~ubuntu-branches/ubuntu/hardy/mono/hardy-security : changes

~ubuntu-branches/ubuntu/hardy/mono/hardy-security » Changes from revision 78

From Revision 78 to 59

Rev	Summary	Authors	Tags	Date
78	* SECURITY UPDATE: Multiple cross-site scripting vulnerabili... * SECURITY UPDATE: Multiple cross-site scripting vulnerabilities in the ASP.net class libraries (LP: #282952) - debian/patches/security_CVE-2008-3422.dpatch: properly encode and escape values in mcs/class/System.Web/System.Web.UI.HtmlControls/ {HtmlControl,HtmlForm,HtmlInputButton,HtmlInputRadioButton, HtmlSelect}.cs, and add tests to mcs/class/System.Web/Test/ System.Web.UI.HtmlControls/{HtmlImageTest,HtmlInputButtonTest, HtmlInputRadioButtonTest,HtmlSelectTest}.cs - CVE-2008-3422 * SECURITY UPDATE: CRLF injection vulnerability in Sys.Web (LP: #282952) - debian/patches/security_CVE-2008-3906.dpatch: encode headers in mcs/class/System.Web/{System.Web/HttpResponseHeader.cs, System.Web.Configuration/HttpRuntimeConfig.cs} - CVE-2008-3906 * SECURITY UPDATE: XMLDsig HMAC-based signatures spoofing and authentication bypass (LP: #409920) - debian/patches/security_CVE-2009-0217.dpatch: Fix HMACOutputLength to match XMLDSIG erratum and add stricter checks. - CVE-2009-0217	Marc Deslauriers	1.2.6+dfsg-6ubuntu3.1	14 years ago
77	* debian/rules: * debian/rules: + unexport CPPFLAGS because configure relies on them being unset to pass custom CPPFLAGS to boehm's configure.	Sebastian Dröge	1.2.6+dfsg-6ubuntu3	16 years ago
76	* debian/rules: * debian/rules: + Put CFLAGS in "" to make the shell happy and fix the build. + Set default CFLAGS to -O2 -g.	Sebastian Dröge	1.2.6+dfsg-6ubuntu2	16 years ago
75	* Sync with Debian: * Sync with Debian: + Alternatives handling is in Debian now, for all other remaining changes see changelog of 1.2.6+dfsg-5ubuntu1.	Sebastian Dröge	1.2.6+dfsg-6ubuntu1	16 years ago
74	Correctly install alternatives for mono-1.0-devel package (L... Correctly install alternatives for mono-1.0-devel package (LP: #182509)	Laurent Bigonville	1.2.6+dfsg-5ubuntu2	16 years ago
73	* Merge with Debian, remaining Ubuntu changes: * Merge with Debian, remaining Ubuntu changes: - debian/control: + Updated Maintainer Field. + Adjust Replaces for Ubuntu versions. + Added lpia to architectures. Sparc has been added in Debian. + Build-depend on libgda3-dev instead of libgda2-dev, since libgda2 is in universe. - debian/patches/dont_check_proc_self_exe.dpatch: + Comment out code that checks /proc/self/exe so that mono will function on the Live CD. - debian/rules: + Symlink doc directories to avoid duplicate files, and remove the doc directories on upgrade for the now symlinked doc directories. - debian/shlibs.local: + Remove libgda2, as it's in universe.	Emilio Pozuelo Monfo...	1.2.6+dfsg-5ubuntu1	16 years ago
72	* Merge with Debian, remaining Ubuntu changes: * Merge with Debian, remaining Ubuntu changes: - debian/control: + Updated Maintainer Field. + Adjust Replaces for Ubuntu versions. + Added sparc and lpia to architectures. + Build-depend on libgda3-dev instead of libgda2-dev. - debian/patches/dont_check_proc_self_exe.dpatch: + Comment out code that checks /proc/self/exe so that mono will function on the Live CD. - debian/rules: + Symlink doc directories to avoid duplicate files, and remove the doc directories on upgrade for the now symlinked doc directories. - debian/shlibs.local: + Remove libgda3-dev build dependency, as it's in universe.	Emilio Pozuelo Monfo...	1.2.6+dfsg-1ubuntu1	16 years ago
