Branches for Jaunty

Author: Steve Langasek
Revision Date: 2009-04-05 08:44:43 UTC

debian/patches/90_ia64_boilerplate.diff: don't try to use special
hand assembly for printing the boilerplate message on ia64, since it
causes a build failure due to undefined symbols.

Author: Jonathan Thomas
Revision Date: 2009-04-23 08:29:55 UTC

Add kubuntu_10_disable_ft_lcdfilter.diff from suse to fix font corruption
on vertically-hinted LCD screens (LP: #334657)

Author: Marc Deslauriers
Revision Date: 2009-10-23 10:41:00 UTC

* SECURITY UPDATE: remote code execution via document with a SVGPathList
  data structure containing a negative index.
  - debian/patches/security_CVE-2009-0945.diff: make sure index is valid
    in src/3rdparty/webkit/WebCore/svg/SVGList.h.
  - CVE-2009-0945
* SECURITY UPDATE: denial of service or arbitrary code execution via
  JavaScript garbage collector allocation failures.
  - debian/patches/security_CVE-2009-1687.diff: make sure numBlocks is
    valid in src/3rdparty/webkit/JavaScriptCore/runtime/Collector.cpp.
  - CVE-2009-1687
* SECURITY UPDATE: denial of service or arbitrary code execution via
  use-after-free.
  - debian/patches/security_CVE-2009-1690.diff: Fix incorrect handling of
    head element in src/3rdparty/webkit/WebCore/html/HTMLParser.{h,cpp}.
  - CVE-2009-1690
* SECURITY UPDATE: denial of service or arbitrary code execution via
  attr function call with a large numerical argument.
  - debian/patches/security_CVE-2009-1698.diff: fix attr handling in
    src/3rdparty/webkit/WebCore/css/{CSSParser,CSSPrimitiveValue}.cpp.
  - CVE-2009-1698
* SECURITY UPDATE: arbitrary code execution via remote loading of
  local java applets.
  - debian/patches/security_CVE-2009-1712.diff: Use same rule for loading
    java applets as webkit does for images in
    src/3rdparty/webkit/WebCore/html/HTMLAppletElement.cpp,
    src/3rdparty/webkit/WebCore/loader/FrameLoader.cpp.
  - CVE-2009-1712
* SECURITY UPDATE: denial of service or arbitrary code execution via
  numeric character references.
  - debian/patches/security_CVE-2009-1725.diff: increase size of
    checkBuffer() in src/3rdparty/webkit/WebCore/html/HTMLTokenizer.cpp.
  - CVE-2009-1725

Author: Marc Deslauriers
Revision Date: 2009-10-23 10:41:00 UTC

* SECURITY UPDATE: remote code execution via document with a SVGPathList
  data structure containing a negative index.
  - debian/patches/security_CVE-2009-0945.diff: make sure index is valid
    in src/3rdparty/webkit/WebCore/svg/SVGList.h.
  - CVE-2009-0945
* SECURITY UPDATE: denial of service or arbitrary code execution via
  JavaScript garbage collector allocation failures.
  - debian/patches/security_CVE-2009-1687.diff: make sure numBlocks is
    valid in src/3rdparty/webkit/JavaScriptCore/runtime/Collector.cpp.
  - CVE-2009-1687
* SECURITY UPDATE: denial of service or arbitrary code execution via
  use-after-free.
  - debian/patches/security_CVE-2009-1690.diff: Fix incorrect handling of
    head element in src/3rdparty/webkit/WebCore/html/HTMLParser.{h,cpp}.
  - CVE-2009-1690
* SECURITY UPDATE: denial of service or arbitrary code execution via
  attr function call with a large numerical argument.
  - debian/patches/security_CVE-2009-1698.diff: fix attr handling in
    src/3rdparty/webkit/WebCore/css/{CSSParser,CSSPrimitiveValue}.cpp.
  - CVE-2009-1698
* SECURITY UPDATE: arbitrary code execution via remote loading of
  local java applets.
  - debian/patches/security_CVE-2009-1712.diff: Use same rule for loading
    java applets as webkit does for images in
    src/3rdparty/webkit/WebCore/html/HTMLAppletElement.cpp,
    src/3rdparty/webkit/WebCore/loader/FrameLoader.cpp.
  - CVE-2009-1712
* SECURITY UPDATE: denial of service or arbitrary code execution via
  numeric character references.
  - debian/patches/security_CVE-2009-1725.diff: increase size of
    checkBuffer() in src/3rdparty/webkit/WebCore/html/HTMLTokenizer.cpp.
  - CVE-2009-1725