diff -pruN 7.88.1-10/debian/changelog 7.88.1-10ubuntu1/debian/changelog --- 7.88.1-10/debian/changelog 2023-05-18 22:43:40.000000000 +0000 +++ 7.88.1-10ubuntu1/debian/changelog 2023-05-19 06:46:54.000000000 +0000 @@ -1,3 +1,12 @@ +curl (7.88.1-10ubuntu1) mantic; urgency=low + + * Merge from Debian unstable. Remaining changes: + - Don't build-depend on python3-impacket on i386 so we can drop it + (and its dependencies) from the i386 partial port. It's only used for + the tests, which do not block the build in any case. + + -- Gianfranco Costamagna Fri, 19 May 2023 08:46:54 +0200 + curl (7.88.1-10) unstable; urgency=medium * Add new patches to fix CVEs (closes: #1036239): @@ -10,6 +19,15 @@ curl (7.88.1-10) unstable; urgency=mediu -- Samuel Henrique Thu, 18 May 2023 23:43:40 +0100 +curl (7.88.1-9ubuntu1) mantic; urgency=low + + * Merge from Debian unstable. Remaining changes: + - Don't build-depend on python3-impacket on i386 so we can drop it + (and its dependencies) from the i386 partial port. It's only used for + the tests, which do not block the build in any case. + + -- Gianfranco Costamagna Tue, 02 May 2023 08:47:52 +0200 + curl (7.88.1-9) unstable; urgency=medium [ Sergio Durigan Junior ] @@ -24,6 +42,15 @@ curl (7.88.1-9) unstable; urgency=medium -- Samuel Henrique Sat, 15 Apr 2023 20:03:44 +0100 +curl (7.88.1-8ubuntu1) lunar; urgency=low + + * Merge from Debian unstable. Remaining changes: + - Don't build-depend on python3-impacket on i386 so we can drop it + (and its dependencies) from the i386 partial port. It's only used for + the tests, which do not block the build in any case. + + -- Gianfranco Costamagna Mon, 27 Mar 2023 07:50:29 +0200 + curl (7.88.1-8) unstable; urgency=medium [ Samuel Henrique ] @@ -37,6 +64,15 @@ curl (7.88.1-8) unstable; urgency=medium -- Samuel Henrique Sun, 26 Mar 2023 11:36:24 +0100 +curl (7.88.1-7ubuntu1) lunar; urgency=low + + * Merge from Debian unstable. Remaining changes: + - Don't build-depend on python3-impacket on i386 so we can drop it + (and its dependencies) from the i386 partial port. It's only used for + the tests, which do not block the build in any case. + + -- Gianfranco Costamagna Wed, 22 Mar 2023 11:51:25 +0100 + curl (7.88.1-7) unstable; urgency=medium * Bump Standards-Version to 4.6.2 @@ -52,6 +88,15 @@ curl (7.88.1-7) unstable; urgency=medium -- Samuel Henrique Tue, 21 Mar 2023 22:39:05 +0000 +curl (7.88.1-6ubuntu1) lunar; urgency=low + + * Merge from Debian unstable. Remaining changes: + - Don't build-depend on python3-impacket on i386 so we can drop it + (and its dependencies) from the i386 partial port. It's only used for + the tests, which do not block the build in any case. + + -- Gianfranco Costamagna Mon, 13 Mar 2023 10:10:19 +0100 + curl (7.88.1-6) unstable; urgency=medium * d/rules: Ignore test results from tests that fail on IPv6-only builders @@ -104,6 +149,22 @@ curl (7.88.1-2) unstable; urgency=medium -- Samuel Henrique Fri, 03 Mar 2023 08:28:19 +0000 +curl (7.88.1-1ubuntu1) lunar; urgency=medium + + * Merge from Debian unstable (LP: #2008123). Remaining changes: + + Drop patches for CVEs fixed upsteam. + - debian/patches/CVE-2023-23914_5-1.patch + - debian/patches/CVE-2023-23914_5-2.patch + - debian/patches/CVE-2023-23914_5-3.patch + - debian/patches/CVE-2023-23914_5-4.patch + - debian/patches/CVE-2023-23914_5-5.patch + - debian/patches/CVE-2023-23916.patch + + Don't build-depend on python3-impacket on i386 so we can drop it + (and its dependencies) from the i386 partial port. It's only used for + the tests, which do not block the build in any case. + + -- Danilo Egea Gondolfo Wed, 22 Feb 2023 17:14:26 +0000 + curl (7.88.1-1) unstable; urgency=medium * New upstream version 7.88.1 @@ -118,6 +179,41 @@ curl (7.88.1-1) unstable; urgency=medium -- Samuel Henrique Mon, 20 Feb 2023 22:35:53 +0000 +curl (7.87.0-2ubuntu2) lunar; urgency=medium + + * SECURITY UPDATE: multiple HSTS issues + - debian/patches/CVE-2023-23914_5-1.patch: add sharing of HSTS cache + among handles in docs/libcurl/opts/CURLSHOPT_SHARE.3, + docs/libcurl/symbols-in-versions, include/curl/curl.h, lib/hsts.c, + lib/hsts.h, lib/setopt.c, lib/share.c, lib/share.h, lib/transfer.c, + lib/url.c, lib/urldata.h. + - debian/patches/CVE-2023-23914_5-2.patch: share HSTS between handles + in src/tool_operate.c. + - debian/patches/CVE-2023-23914_5-3.patch: handle adding the same host + name again in lib/hsts.c. + - debian/patches/CVE-2023-23914_5-4.patch: support crlf="yes" for + verify/proxy in tests/FILEFORMAT.md, tests/runtests.pl. + - debian/patches/CVE-2023-23914_5-5.patch: verify hsts with two URLs in + tests/data/Makefile.inc, tests/data/test446. + - CVE-2023-23914 + - CVE-2023-23915 + * SECURITY UPDATE: HTTP multi-header compression denial of service + - debian/patches/CVE-2023-23916.patch: do not reset stage counter for + each header in lib/content_encoding.c, lib/urldata.h, + tests/data/Makefile.inc, tests/data/test387, tests/data/test418. + - CVE-2023-23916 + + -- Marc Deslauriers Fri, 17 Feb 2023 08:19:10 -0500 + +curl (7.87.0-2ubuntu1) lunar; urgency=low + + * Merge from Debian unstable. Remaining changes: + - Don't build-depend on python3-impacket on i386 so we can drop it + (and its dependencies) from the i386 partial port. It's only used for + the tests, which do not block the build in any case. + + -- Gianfranco Costamagna Wed, 01 Feb 2023 11:24:47 +0100 + curl (7.87.0-2) unstable; urgency=medium * d/patches: Add new upstream patch to fix regression in setopt/getinfo @@ -126,6 +222,14 @@ curl (7.87.0-2) unstable; urgency=medium -- Samuel Henrique Sun, 15 Jan 2023 21:12:09 +0000 +curl (7.87.0-1ubuntu1) lunar; urgency=medium + + * Don't build-depend on python3-impacket on i386 so we can drop it + (and its dependencies) from the i386 partial port. It's only used for + the tests, which do not block the build in any case. + + -- Steve Langasek Sun, 08 Jan 2023 00:40:54 +0000 + curl (7.87.0-1) unstable; urgency=medium * New upstream version 7.87.0 diff -pruN 7.88.1-10/debian/control 7.88.1-10ubuntu1/debian/control --- 7.88.1-10/debian/control 2023-05-18 22:43:40.000000000 +0000 +++ 7.88.1-10ubuntu1/debian/control 2023-05-19 03:50:24.000000000 +0000 @@ -1,7 +1,8 @@ Source: curl Section: web Priority: optional -Maintainer: Alessandro Ghedini +Maintainer: Ubuntu Developers +XSBC-Original-Maintainer: Alessandro Ghedini Uploaders: Samuel Henrique , Sergio Durigan Junior Build-Depends: @@ -28,7 +29,7 @@ Build-Depends: locales-all , openssh-server , python3:native , - python3-impacket , + python3-impacket [!i386] , gnutls-bin [amd64 arm64 armel armhf i386 mips64el mipsel s390x powerpc ppc64 riscv64] , quilt, stunnel4 ,