~ubuntu-branches/ubuntu/hardy/curl/hardy-security : changes

~ubuntu-branches/ubuntu/hardy/curl/hardy-security » Changes from revision 31

From Revision 31 to 12

Rev	Summary	Authors	Tags	Date
31	* SECURITY UPDATE: Incorrect cookie domain handling in tailm... * SECURITY UPDATE: Incorrect cookie domain handling in tailmatch() - debian/patches/curl-tailmatch.patch: enforce strict subdomain match when sending cookies. Patch from YAMADA Yasuharu. - http://curl.haxx.se/curl-tailmatch.patch - CVE-2013-1944	Seth Arnold	7.18.0-1ubuntu2.4	11 years ago
30	* SECURITY UPDATE: libcurl unconditional credential delegati... * SECURITY UPDATE: libcurl unconditional credential delegation during GSSAPI authentication vulnerability. - debian/patches/0001-Curl_input_negotiate-do-not-delegate-credentials.patch: do not delegate credentials when doing GSSAPI authentication - CVE-2011-2192 * SECURITY UPDATE: libcurl zlib automatic decompression callback data buffer overflow - debian/patches/libcurl-contentencoding.patch: restrict amount of callback data sent to an application - CVE-2010-0734 * SECURITY UPDATE: SSL cert hostname checking bypass with NULL byte. - debian/patches/series: adjust patch ordering so that debian/patches/cert-null-cn gets applied at build time - CVE-2009-2417	Steve Beattie	7.18.0-1ubuntu2.3	12 years ago
29	* SECURITY UPDATE: SSL cert hostname checking bypass with NU... * SECURITY UPDATE: SSL cert hostname checking bypass with NULL byte. - add debian/patches/cert-null-cn: backported upstream changes. - CVE-2009-2417	Kees Cook	7.18.0-1ubuntu2.2	14 years ago
28	* SECURITY UPDATE: Local file exposure via redirect * SECURITY UPDATE: Local file exposure via redirect - debian/patches/security-CVE-2009-0037.patch: add logic to include/curl/curl.h, lib/{easy,url}.c and lib/urldata.h to limit what protocols curl will automatically follow via a redirect. By default, it now follows all protocols except FILE and SCP. - CVE-2009-0037	Marc Deslauriers	7.18.0-1ubuntu2.1	15 years ago
27	Use automake-1.9, as used by upstream. Use automake-1.9, as used by upstream.	Matthias Klose	7.18.0-1ubuntu2	16 years ago
26	* Merge from Debian; remaining changes: * Merge from Debian; remaining changes: - Drop the stunnel build dependency. - Drop the build-dependency on libdb4.5-dev, add build-dependency on openssh-server. - Drop libssh2-1-dev from libcurl4-openssl-dev's Depends.	Matthias Klose	7.18.0-1ubuntu1	16 years ago
25	No-change rebuild against libldap-2.4-2. No-change rebuild against libldap-2.4-2.	Steve Langasek	7.17.1-1ubuntu4	16 years ago
24	And drop libssh2-1-dev from libcurl4-openssl-dev's Depends. And drop libssh2-1-dev from libcurl4-openssl-dev's Depends.	Steve Kowalik	7.17.1-1ubuntu3	16 years ago
23	Drop libssh2-1-dev (universe) from Build-Depends (LP: #17589... Drop libssh2-1-dev (universe) from Build-Depends (LP: #175891).	Michael Bienia	7.17.1-1ubuntu2	16 years ago
22	* Merge with Debian; remaining changes: * Merge with Debian; remaining changes: - Drop the stunnel build dependency. * Drop the build-dependency on libdb4.5-dev, add build-dependency on openssh-server.	Matthias Klose	7.17.1-1ubuntu1	16 years ago
21	* Merge with Debian; remaining changes: * Merge with Debian; remaining changes: - Drop the stunnel build dependency.	Matthias Klose	7.16.4-2ubuntu1	16 years ago
20	* Merge with Debian. * Merge with Debian. - Drop debian/patches/gnutls-verifications, applied upstream. - Remove all stuff which should be reverted according to 7.16.2-6ubuntu4. - Remaining change: drop stunnel build dependency.	Matthias Klose	7.16.4-1ubuntu1	16 years ago
19	Added debian/patches/gnutls-verifications: actually perform ... Added debian/patches/gnutls-verifications: actually perform expiration and activation verifications (CVE-2007-3564).	Kees Cook	7.16.2-6ubuntu5	16 years ago
18	Completly revert the two previous changes - libcurl's symbol... Completly revert the two previous changes - libcurl's symbols are versioned.	Steve Kowalik	7.16.2-6ubuntu4	16 years ago
17	Add Conflicts and Replaces on older versions of libcurl4{,-g... Add Conflicts and Replaces on older versions of libcurl4{,-gnutls} for libcurl3{,-gnutls} so that upgrades don't blow up.	Steve Kowalik	7.16.2-6ubuntu3	16 years ago
16	* Provide two transitional packages, libcurl4 and libcurl4-g... * Provide two transitional packages, libcurl4 and libcurl4-gnutls that depend on their libcurl3 counterparts. * Stop libcurl3 and libcurl3-gnutls Conflicting and Providing their libcurl4 counterparts.	Steve Kowalik	7.16.2-6ubuntu2	16 years ago
15	* Merge from Debian unstable * Merge from Debian unstable * Remaining Ubuntu changes: - Drop the stunnel build dependency.	Steve Kowalik	7.16.2-6ubuntu1	16 years ago
14	* Merge from Debian unstable * Merge from Debian unstable * Remaining Ubuntu changes: - Drop the stunnel build dependency.	Steve Kowalik	7.16.2-5ubuntu1	16 years ago
13	* Merge with Debian; remaining changes: * Merge with Debian; remaining changes: - Drop the stunnel build dependency.	Matthias Klose	7.16.2-4ubuntu1	16 years ago
12	* Merge with Debian; remaining changes: * Merge with Debian; remaining changes: - Drop the stunnel build dependency.	Matthias Klose	7.16.2-3ubuntu1	16 years ago

Older »