1
curl (7.30.0-1ubuntu1) saucy; urgency=low
3
* Resynchronize on Debian. Remaining changes:
4
- Drop dependencies not in main:
5
+ Build-Depends: Drop stunnel4 and libssh2-1-dev.
6
+ Drop libssh2-1-dev from binary package Depends.
7
- Add new libcurl3-udeb package.
8
- Add new curl-udeb package.
9
* Add warning to debian/patches/series.
11
-- Sebastien Bacher <seb128@ubuntu.com> Tue, 07 May 2013 12:16:37 +0200
13
curl (7.30.0-1) unstable; urgency=low
15
* New upstream release
16
* Update upstream copyright years
17
* Drop patches merged upstream:
18
- 08_NULL-pointer-dereference-on-close.patch
19
- 09_CVE-213-1944.patch
20
- 10_test1218-another-cookie-tailmatch-test.patch
22
- 03_keep_symbols_compat.patch
25
* Add libcurl4-doc package:
26
- Move *.pdf and *.html files to the libcurl4-doc package
27
- Add Suggests for -doc package to -dev packages
28
- Move examples to the -doc package
29
* Add Build-Depends on python which is used by some tests
31
-- Alessandro Ghedini <ghedo@debian.org> Thu, 18 Apr 2013 12:55:09 +0200
33
curl (7.29.0-2.1) unstable; urgency=high
35
* Non-maintainer upload.
37
[ Alessandro Ghedini ]
38
* Do not compress *.pdf files (Closes: #704093)
40
[ Salvatore Bonaccorso ]
41
* Add 09_CVE-213-1944.patch.
42
Fix CVE-2013-1944: fix tailmatching to prevent cross-domain leakage.
43
Cookies set for 'example.com' could accidentaly also be sent by libcurl
44
to the 'bexample.com' (ie with a prefix to the first domain name).
46
* Add testcase for CVE-2013-1944.
48
-- Salvatore Bonaccorso <carnil@debian.org> Fri, 12 Apr 2013 13:55:34 +0200
50
curl (7.29.0-2) unstable; urgency=low
52
* Fix a segfault when closing an unused multi handle (Closes: #701713)
53
* Mention LDAPS in packages' long descriptions
55
- Switch to short-form dh
56
- Enable test suite on hurd and kfreebsd too
57
- Enable GSSAPI support on hurd too
59
-- Alessandro Ghedini <ghedo@debian.org> Mon, 11 Mar 2013 19:02:56 +0100
1
61
curl (7.29.0-1ubuntu3) raring; urgency=low
3
63
* SECURITY UPDATE: Incorrect cookie domain handling in tailmatch()