lp:ubuntu/intrepid-security/curl
- Get this branch:
- bzr branch lp:ubuntu/intrepid-security/curl
Branch merges
Branch information
Recent revisions
- 34. By Kees Cook
-
* SECURITY UPDATE: SSL cert hostname checking bypass with NULL byte.
- add debian/patches/ cert-null- cn: backported upstream changes.
- CVE-2009-2417 - 33. By Marc Deslauriers
-
* SECURITY UPDATE: add fix for CVE-2009-0037 back in
- debian/patches/ security_ CVE-2009- 0037.patch: updated patch to add missing
section to lib/easy.c
- CVE-2009-0037 - 32. By Marc Deslauriers
-
* SECURITY UPDATE: Local file exposure via redirect
- debian/patches/ security_ CVE-2009- 0037.patch: add logic to lib/url.c and
lib/urldata.h to limit what protocols curl will automatically follow via a
redirect. By default, it now follows all protocols except FILE and SCP.
- CVE-2009-0037 - 28. By Michael Vogt
-
* Merge from debian unstable, remaining changes:
- Drop the stunnel build dependency.
- Drop the build-dependency on libdb4.5-dev
- Add build-dependency on openssh-server
- Drop libssh2-1-dev from libcurl4-openssl- dev's Depends. - 26. By Matthias Klose
-
* Merge from Debian; remaining changes:
- Drop the stunnel build dependency.
- Drop the build-dependency on libdb4.5-dev, add build-dependency on
openssh-server.
- Drop libssh2-1-dev from libcurl4-openssl- dev's Depends.
Branch metadata
- Branch format:
- Branch format 7
- Repository format:
- Bazaar repository format 2a (needs bzr 1.16 or later)
- Stacked on:
- lp:ubuntu/karmic/curl