~ubuntu-branches/ubuntu/trusty/curl/trusty-updates : changes

~ubuntu-branches/ubuntu/trusty/curl/trusty-updates » Changes from revision 80

From Revision 80 to 61

Rev	Summary	Authors	Tags	Date
80	* SECURITY UPDATE: NTLM connection reuse when unauthenticate... * SECURITY UPDATE: NTLM connection reuse when unauthenticated - debian/patches/CVE-2015-3143.patch: require credentials to match in lib/url.c. - CVE-2015-3143 * SECURITY UPDATE: cookie parser out of boundary memory access - debian/patches/CVE-2015-3145.patch: properly handle a single double quote in lib/cookie.c. - CVE-2015-3145 * SECURITY UPDATE: negotiate not treated as connection-oriented - debian/patches/CVE-2015-3148.patch: don't clear GSSAPI state between each exchange and close Negotiate connections when done in lib/http.c, lib/http_negotiate.c, lib/http_negotiate_sspi.c. - CVE-2015-3148	Marc Deslauriers	7.35.0-1ubuntu2.5	8 years ago
79	* SECURITY UPDATE: URL request injection * SECURITY UPDATE: URL request injection - debian/patches/CVE-2014-8150.patch: drop bad chars from URL in lib/url.c, added test to tests/data/Makefile.am, tests/data/test1529, tests/libtest/Makefile.inc, tests/libtest/lib1529.c. - CVE-2014-8150	Marc Deslauriers	7.35.0-1ubuntu2.3	9 years ago
78	* SECURITY UPDATE: sensitive data disclosure via duphandle r... * SECURITY UPDATE: sensitive data disclosure via duphandle read out of bounds - debian/patches/CVE-2014-3707.patch: properly copy memory aread in lib/formdata.c, lib/strdup.{c,h}, lib/url.c, lib/urldata.h, src/Makefile.inc, src/tool_setup.h, src/tool_strdup.{c,h}. - CVE-2014-3707	Marc Deslauriers	7.35.0-1ubuntu2.2	9 years ago
77	* SECURITY UPDATE: incorrect cookie handling via partial lit... * SECURITY UPDATE: incorrect cookie handling via partial literal IP addresses - debian/patches/CVE-2014-3613.patch: only use full host matches for hosts used as IP address in lib/cookie.c, added tests to tests/data/test1105, tests/data/test31, tests/data/test8. - CVE-2014-3613 * SECURITY UPDATE: incorrect cookie handling for TLDs - debian/patches/CVE-2014-3620.patch: reject incoming cookies set for TLDs in lib/cookie.c, added test to tests/data/test61. - CVE-2014-3620	Marc Deslauriers	7.35.0-1ubuntu2.1	9 years ago
76	* SECURITY UPDATE: wrong re-use of connections * SECURITY UPDATE: wrong re-use of connections - debian/patches/CVE-2014-0138.patch: fix possible issues with NTLM HTTP logic, and extend new connection logic to other protocols in lib/http.c, lib/url.c, lib/urldata.h, add new tests to tests/data/Makefile.am, tests/data/test1418, tests/data/test1419. - CVE-2014-0138 * SECURITY UPDATE: incorrect wildcard SSL certificate validation with literal IP addresses - debian/patches/CVE-2014-0139.patch: fix wildcard logic in lib/hostcheck.c, added tests to tests/data/Makefile.am, tests/data/test1397, tests/unit/Makefile.inc, tests/unit/unit1397.c. - CVE-2014-0139 * debian/patches/fix_test172.path: fix expired cookie causing test to fail.	Marc Deslauriers	7.35.0-1ubuntu2	10 years ago
75	* Resynchronize on Debian, remaining changes: * Resynchronize on Debian, remaining changes: - Drop dependencies not in main: + Build-Depends: Drop stunnel4 and libssh2-1-dev. + Drop libssh2-1-dev from binary package Depends. - Add new libcurl3-udeb package. - Add new curl-udeb package.	Marc Deslauriers	7.35.0-1ubuntu1	10 years ago
74	* Resynchronize on Debian, remaining changes * Resynchronize on Debian, remaining changes - Drop dependencies not in main: + Build-Depends: Drop stunnel4 and libssh2-1-dev. + Drop libssh2-1-dev from binary package Depends. - Add new libcurl3-udeb package. - Add new curl-udeb package. * Dropped undocumented Build-Depends change to automake1.9.	Marc Deslauriers	7.34.0-1ubuntu1	10 years ago
73	* Resynchronize on Debian, remaining changes * Resynchronize on Debian, remaining changes - Drop dependencies not in main: + Build-Depends: Drop stunnel4 and libssh2-1-dev. + Drop libssh2-1-dev from binary package Depends. - Add new libcurl3-udeb package. - Add new curl-udeb package.	Sebastien Bacher	7.33.0-1ubuntu1	10 years ago
