-
Committer:
Package Import Robot
-
Author(s):
Marc Deslauriers
-
Date:
2015-04-29 14:03:35 UTC
-
Revision ID:
package-import@ubuntu.com-20150429140335-3ug9t4k13gmr5a5y
Tags: 7.22.0-3ubuntu4.14
* SECURITY UPDATE: NTLM connection reuse when unauthenticated
- debian/patches/CVE-2015-3143.patch: require credentials to match in
lib/url.c.
- CVE-2015-3143
* SECURITY UPDATE: negotiate not treated as connection-oriented
- debian/patches/CVE-2015-3148.patch: don't clear GSSAPI state between
each exchange and close Negotiate connections when done in
lib/http.c, lib/http_negotiate.c, lib/http_negotiate_sspi.c.
- CVE-2015-3148