* SECURITY UPDATE: libcurl unconditional credential delegation during
  GSSAPI authentication vulnerability.
  - debian/patches/0001-Curl_input_negotiate-do-not-delegate-credentials.patch:
    do not delegate credentials when doing GSSAPI authentication
  - CVE-2011-2192
* SECURITY UPDATE: libcurl zlib automatic decompression callback
  data buffer overflow
  - debian/patches/libcurl-contentencoding.patch: restrict amount of
    callback data sent to an application
  - CVE-2010-0734