~ubuntu-branches/ubuntu/precise/curl/precise-security

  • Committer: Package Import Robot
  • Author(s): Marc Deslauriers
  • Date: 2015-04-29 14:03:35 UTC
  • Revision ID: package-import@ubuntu.com-20150429140335-3ug9t4k13gmr5a5y
Tags: 7.22.0-3ubuntu4.14
* SECURITY UPDATE: NTLM connection reuse when unauthenticated
  - debian/patches/CVE-2015-3143.patch: require credentials to match in
    lib/url.c.
  - CVE-2015-3143
* SECURITY UPDATE: negotiate not treated as connection-oriented
  - debian/patches/CVE-2015-3148.patch: don't clear GSSAPI state between
    each exchange and close Negotiate connections when done in
    lib/http.c, lib/http_negotiate.c, lib/http_negotiate_sspi.c.
  - CVE-2015-3148
Filename Latest Rev Last Changed Committer Comment Size
..
BUILD.WINDOWS.txt 1.2.12 12 years ago Bazaar Package Importer Import upstream version 7.21.7 3 KB Diff Download File
gen_resp_file.bat 1.2.9 13 years ago Bazaar Package Importer Import upstream version 7.21.4 154 bytes Diff Download File
Makefile.vc 1.2.9 13 years ago Bazaar Package Importer Import upstream version 7.21.4 3.6 KB Diff Download File
MakefileBuild.vc 1.2.9 13 years ago Bazaar Package Importer Import upstream version 7.21.4 11.8 KB Diff Download File