-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 08 Nov 2021 21:14:47 +0000 Source: curl Architecture: source Version: 7.79.1-1 Distribution: unstable Urgency: medium Maintainer: Alessandro Ghedini <ghedo@debian.org> Changed-By: Samuel Henrique <samueloph@debian.org> Closes: 989046 989228 990128 991492 992505 994940 Changes: curl (7.79.1-1) unstable; urgency=medium . [ Samuel Henrique ] * Add myself as an Uploader * Add sergiodj as an uploader * New upstream version 7.79.1 (closes: #989046) - Changes since 7.74.0: ~ vtls: fix connection reuse checks for issuer cert and case sensitivity (closes: #991492, CVE-2021-22924) ~ Fix User-Agent header missing in some cases (closes: #994940) ~ Fix TELNET stack contents disclosure (closes: #989228, CVE-2021-22898) * d/rules: Add --with-{openssl|gnutls|nss} to configure args * Update all patches. Remove patches: - 07_do-not-disable-debug-symbols: Obsolete as per https://github.com/curl/curl/issues/7216. - 14_transfer-strip-credentials-from-the-auto-referer-hea: Originally from upstream, part of the release now. - 15_vtls-add-isproxy-argument-to-Curl_ssl_get-addsession: Originally from upstream, part of the release now. - fix-regression-microseconds-instead-of-seconds: Originally from upstream, part of the release now. Update patches: - 12_use-python3-in-tests: Update and forward upstream. - 90_gnutls: Update - 99_nss: Update - 13_fix-man-formatting: Update . [ Debian Janitor ] * Use secure URI in Homepage field. * Set debhelper-compat version in Build-Depends. * Set upstream metadata fields: Bug-Database, Bug-Submit (from ./configure), Repository, Repository-Browse. * Avoid explicitly specifying -Wl,--as-needed linker flag. . [ Helmut Grohne ] * Also remove -ffile-prefix-map from curl-config (closes: #990128) * Explicitly disable zstd support (closes: #992505) . [ Sergio Durigan Junior ] * d/control: Add Rules-Requires-Root: no. * d/copyright: Add public-domain license text. * Enable GPG-checking of orig tarball. - d/upstream/signing-key.asc: Upstream public key. - d/watch: Add "pgpmode=auto" as an option. * Bump debhelper-compat to 13. - d/control: B-D on debhelper-compat = 13. - d/rules: After the override_dh_auto_install target has been run, we know that we can safely get rid of the contents inside the debian/tmp/ directory. This is needed because otherwise dh_missing will complain about uninstalled files, which will make the build fail when using debhelper-compat 13. * d/rules: Some minor cleanup and removal of unneeded comments. * d/rules: Honour "nocheck" build option. * Make OpenSSL and GNUTLS builds fail if tests fail - d/rules: Adjust rule to make OpenSSL and GNUTLS builds fail if their tests fail. Unfortunately, it's still not possible to make the NSS build fail if its tests fail; we're still investigating the failures there with it. - d/p/14_fix-compatibility-impacket-0-9-23.patch: Needed patch to make tests pass with impacket 0.9.23+. Checksums-Sha1: 7a3ac4a44670643886d0030a893d458f18e519f8 2761 curl_7.79.1-1.dsc 16a3d29da766a59769d85fb8fc8599333dc07505 4144744 curl_7.79.1.orig.tar.gz 669010f98c909dad964c54f71f3c0a53a1fcd034 36632 curl_7.79.1-1.debian.tar.xz b98edd78e95c88fc822d2bd89dee7f5874b6b99a 12277 curl_7.79.1-1_amd64.buildinfo Checksums-Sha256: 1da995308b63cd0b6d521ba6df2c9affa6cbbdf00f62d243d1c5e1262c6d96f7 2761 curl_7.79.1-1.dsc 370b11201349816287fb0ccc995e420277fbfcaf76206e309b3f60f0eda090c2 4144744 curl_7.79.1.orig.tar.gz 51dc416e52fc70e5d32c0ff078ebca2fcc3b9e0f0410f74175d54adda758a36c 36632 curl_7.79.1-1.debian.tar.xz 86f57c1ad7e373ab4bae0ce76ed6bf3988e6242f6623b5ebfc5138717dfa2521 12277 curl_7.79.1-1_amd64.buildinfo Files: 6d0ae1a8c9a2bdff674083e969925e33 2761 web optional curl_7.79.1-1.dsc 2840cca526ec80353fa334d28d7aa581 4144744 web optional curl_7.79.1.orig.tar.gz f4515936df8fad99080b277cd79d2fb8 36632 web optional curl_7.79.1-1.debian.tar.xz 16b60ec6efc1e0c75b985a02464b826b 12277 web optional curl_7.79.1-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBdtqg34QX0sdAsVfu6n6rcz7RwcFAmGJm8AACgkQu6n6rcz7 Rwd0cBAAgd/GgSXxZ883SyGh9bN0CmhmSJw0rgtiyEE5Nv9iwMB7vI2HaVi3Egq7 lLX3xrOFi8aOkECe7U9oK1/98f1GkXM3JCNXXpbxO/KQ1L0MsfpjjVDdZ8/XB9lJ 4hRqBqX+QygtJxUsIUyJYN91nrg3uRMOnstH/3F6536SpVu9s9QwVD/M/SPzDb01 voN3RAGQIOwf0pHu+zajiiV7sWpIV/n3AVc4MOkvjg8OcY4kHAbILbvYv67wTYO4 oT/0Cdkly8YdPuAv0JZTDRJKZnS1bRgwQ5QrOBFzHIKU67ZiaORjgdRhXVa7pXCX Wg8eQLZXwPypzfMQZ2RhEyD5n+nZk4ziW+Ei9BI1gXJRT8Zi4uIzLdAa2CQlx5Vt PYkuQ7lAcslHpOQ35+jlABO68zevlALp5qNLPfCZuqV3qyniMareomMmqIUrnTKZ hujjueiv4CXlPLEzW771T0F1ih1HwfeZfWPZsrrGRxhGKJNLVVshvb4gMSSSc1MS 3Udl2Jsq7gTBT0COg1fAGABJMw8ScFbPjlHlg6YBfH0PDJwyye6jGUH1+ApVW7mu 9sB6oz2JFjJmi+55J01aX4Z2HqMbxraHwuCWNNxV1/4UGJCo2gaNF6o/AFj1xINo A0jve04m4UzN3225MhHh6WbSVShO3TF6m2aFu6VMEaiu1IvVvqM= =jqcG -----END PGP SIGNATURE-----