Sync libgdata 0.11.1-1 (main) from Debian experimental (main)
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
libgdata (Ubuntu) |
Fix Released
|
Wishlist
|
Unassigned |
Bug Description
Please sync libgdata 0.11.1-1 (main) from Debian experimental (main) to
fix CVE-2012-1177. Both the upstream release and debian package are
bugfix only releases. I have confirmed that it builds successfully in
a precise/amd64 schroot.
Changelog entries since current precise version 0.11.0-1:
libgdata (0.11.1-1) experimental; urgency=low
* New upstream development release.
* Bump (Build-)Depends on libsoup(
* Rewrite and simplify debian/copyright using the machine-readable copyright
format 1.0.
* Bump Standards-Version to 3.9.3.
-- Michael Biebl <email address hidden> Thu, 15 Mar 2012 00:16:33 +0100
Note that we already satisfy in precise the Build-Depends on
libsoup2.4-dev:
https:/
The upstream changelog is at
http://
and contains the following:
Major changes:
* Add a --with-ca-certs configure argument to allow specifying the
system CA cert file — an important security fix to allow
libgdata to verify all TLS certificates before accepting them
Bugs fixed:
* Bug 667577 — fix introspection for srcdir != builddir builds
* Bug 668365 — libgdata 0.10.x link error because of exported symbols that don't exist
* Bug 671535 — Security issue in libgdata
Updated translations:
* be (Kasia Bondarava)
* te (Praveen Illa)
* uk (Korostil Daniel)
Changed in libgdata (Ubuntu): | |
importance: | Undecided → Wishlist |
This is in precise now.