[Bug 956601] [NEW] Sync libgdata 0.11.1-1 (main) from Debian experimental (main)

[Launchpad Bug Tracker]

You have been subscribed to a public bug by Steve Beattie (sbeattie):

Please sync libgdata 0.11.1-1 (main) from Debian experimental (main) to
fix CVE-2012-1177. Both the upstream release and debian package are
bugfix only releases. I have confirmed that it builds successfully in
a precise/amd64 schroot.

Changelog entries since current precise version 0.11.0-1:

libgdata (0.11.1-1) experimental; urgency=low

  * New upstream development release.
  * Bump (Build-)Depends on libsoup(-gnome)2.4-dev to (>= 2.37.91).
  * Rewrite and simplify debian/copyright using the machine-readable copyright
    format 1.0.
  * Bump Standards-Version to 3.9.3.

 -- Michael Biebl <biebl at debian.org>  Thu, 15 Mar 2012 00:16:33 +0100

Note that we already satisfy in precise the Build-Depends on
libsoup2.4-dev:

  https://launchpad.net/ubuntu/+source/libsoup2.4/2.37.91-1

The upstream changelog is at

http://ftp.gnome.org/pub/GNOME/sources/libgdata/0.11/libgdata-0.11.1.news

and contains the following:

Major changes:
* Add a --with-ca-certs configure argument to allow specifying the
  system CA cert file — an important security fix to allow
  libgdata to verify all TLS certificates before accepting them

Bugs fixed:
* Bug 667577 — fix introspection for srcdir != builddir builds
* Bug 668365 — libgdata 0.10.x link error because of exported symbols that don't exist
* Bug 671535 — Security issue in libgdata

Updated translations:
* be (Kasia Bondarava)
* te (Praveen Illa)
* uk (Korostil Daniel)

** Affects: libgdata (Ubuntu)
     Importance: Wishlist
         Status: New

-- 
Sync libgdata 0.11.1-1 (main) from Debian experimental (main)
https://bugs.launchpad.net/bugs/956601
You received this bug notification because you are a member of Ubuntu Sponsors Team, which is subscribed to the bug report.