72	* Merge from Debian unstable. Remaining changes: * Merge from Debian unstable. Remaining changes: - Drop dependencies not in main: + Build-Depends: Drop stunnel4 and libssh2-1-dev. + Drop libssh2-1-dev from binary package Depends. - Add new libcurl3-udeb package. - Add new curl-udeb package. * Fixes freeipa-client join. (LP: #1220928)	Ubuntu Merge-o-Matic	7.32.0-1ubuntu1	10 years ago
71	* Merge from Debian, Remaining changes: * Merge from Debian, Remaining changes: - Drop dependencies not in main: + Build-Depends: Drop stunnel4 and libssh2-1-dev. + Drop libssh2-1-dev from binary package Depends. - Add new libcurl3-udeb package. - Add new curl-udeb package.	Oussama Bounaim	7.31.0-2ubuntu1	10 years ago
70	* Resynchronize on Debian. Remaining changes: * Resynchronize on Debian. Remaining changes: - Drop dependencies not in main: + Build-Depends: Drop stunnel4 and libssh2-1-dev. + Drop libssh2-1-dev from binary package Depends. - Add new libcurl3-udeb package. - Add new curl-udeb package.	Sebastien Bacher	7.31.0-1ubuntu1	10 years ago
69	* Resynchronize on Debian. Remaining changes: * Resynchronize on Debian. Remaining changes: - Drop dependencies not in main: + Build-Depends: Drop stunnel4 and libssh2-1-dev. + Drop libssh2-1-dev from binary package Depends. - Add new libcurl3-udeb package. - Add new curl-udeb package. * Add warning to debian/patches/series.	Sebastien Bacher	7.30.0-1ubuntu1	10 years ago
68	* SECURITY UPDATE: Incorrect cookie domain handling in tailm... * SECURITY UPDATE: Incorrect cookie domain handling in tailmatch() - debian/patches/09_curl-tailmatch.patch: enforce strict subdomain match when sending cookies. Patch from YAMADA Yasuharu. - http://curl.haxx.se/curl-tailmatch.patch - CVE-2013-1944	Seth Arnold	7.29.0-1ubuntu3	11 years ago
67	debian/patches/08_lp1124508.patch: Backport fix for upstream... debian/patches/08_lp1124508.patch: Backport fix for upstream bug 1194, segfault in curl_multi_cleanup() when multi->closure_handle is NULL. (LP: #1124508)	Barry Warsaw	7.29.0-1ubuntu2	11 years ago
66	* Resynchronise with Debian. Remaining changes: * Resynchronise with Debian. Remaining changes: - Drop dependencies not in main: + Build-Depends: Drop stunnel4 and libssh2-1-dev. + Drop libssh2-1-dev from binary package Depends. - Add new libcurl3-udeb package. - Add new curl-udeb package. * Add warning to debian/patches/series.	Marc Deslauriers	7.29.0-1ubuntu1	11 years ago
65	* Resynchronise with Debian. Remaining changes: * Resynchronise with Debian. Remaining changes: - Drop dependencies not in main: + Build-Depends: Drop stunnel4 and libssh2-1-dev. + Drop libssh2-1-dev from binary package Depends. - Add new libcurl3-udeb package. - Add new curl-udeb package.	Colin Watson	7.28.0-3ubuntu1	11 years ago
64	Turn debian/libcurl3-udeb.install and debian/libcurl3-udeb.l... Turn debian/libcurl3-udeb.install and debian/libcurl3-udeb.links back into symlinks.	Colin Watson	7.28.0-2ubuntu2	11 years ago
63	* Resynchronise with Debian. Remaining changes: * Resynchronise with Debian. Remaining changes: - Drop dependencies not in main: + Build-Depends: Drop stunnel4 and libssh2-1-dev. + Drop libssh2-1-dev from binary package Depends. - Add new libcurl3-udeb package. - Add new curl-udeb package.	Colin Watson	7.28.0-2ubuntu1	11 years ago
62	* Resynchronise with Debian. Remaining changes: * Resynchronise with Debian. Remaining changes: - Drop dependencies not in main: + Build-Depends: Drop stunnel4 and libssh2-1-dev. + Drop libssh2-1-dev from binary package Depends. - Add new libcurl3-udeb package. - Add new curl-udeb package.	Colin Watson	7.27.0-1ubuntu1	11 years ago
61	* Resynchronise with Debian. Remaining changes: * Resynchronise with Debian. Remaining changes: - Drop dependencies not in main: + Build-Depends: Drop stunnel4 and libssh2-1-dev. + Drop libssh2-1-dev from binary package Depends. - Add new libcurl3-udeb package. - Add new curl-udeb package. * Adjust udeb configure flags handling to something easier to merge in future.	Colin Watson	7.26.0-1ubuntu1	11 years ago

Older »