~ubuntu-branches/ubuntu/quantal/curl/quantal

Viewing changes to debian/patches/series

Committer: Package Import Robot
Author(s): Marc Deslauriers
Date: 2012-01-24 08:26:50 UTC
Revision ID: package-import@ubuntu.com-20120124082650-79phjkvvdxwoim2b

Tags: 7.22.0-3ubuntu2

* SECURITY UPDATE: URL sanitization vulnerability
  - debian/patches/CVE-2012-0036.patch: reject URLs with embedded control
    codes in lib/{escape.h,escape.c,imap.c,pop3.c,smtp.c}.
  - CVE-2012-0036

files added:
.pc/CVE-2012-0036.patch

.pc/CVE-2012-0036.patch/lib

.pc/CVE-2012-0036.patch/lib/escape.c

.pc/CVE-2012-0036.patch/lib/escape.h

.pc/CVE-2012-0036.patch/lib/imap.c

.pc/CVE-2012-0036.patch/lib/pop3.c

.pc/CVE-2012-0036.patch/lib/smtp.c

debian/patches/CVE-2012-0036.patch

files modified:
.pc/applied-patches

debian/changelog

debian/patches/series

lib/escape.c

lib/escape.h

lib/imap.c

lib/pop3.c

lib/smtp.c

Show diffs side-by-side

added added

removed removed

debian/patches/series

fix_manpage_spelling

curl_links_with_rt

CVE-2012-0036.patch

# the following two patches are reverted during build

# any new patches must be added before them

gnutls

# this must be the last

nss

Older »