curl 7.72.0-1ubuntu1 source package in Ubuntu

Changelog

curl (7.72.0-1ubuntu1) hirsute; urgency=medium

  * Merge from Debian unstable.  Remaining changes:
    - debian/control: build with libssh instead of libssh2
  * Drop d/p/CVE-2020-8169.patch and d/p/CVE-2020-8177.patch
    - Both are fixed upstream >= 7.72
  * Drop d/p/git_tls13_gnutls.patch: Ensure TLS 1.3 works with GnuTLS
    - Included upstream, as of d59090831892210c2b0d38e92b492d6b36a3c70c

curl (7.72.0-1) unstable; urgency=medium

  * New upstream release
    + Fix partial password leak over DNS on HTTP redirect as per CVE-2020-8169
      (Closes: #965280)
      https://curl.haxx.se/docs/CVE-2020-8169.html
    + Fix local file overwrite with -J option as per CVE-2020-8177
      (Closes: #965281)
      https://curl.haxx.se/docs/CVE-2020-8177.html
    + Fix wrong connect-only connection as per CVE-2020-8231 (Closes: #968831)
      https://curl.haxx.se/docs/CVE-2020-8231.html
  * Refresh patches
  * Do not install *.la files.
    Thanks to Pino Toscano for the patch. (Closes: #955785)
  * Update list of doc files
  * Update copyright for polarssl -> mbedtls rename
  * Use python3 executable in tests

 -- Lukas Märdian <email address hidden>  Mon, 09 Nov 2020 12:08:49 +0100

Upload details

Uploaded by:
Lukas Märdian
Sponsored by:
Matthias Klose
Uploaded to:
Hirsute
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
web
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
curl_7.72.0.orig.tar.gz 3.9 MiB d4d5899a3868fbb6ae1856c3e55a32ce35913de3956d1973caccd37bd0174fa2
curl_7.72.0-1ubuntu1.debian.tar.xz 30.3 KiB 573f60b029e653ba4e9dd0c54efc9019cebf0813bd9a268f6098f32c2c9e70c9
curl_7.72.0-1ubuntu1.dsc 2.7 KiB 2a0831b140feff50cadd1ee8328b73cde72de51c3941d701eb443c2913657831

View changes file

Binary packages built by this source

curl: No summary available for curl in ubuntu hirsute.

No description available for curl in ubuntu hirsute.

curl-dbgsym: No summary available for curl-dbgsym in ubuntu hirsute.

No description available for curl-dbgsym in ubuntu hirsute.

libcurl3-gnutls: No summary available for libcurl3-gnutls in ubuntu hirsute.

No description available for libcurl3-gnutls in ubuntu hirsute.

libcurl3-gnutls-dbgsym: No summary available for libcurl3-gnutls-dbgsym in ubuntu hirsute.

No description available for libcurl3-gnutls-dbgsym in ubuntu hirsute.

libcurl3-nss: No summary available for libcurl3-nss in ubuntu hirsute.

No description available for libcurl3-nss in ubuntu hirsute.

libcurl3-nss-dbgsym: No summary available for libcurl3-nss-dbgsym in ubuntu hirsute.

No description available for libcurl3-nss-dbgsym in ubuntu hirsute.

libcurl4: No summary available for libcurl4 in ubuntu hirsute.

No description available for libcurl4 in ubuntu hirsute.

libcurl4-dbgsym: No summary available for libcurl4-dbgsym in ubuntu hirsute.

No description available for libcurl4-dbgsym in ubuntu hirsute.

libcurl4-doc: No summary available for libcurl4-doc in ubuntu hirsute.

No description available for libcurl4-doc in ubuntu hirsute.

libcurl4-gnutls-dev: No summary available for libcurl4-gnutls-dev in ubuntu hirsute.

No description available for libcurl4-gnutls-dev in ubuntu hirsute.

libcurl4-nss-dev: No summary available for libcurl4-nss-dev in ubuntu hirsute.

No description available for libcurl4-nss-dev in ubuntu hirsute.

libcurl4-openssl-dev: No summary available for libcurl4-openssl-dev in ubuntu hirsute.

No description available for libcurl4-openssl-dev in ubuntu hirsute.