71	[ Emilio Pozuelo Monfort ] [ Emilio Pozuelo Monfort ] * Merge with Debian, remaining Ubuntu changes: - debian/control: + Updated Maintainer Field. + Adjust Replaces for Ubuntu versions. + Added sparc and lpia to architectures. + Build-depend on libgda3-dev instead of libgda2-dev. - debian/patches/dont_check_proc_self_exe.dpatch: + Comment out code that checks /proc/self/exe so that mono will function on the Live CD. - debian/rules: + Symlink doc directories to avoid duplicate files, and remove the doc directories on upgrade for the now symlinked doc directories. [ Sebastian Dröge ] * debian/control, debian/shlibs.local: + Remove libgda3-dev build dependency, this only works with gda2 anyway. Put the gda2 shlibs into shlibs.local and suggest them for libmono-system-data[12].0-cil instead of depending on it.	Sebastian Dröge	1.2.5.1-2ubuntu1	16 years ago
70	Explicitely remove the doc directories on upgrade for the no... Explicitely remove the doc directories on upgrade for the now symlinked doc directories.	Matthias Klose	1.2.4-6ubuntu6	16 years ago
69	Symlink doc directories to avoid duplicate files. Symlink doc directories to avoid duplicate files.	Matthias Klose	1.2.4-6ubuntu5	16 years ago
68	debian/control: Build against libgda3-dev instead of libgda2... debian/control: Build against libgda3-dev instead of libgda2-dev. The latter is obsolete and in universe now.	Martin Pitt	1.2.4-6ubuntu4	16 years ago
67	No-change upload due to soyuz bug (lpia bootstrap). No-change upload due to soyuz bug (lpia bootstrap).	Matthias Klose	1.2.4-6ubuntu3	16 years ago
66	Build packages for the lpia architecture. Build packages for the lpia architecture.	Matthias Klose	1.2.4-6ubuntu2	16 years ago
65	* Sync with Debian. Remaining Ubuntu changes: * Sync with Debian. Remaining Ubuntu changes: + debian/control: - Change maintainer to Ubuntu Mono Team. - Adjust Replaces for Ubuntu versions. - Add sparc again. + debian/control, debian/libmono-sqlite1.0-cil.clideps-override, debian/libmono-sqlite2.0-cil.clideps-override: - Make sqlite2 only a Suggests instead of a Depends. + debian/patches/dont_check_proc_self_exe.dpatch: - Comment out code that checks /proc/self/exe so that mono will function on the Live CD.	Sebastian Dröge	1.2.4-6ubuntu1	16 years ago
64	* debian/patches/mono-ppc-corruption.dpatch: * debian/patches/mono-ppc-corruption.dpatch: + Fix memory corruption on PPC that crashed many Gtk# apps on PPC.	Sebastian Dröge	1.2.4-3ubuntu3	16 years ago
63	* debian/patches/g_thread_init.dpatch: * debian/patches/g_thread_init.dpatch: + Call g_thread_init() as early as possible as this is required for newer glib versions. See bug #116870. Patch from upstream SVN, rev. 78018.	Sebastian Dröge	1.2.4-3ubuntu2	16 years ago
62	* Sync with Debian. Remaining Ubuntu changes: * Sync with Debian. Remaining Ubuntu changes: + debian/control: - Change maintainer to Ubuntu Mono Team. - Adjust Replaces for Ubuntu versions. - Add sparc again. + debian/control, debian/libmono-sqlite1.0-cil.clideps-override, debian/libmono-sqlite2.0-cil.clideps-override: - Make sqlite2 only a Suggests instead of a Depends. + debian/patches/dont_check_proc_self_exe.dpatch: - Comment out code that checks /proc/self/exe so that mono will function on the Live CD.	Sebastian Dröge	1.2.4-3ubuntu1	16 years ago
61	* debian/patches/linux_sparc_sigaltstack.dpatch, * debian/patches/linux_sparc_sigaltstack.dpatch, debian/rules: + Disabled now, we just don't use SIGALTSTACK on sparc.	Sebastian Dröge	1.2.4-0ubuntu6	16 years ago
60	* debian/patches/linux_sparc_sigaltstack.dpatch: * debian/patches/linux_sparc_sigaltstack.dpatch: + Also define MONO_ARCH_SIGNAL_STACK_SIZE on sparc.	Sebastian Dröge	1.2.4-0ubuntu5	16 years ago
59	* debian/rules, * debian/rules, debian/patches/linux_sparc_sigaltstack.dpatch: + As sparc is said to have SIGACTION enable SIGALTSTACK support again on sparc and tell mono that sparc supports SIGACTION as another try to fix the build.	Sebastian Dröge	1.2.4-0ubuntu4	16 years ago

Older »