt11-dev +Maintainer: Ubuntu Developers +XSBC-Original-Maintainer: Ramakrishnan Muthukrishnan +Build-Depends: debhelper (>> 5), autoconf, libtool, automake1.9, binutils (>= 2.14.90.0.7), libssl-dev, libgnutls-dev, libnss3-dev, zlib1g-dev, libkrb5-dev [!hurd-i386], libidn11-dev, groff-base, libdb-dev (>= 4.7), libldap2-dev, quilt, openssh-server, libgcrypt11-dev Build-Conflicts: autoconf2.13, automake1.4 Standards-Version: 3.9.1 Vcs-Browser: http://git.debian.org/?p=collab-maint/curl.git @@ -72,7 +73,7 @@ Provides: libcurl-dev, libcurl-ssl-dev, libcurl3-openssl-dev, libcurl3-dev Replaces: libcurl-dev, libcurl-ssl-dev, libcurl3-openssl-dev, libcurl3-dev (<< 7.14.1-1) Conflicts: libcurl-dev -Depends: libcurl3 (= ${binary:Version}), libc6-dev | libc-dev, libssl-dev, zlib1g-dev, libidn11-dev, libkrb5-dev | hurd, libssh2-1-dev, libldap2-dev, ${misc:Depends} +Depends: libcurl3 (= ${binary:Version}), libc6-dev | libc-dev, libssl-dev, zlib1g-dev, libidn11-dev, libkrb5-dev | hurd, libldap2-dev, ${misc:Depends} Description: Development files and documentation for libcurl (OpenSSL) These files (ie. includes, static library, manual pages) allow to build software which uses libcurl.