Public bug reported: Scheduled-For: ubuntu-26.01 Ubuntu: 8.17.0-1ubuntu1 Debian Unstable: 8.18.0-1
A new release of curl is available for merging from Debian Unstable. If it turns out this needs a sync rather than a merge, please change the tagging from ['dcr-merge'] to ['dcr-sync'], and (optionally) update the title as desired. If this merge pulls in a new upstream version, also consider adding an entry to the resolute Release Notes: https://discourse.ubuntu.com/t/resolute-raccoon-release-notes/ ### New Debian Changes ### curl (8.18.0-1) unstable; urgency=medium * New upstream version 8.18.0 * debian/control: - Bump stds-version to 4.7.3. - Remove Priority field, it already defaults to optional. - Remove Rules-Requires-Root, it already defaults to no. * debian/copyright: bump packaging copyright years, happy 2026! -- Carlos Henrique Lima Melara <[email protected]> Wed, 07 Jan 2026 21:09:51 -0300 curl (8.18.0~rc3-1) unstable; urgency=medium * New upstream version 8.18.0~rc3 * Refresh patches * d/copyright: Remove entries for files removed upstream * Refresh patches: - ZZZgnutls-build.patch - build-Divide-mit-krb5-gssapi-link-flags-between-LDFLAGS-a.patch * d/copyright: Remove entries for files removed upstream: - lib/vtls/mbedtls_threadlock.c - lib/vtls/mbedtls_threadlock.h -- Samuel Henrique <[email protected]> Sun, 28 Dec 2025 21:54:41 -0800 curl (8.18.0~rc2-1) unstable; urgency=medium * New upstream version 8.18.0~rc2 * d/copyright: Remove entries for files removed upstream * d/patches: - Drop patches merged upstream: ~ fix-progress-meter-in-parallel-mode.patch ~ wcurl-CVE-2025-11563.patch - Update patches: ~ ZZZgnutls-build.patch: + Variables AM_CFLAGS and AM_LDFLAGS were dropped in lib/Makefile.am + Update patch's context. ~ build-Divide-mit-krb5-gssapi-link-flags-between-LDFLAGS-a.patch: + Context update. + Update patch offset. ~ 11_omit-directories-from-config.patch: + Update for upstream usage of double quotes (replacing single quotes) for variables and usage of '&& test' instead of '-a' in curl-config.in. * d/libcurl4-doc.docs: Some docs were converted to .md: - docs/FAQ.md - docs/KNOWN_BUGS.md - docs/TODO.md -- Samuel Henrique <[email protected]> Mon, 15 Dec 2025 18:51:22 -0800 curl (8.17.0-3) unstable; urgency=medium * d/p/fix-progress-meter-in-parallel-mode.patch: cherry-pick from upstream. -- Carlos Henrique Lima Melara <[email protected]> Sun, 23 Nov 2025 21:41:12 -0300 curl (8.17.0-2) unstable; urgency=medium * d/p/wcurl-CVE-2025-11563.patch: Import new upstream patch to fix CVE-2025-11563 -- Samuel Henrique <[email protected]> Wed, 12 Nov 2025 20:08:24 -0800 ### Old Ubuntu Delta ### curl (8.17.0-1ubuntu1) resolute; urgency=medium * Merge with Debian unstable (LP: #2130119). Remaining changes: - d/{control,rules}: drop nghttp3 and ngtcp2 dependencies in universe - d/control: do not use gnutls for the curl binary - d/control: don't build-depend on python3-impacket and stunnel on i386 -- Ural Tunaboyu <[email protected]> Fri, 07 Nov 2025 13:42:15 +0100 ** Affects: curl (Ubuntu) Importance: Undecided Assignee: Ural Tunaboyu (uralt) Status: In Progress ** Tags: dcr-merge -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2138401 Title: Merge curl 8.18.0-1 from Debian Unstable for resolute To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/curl/+bug/2138401/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
