From: Raspbian automatic forward porter <root@raspbian.org>
Date: Mon, 9 Sep 2024 23:26:04 +0000 (+0100)
Subject: Merge version 8.8.0-4+rpi1 and 8.9.1-2 to produce 8.9.1-2+rpi1
X-Git-Tag: archive/raspbian/8.9.1-2+rpi1^0
X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=5a45dc91a12d26e8b0fb65e541a0a63a8fc793d6;p=curl.git

Merge version 8.8.0-4+rpi1 and 8.9.1-2 to produce 8.9.1-2+rpi1
---

5a45dc91a12d26e8b0fb65e541a0a63a8fc793d6
diff --cc debian/changelog
index 34b7c8c7,59ea1088..1ceccdf0
--- a/debian/changelog
+++ b/debian/changelog
@@@ -1,9 -1,59 +1,66 @@@
- curl (8.8.0-4+rpi1) trixie-staging; urgency=medium
++curl (8.9.1-2+rpi1) trixie-staging; urgency=medium
 +
 +  [changes brought forward from 7.88.1-9+rpi1 by Peter Michael Green <plugwash@raspbian.org> at Sat, 20 May 2023 09:55:44 +0000]
 +  * Disable testsuite.
 +
-  -- Raspbian forward porter <root@raspbian.org>  Sat, 27 Jul 2024 03:13:28 +0000
++ -- Raspbian forward porter <root@raspbian.org>  Mon, 09 Sep 2024 23:26:04 +0000
++
+ curl (8.9.1-2) unstable; urgency=medium
+ 
+   [ Steve McIntyre ]
+   * Improve the patch for the gnutls build. Instead of calling quilt
+     during the binary package build, use autotools to do the work we
+     need when calling configure etc. Closes: #1077650
+ 
+   [ Carlos Henrique Lima Melara ]
+   * debian/control: bump Standards-Version to 4.7.0, no changes needed.
+   * debian/patches/ignore-SIGPIPE-after-init.patch: add new patch from
+     upstream. (Closes: #1077854)
+   * debian/tests/build-using-libcurl*: add tests to check if libcurl headers
+     and pkgconf info are correct.
+ 
+  -- Carlos Henrique Lima Melara <charlesmelara@riseup.net>  Fri, 09 Aug 2024 19:47:58 -0300
+ 
+ curl (8.9.1-1) unstable; urgency=medium
+ 
+   * New upstream version 8.9.1. (Closes: 1077656)
+     - fix CVE-2024-7264: ASN.1 date parser overread.
+   * debian/patch/build-Divide-mit-[...].patch: refresh patch.
+ 
+  -- Carlos Henrique Lima Melara <charlesmelara@riseup.net>  Wed, 31 Jul 2024 22:12:06 +0900
+ 
+ curl (8.9.0-3) unstable; urgency=medium
+ 
+   * debian/control: make libcurl*-dev packages Depends on -dev packages.
+     (Closes: #1077197, #1077190)
+   * debian/rules: decrease tests parallelism multiplier.
+ 
+  -- Carlos Henrique Lima Melara <charlesmelara@riseup.net>  Sun, 28 Jul 2024 19:26:49 +0900
+ 
+ curl (8.9.0-2) unstable; urgency=medium
+ 
+   * debian/control: make libcurl*-dev packages Recommends -dev packages.
+     (Closes: #1077197, #1077190)
+ 
+  -- Carlos Henrique Lima Melara <charlesmelara@riseup.net>  Sat, 27 Jul 2024 12:53:28 +0900
+ 
+ curl (8.9.0-1) unstable; urgency=medium
+ 
+   [ Samuel Henrique ]
+   * debian/curl.NEWS: Update wcurl description.
+ 
+   [ Carlos Henrique Lima Melara ]
+   * New upstream version 8.9.0. (Closes: #1076996)
+     - fix CVE-2024-6197: freeing stack buffer in utf8asn1str.
+     - fix CVE-2024-6874: macidn punycode buffer overread.
+   * debian/copyright: drop copyright from removed file.
+   * debian/patches/: drop merged patches and refresh patches against new
+     upstream release.
+       - docs_makefile_am_make_curl_config_1_install.patch: drop.
+       - fix-x509asn1-fallback-to-dotted-OID-representation.patch: drop.
+   * debian/gbp.conf: add upstream-branch definition.
+ 
+  -- Carlos Henrique Lima Melara <charlesmelara@riseup.net>  Thu, 25 Jul 2024 22:14:54 +0900
  
  curl (8.8.0-4) unstable; urgency=medium