lp:ubuntu/jaunty-security/curl

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

38. By Kees Cook on 2009-08-13

* SECURITY UPDATE: SSL cert hostname checking bypass with NULL byte.
  - add debian/patches/cert-null-cn.patch: backported upstream changes.
  - CVE-2009-2417

37. By Marc Deslauriers on 2009-03-03

* SECURITY UPDATE: add fix for CVE-2009-0037 back in
  - debian/patches/security_CVE-2009-0037.patch: updated patch to add missing
    section to lib/easy.c
  - CVE-2009-0037

36. By Jamie Strandboge on 2009-03-03

Revert last patch due to https regression (LP: #337501)

35. By Marc Deslauriers on 2009-03-03

* SECURITY UPDATE: Local file exposure via redirect
  - debian/patches/security_CVE-2009-0037.patch: add logic to lib/url.c and
    lib/urldata.h to limit what protocols curl will automatically follow via a
    redirect. By default, it now follows all protocols except FILE and SCP.
  - CVE-2009-0037

34. By Bhavani Shankar on 2009-01-06

* Merge from debian unstable, remaining changes: LP: #314279
  - Drop the stunnel build dependency.
  - Drop the build-dependency on libdb4.5-dev
  - Add build-dependency on openssh-server
  - Call automake-1.9 with --add-missing --copy --force.
  - Drop libssh2-1-dev from libcurl4-openssl-dev's Depends.

33. By Michael Vogt on 2008-11-10

* drop change:
  - "Added Recommends: on ca-certificate for curl package", libcurl3
    has a depends on ca-certificates already

32. By Michael Vogt on 2008-11-10

* Merge from debian unstable, remaining changes:
  - Drop the stunnel build dependency.
  - Drop the build-dependency on libdb4.5-dev
  - Add build-dependency on openssh-server
  - Drop libssh2-1-dev from libcurl4-openssl-dev's Depends.
  - Call automake-1.9 with --add-missing --copy --force
  - Added Recommends: on ca-certificate for curl package

31. By Nick Ellery on 2008-10-10

Added Recommends: on ca-certificate for curl package (LP: #152781).

30. By Steve Kowalik on 2008-10-11

Call automake-1.9 with --add-missing --copy --force. (LP: #281561)

29. By Steve Kowalik on 2008-10-11

No-change rebuild for libgnutls13 -> libgnutls26 transistion.