Sync libgdata 0.11.1-1 (main) from Debian experimental (main)

Bug #956601 reported by Steve Beattie
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
libgdata (Ubuntu)
Fix Released
Wishlist
Unassigned

Bug Description

Please sync libgdata 0.11.1-1 (main) from Debian experimental (main) to
fix CVE-2012-1177. Both the upstream release and debian package are
bugfix only releases. I have confirmed that it builds successfully in
a precise/amd64 schroot.

Changelog entries since current precise version 0.11.0-1:

libgdata (0.11.1-1) experimental; urgency=low

  * New upstream development release.
  * Bump (Build-)Depends on libsoup(-gnome)2.4-dev to (>= 2.37.91).
  * Rewrite and simplify debian/copyright using the machine-readable copyright
    format 1.0.
  * Bump Standards-Version to 3.9.3.

 -- Michael Biebl <email address hidden> Thu, 15 Mar 2012 00:16:33 +0100

Note that we already satisfy in precise the Build-Depends on
libsoup2.4-dev:

  https://launchpad.net/ubuntu/+source/libsoup2.4/2.37.91-1

The upstream changelog is at

  http://ftp.gnome.org/pub/GNOME/sources/libgdata/0.11/libgdata-0.11.1.news

and contains the following:

Major changes:
* Add a --with-ca-certs configure argument to allow specifying the
  system CA cert file — an important security fix to allow
  libgdata to verify all TLS certificates before accepting them

Bugs fixed:
* Bug 667577 — fix introspection for srcdir != builddir builds
* Bug 668365 — libgdata 0.10.x link error because of exported symbols that don't exist
* Bug 671535 — Security issue in libgdata

Updated translations:
* be (Kasia Bondarava)
* te (Praveen Illa)
* uk (Korostil Daniel)

Steve Beattie (sbeattie)
Changed in libgdata (Ubuntu):
importance: Undecided → Wishlist
Revision history for this message
Marc Deslauriers (mdeslaur) wrote :

This is in precise now.

Changed in libgdata (Ubuntu):
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.