Accepted curl 7.50.1-1 (source amd64 all) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 03 Aug 2016 12:46:05 +0100
Source: curl
Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc
Architecture: source amd64 all
Version: 7.50.1-1
Distribution: unstable
Urgency: medium
Maintainer: Alessandro Ghedini <ghedo@debian.org>
Changed-By: Alessandro Ghedini <ghedo@debian.org>
Description:
curl - command line tool for transferring data with URL syntax
libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour)
libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours)
libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour)
libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour)
libcurl4-doc - documentation for libcurl
libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour)
libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour)
libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour)
Closes: 818092 818131 827900 828127 830273
Changes:
curl (7.50.1-1) unstable; urgency=medium
.
* New upstream release (Closes: #827900)
- Fix TLS session resumption client cert bypass as per CVE-2016-5419
https://curl.haxx.se/docs/adv_20160803A.html
- Fix re-using connection with wrong client cert as per CVE-2016-5420
https://curl.haxx.se/docs/adv_20160803B.html
- Fix use of connection struct after free as per CVE-2016-5421
https://curl.haxx.se/docs/adv_20160803C.html
- Support OpenSSL 1.1 (Closes: #828127)
* Fix 04_workaround_as_needed_bug.patch.
Thanks to Yuriy M. Kaminskiy for the patch (Closes: #818131)
* Bump Standards-Version to 3.9.8 (no changes needed)
* Update Vcs-* URLs
* Refresh patches
* Add 08_enable-zsh.patch to re-enable zsh completion generation
* Remove 08_fix-zsh-completion.patch (was already disabled)
* Add 09_fix-typo.patch to fix spelling-error-in-manpage
* Add 10_disable-network-tests.patch to disable networked tests
(Closes: #830273)
* Improve cross Build-Depends satisfiability.
Thanks to Helmut Grohne for the patch (Closes: #818092)
Checksums-Sha1:
8f00f30c06203650df7d97c3bb512231e0e71724 2713 curl_7.50.1-1.dsc
c8db732c280059f570fc39c6b49ae5c1f19ee5ef 8894258 curl_7.50.1.orig.tar.gz
e8d33aba3f9e47237f926f5c5fe99f37c4470de4 26948 curl_7.50.1-1.debian.tar.xz
3c2ca385f197073a78b4773a62da50ef57019048 120606 curl-dbgsym_7.50.1-1_amd64.deb
67f821fc291eda3bf5cb76c5733e7b66530c0dee 217816 curl_7.50.1-1_amd64.deb
98aee512d4845101dc0b0d7fb30d366f0df9b570 4148696 libcurl3-dbg_7.50.1-1_amd64.deb
e6aa2c4c533051ff3907af33da4600a7438c9446 277594 libcurl3-gnutls_7.50.1-1_amd64.deb
c0c35a338685a1230baebdd6ebd67012378bbf49 283932 libcurl3-nss_7.50.1-1_amd64.deb
292367db46dcd0f50086e08d25728ed993d9319f 279808 libcurl3_7.50.1-1_amd64.deb
da87dcc6433a1eeab0c09ea5e4d72583425592fe 1996982 libcurl4-doc_7.50.1-1_all.deb
0319de14d04d1b1ae48136b8051de6b57e0ea59c 360150 libcurl4-gnutls-dev_7.50.1-1_amd64.deb
bd09645702e8039bcea72f83ec90d71f2b9371cf 366764 libcurl4-nss-dev_7.50.1-1_amd64.deb
f411978a72b0a511b55366f1a07b1b1f32cbdffd 361942 libcurl4-openssl-dev_7.50.1-1_amd64.deb
Checksums-Sha256:
0dc812ada7fccc111c6497e51977e395e01024bbf94325e7b0c515da9d89a756 2713 curl_7.50.1-1.dsc
3e392cf600822b817be82d9080b377fcbab70538d5a8bf525a1cd66e157b99ea 8894258 curl_7.50.1.orig.tar.gz
62cfd79dd0eaae5f2aff1941a60ae0f8ecef089ca9aadfa6e75b59c9f4dda63b 26948 curl_7.50.1-1.debian.tar.xz
74063c3c678ba5051f33f6e4f6315abfc72e1bea46f365d3e42a6030c3529520 120606 curl-dbgsym_7.50.1-1_amd64.deb
60ba083d5aeced6c8a4756a30cca20eca5385e214acc37bd0d29d7901ef3906d 217816 curl_7.50.1-1_amd64.deb
3db8449b63a855d4ec9fb9c7aa41d2e66a5402a4e99c724978ebf620b85da2f2 4148696 libcurl3-dbg_7.50.1-1_amd64.deb
1a328d00ad82b144afaad4daa24965fb64d9fdc1ae0d9ed759169b0634bdda22 277594 libcurl3-gnutls_7.50.1-1_amd64.deb
32a6638c860531eef44073d344f0d50262900facf36a57624c3fdf3777836b71 283932 libcurl3-nss_7.50.1-1_amd64.deb
b7f5f4eda17b13c3c6b1f70b0881ab2bd553cd7b110d263013e0a7042a8c9adc 279808 libcurl3_7.50.1-1_amd64.deb
332c18c6bce6b8b1fd0a439bdfbdbfe6c47bb1a1f6e85cd30f15f35ba2c7fce8 1996982 libcurl4-doc_7.50.1-1_all.deb
95f88f289b41c4ed04629ace050bfe7e24fa1d8d6a6c5859ac20b0c10237a7a6 360150 libcurl4-gnutls-dev_7.50.1-1_amd64.deb
efe023d7292397bdb95b23e9048ce6dc45567f9691a299d84eec8c8120d4e1c4 366764 libcurl4-nss-dev_7.50.1-1_amd64.deb
d2d2d361b1fc7f245cbff0fb11d0ccbf546d551be7b9ffabb784a4d831df036f 361942 libcurl4-openssl-dev_7.50.1-1_amd64.deb
Files:
0b05144e23458d86f91f0a1bd4c677ef 2713 web optional curl_7.50.1-1.dsc
c264788f2e4313a05140d712c1ec90c2 8894258 web optional curl_7.50.1.orig.tar.gz
3760421989032e739c8ae29d53c4a83e 26948 web optional curl_7.50.1-1.debian.tar.xz
afe2d347366fc9ab2496e40719ebf315 120606 debug extra curl-dbgsym_7.50.1-1_amd64.deb
242096d2f801a6f65c89b2b220251bfe 217816 web optional curl_7.50.1-1_amd64.deb
6c49cfe91b2702e4962de533bda56537 4148696 debug extra libcurl3-dbg_7.50.1-1_amd64.deb
b5d02937ca80c39a37613b24f557c730 277594 libs optional libcurl3-gnutls_7.50.1-1_amd64.deb
5418844c48c4075da8f3cf8a91406b55 283932 libs optional libcurl3-nss_7.50.1-1_amd64.deb
7056b45656122611a218f347341e2ba7 279808 libs optional libcurl3_7.50.1-1_amd64.deb
0adbfbeb241024538a9d8762709b635a 1996982 doc optional libcurl4-doc_7.50.1-1_all.deb
dd933adee9af8d40e2c955478346a0dc 360150 libdevel optional libcurl4-gnutls-dev_7.50.1-1_amd64.deb
ca3bd4895add336caaa6ddefa5771d92 366764 libdevel optional libcurl4-nss-dev_7.50.1-1_amd64.deb
c3d4b6ff483b18a82e2e30b2964a2cf4 361942 libdevel optional libcurl4-openssl-dev_7.50.1-1_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2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=PYKr
-----END PGP SIGNATURE-----