lp://qastaging/ubuntu/lucid-security/mapserver

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

20. By Alan Boudreault on 2011-07-12

* SECURITY UPDATE: SQL Injection and buffer overflows (LP: #809133)
  - debian/patches/03_wfs_sql_injection.dpatch: Fix possible WFS
    SQL injection and buffer overflows in OGC Filter Encoding
    support. [http://trac.osgeo.org/mapserver/ticket/3874]
    [http://trac.osgeo.org/mapserver/ticket/3903]
  - CVE-2011-2703, CVE-2011-2704

19. By Alan Boudreault on 2010-07-09

* SECURITY UPDATE: Buffer overflow in msTmpFile function (LP: #603593)
  - debian/patches/01_mstmpfile.dpatch: Fix the buffer overflow.
  [http://trac.osgeo.org/mapserver/ticket/3484]
* SECURITY UPDATE: Insecure CGI command-line debug args (LP: #603593)
  - debian/patches/02_cl_debug_args.dpatch: Disable insecure mapserv
    CGI command-line debug args.
  [http://trac.osgeo.org/mapserver/ticket/3485]

18. By Chuck Short on 2010-03-02

Rebuild for PHP 5.3.

17. By Francesco Paolo Lovergine on 2010-01-26

[ Alan Boudreault ]
* New upstream release, with a few important bug fixes.
* Modified ruby mapscript package to use ruby 1.9.1 instead of 1.9.0.
  (closes: #565831)

[ Francesco Paolo Lovergine ]
* Removed Fabio Tranchitella from Uploaders.

16. By Ilya Barygin on 2010-02-15

No-change rebuild for libming0 -> libming1 transition on armel.

15. By Ilya Barygin on 2010-02-13

No-change rebuild for libming0 -> libming1 transition.

14. By Francesco Paolo Lovergine on 2009-12-24

* New upstream release, reissued after some last minute changes. This is
  the current 5.6.0 upstream version.
* Added a lintian override-file for mismatched
  possible-gpl-code-linked-with-openssl error.
* Policy bumped to 3.8.3 (no changes).
* Added missing ${misc:Depends} item in each control stanza.
* Added a README.source for documenting dpatch use.

13. By Alan Boudreault on 2009-07-24

New upstream release, with a few fixes.
Proper fix for CVE-2009-0840.
(closes: #535340, #532446)

12. By Francesco Paolo Lovergine on 2009-03-27

* New upstream release, with security fixes.
* Now using libproj-dev build-dep for new proj package style.
* Removed Paul Wise among Uploaders after his request. Also revised list
  to reflect only recent (less than 24 months) contributors.
* Added libogdi3.2-dev build-dependency.

11. By Alessio Treglia on 2009-03-10

No change rebuild to build with Python 2.6.