lp://staging/ubuntu/utopic-security/patch

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

15. By Tyler Hicks on 2015-06-22

* SECURITY UPDATE: Denial of service via crafted patch
  - debian/patches/CVE-2014-9637.patch: Detect and exit upon memory
    allocation failures
  - CVE-2014-9637
* SECURITY UPDATE: Directory traversal via crafted patch
  - debian/patches/CVE-2015-1196.patch: Don't allow symlink targets to point
    outside of the current directory
  - CVE-2015-1196
* SECURITY UPDATE: Directory traversal via crafted patch
  - debian/patches/CVE-2015-1395.patch: Check the validity of both filenames
    during a rename or copy
  - CVE-2015-1395
* SECURITY UPDATE: Directory traversal via crafted patch
  - debian/patches/CVE-2015-1396.patch: Don't allow symlink targets to point
    outside of the current directory. This patch corrects the incomplete fix
    for CVE-2015-1196.
  - CVE-2015-1396
* debian/rules: Fix FTBFS caused by ed check. Based on Debian change
  suggested by Simon McVittie.
* debian/control: Add automake1.11 as a build-depends since some of the
  patches adjust Makefile.am files

14. By Laszlo Boszormenyi on 2014-04-14

* Add watch file.

[ James Hunt <email address hidden> ]
* Fix segfault due to incorrect usage (closes: #742470).

13. By Laszlo Boszormenyi on 2013-11-04

* New maintainer (closes: #728664).
* Add manual last change date (closes: #674052).
* Update Standards-Version to 3.9.5 .

12. By Christoph Berg on 2013-06-30

* Call 'ed' without a path. Closes: #714423.
* Update copyright for GPL v3. Closes: #664640.

11. By Christoph Berg on 2012-01-25

* 3.0 (quilt).
* Fix Suggests broken in the last upload.

10. By Riku Voipio on 2012-01-16

* NMU with maintainer approval
* Set patch as Multi-Arch: foreign to allow use when cross-compiling

9. By Christoph Berg on 2011-05-20

Use dh_auto_test. Closes: #627196

8. By Christoph Berg on 2011-02-06

* New upstream version.
  + Improved CR stripping heuristics. Closes: #484539
  + Fixes: creates files and directories instead of asking for the file
    location. Closes: #568248
* Remove lenny compatibility options -U --unified-reject-files and
 --global-reject-file.

7. By Christoph Berg on 2010-09-22

Enable -m short option for --merge as documented in help and manpage.
Closes: #597305.

6. By Christoph Berg on 2009-12-02

* Update watch file.
* Section: vcs.
* Suggests: diffutils-doc instead of diff-doc, thanks Christoph Anton
  Mitterer for spotting. Closes: #558974.