lp:ubuntu/hardy-security/mono

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

78. By Marc Deslauriers on 2009-08-19

* SECURITY UPDATE: Multiple cross-site scripting vulnerabilities in
  the ASP.net class libraries (LP: #282952)
  - debian/patches/security_CVE-2008-3422.dpatch: properly encode and
    escape values in mcs/class/System.Web/System.Web.UI.HtmlControls/
    {HtmlControl,HtmlForm,HtmlInputButton,HtmlInputRadioButton,
    HtmlSelect}.cs, and add tests to mcs/class/System.Web/Test/
    System.Web.UI.HtmlControls/{HtmlImageTest,HtmlInputButtonTest,
    HtmlInputRadioButtonTest,HtmlSelectTest}.cs
  - CVE-2008-3422
* SECURITY UPDATE: CRLF injection vulnerability in Sys.Web (LP: #282952)
  - debian/patches/security_CVE-2008-3906.dpatch: encode headers in
    mcs/class/System.Web/{System.Web/HttpResponseHeader.cs,
    System.Web.Configuration/HttpRuntimeConfig.cs}
  - CVE-2008-3906
* SECURITY UPDATE: XMLDsig HMAC-based signatures spoofing and
  authentication bypass (LP: #409920)
  - debian/patches/security_CVE-2009-0217.dpatch: Fix HMACOutputLength to
    match XMLDSIG erratum and add stricter checks.
  - CVE-2009-0217

77. By Sebastian Dröge on 2008-03-22

* debian/rules:
  + unexport CPPFLAGS because configure relies on them being unset
    to pass custom CPPFLAGS to boehm's configure.

76. By Sebastian Dröge on 2008-03-21

* debian/rules:
  + Put CFLAGS in "" to make the shell happy and fix the build.
  + Set default CFLAGS to -O2 -g.

75. By Sebastian Dröge on 2008-03-21

* Sync with Debian:
  + Alternatives handling is in Debian now, for all other
    remaining changes see changelog of 1.2.6+dfsg-5ubuntu1.

74. By Laurent Bigonville on 2008-01-13

Correctly install alternatives for mono-1.0-devel package (LP: #182509)

73. By Emilio Pozuelo Monfort on 2008-01-09

* Merge with Debian, remaining Ubuntu changes:
  - debian/control:
    + Updated Maintainer Field.
    + Adjust Replaces for Ubuntu versions.
    + Added lpia to architectures. Sparc has been added in Debian.
    + Build-depend on libgda3-dev instead of libgda2-dev, since
      libgda2 is in universe.
  - debian/patches/dont_check_proc_self_exe.dpatch:
    + Comment out code that checks /proc/self/exe so that
      mono will function on the Live CD.
  - debian/rules:
    + Symlink doc directories to avoid duplicate files, and remove the doc
      directories on upgrade for the now symlinked doc directories.
  - debian/shlibs.local:
    + Remove libgda2, as it's in universe.

72. By Emilio Pozuelo Monfort on 2007-12-22

* Merge with Debian, remaining Ubuntu changes:
  - debian/control:
    + Updated Maintainer Field.
    + Adjust Replaces for Ubuntu versions.
    + Added sparc and lpia to architectures.
    + Build-depend on libgda3-dev instead of libgda2-dev.
  - debian/patches/dont_check_proc_self_exe.dpatch:
    + Comment out code that checks /proc/self/exe so that
      mono will function on the Live CD.
  - debian/rules:
    + Symlink doc directories to avoid duplicate files, and remove the doc
      directories on upgrade for the now symlinked doc directories.
  - debian/shlibs.local:
    + Remove libgda3-dev build dependency, as it's in universe.

71. By Sebastian Dröge on 2007-11-19

[ Emilio Pozuelo Monfort ]
* Merge with Debian, remaining Ubuntu changes:
  - debian/control:
    + Updated Maintainer Field.
    + Adjust Replaces for Ubuntu versions.
    + Added sparc and lpia to architectures.
    + Build-depend on libgda3-dev instead of libgda2-dev.
  - debian/patches/dont_check_proc_self_exe.dpatch:
    + Comment out code that checks /proc/self/exe so that
      mono will function on the Live CD.
  - debian/rules:
    + Symlink doc directories to avoid duplicate files, and remove the doc
      directories on upgrade for the now symlinked doc directories.

[ Sebastian Dröge ]
* debian/control,
  debian/shlibs.local:
  + Remove libgda3-dev build dependency, this only works with gda2 anyway.
    Put the gda2 shlibs into shlibs.local and suggest them for
    libmono-system-data[12].0-cil instead of depending on it.

70. By Matthias Klose on 2007-10-05

Explicitely remove the doc directories on upgrade for the now symlinked
doc directories.

69. By Matthias Klose on 2007-10-04

Symlink doc directories to avoid duplicate files.