~ubuntu-branches/ubuntu/dapper/kvirc/dapper-updates

• Changes
• Files

~ubuntu-branches/ubuntu/dapper/kvirc/dapper-updates » Changes from revision 5

From Revision 5

expand all

collapse all

Rev		Summary	Authors	Tags	Date	Diff	Files
5		* SECURITY UPDATE: parseIrcUrl() do not properly sanitize pa... * SECURITY UPDATE: parseIrcUrl() do not properly sanitize parts of the URI   when building the command for KVIrc's internet script system. This can   be exploited to inject and execute commands for the KVIrc script system   (including the "run" command, which can be leveraged to execute shell   commands) by e.g. tricking a user into opening a specially crafted   "irc://" or similar URI. * Add debian/patches/09_parseIrcUrl_security_fix.patch: propery sanitizes   URI strings, as done in upstream SVN. (Fixes LP: #123037) * References:   - http://www.kvirc.net/?id=news&story=2007.06.29.22.00.1.story&dir=latest   - http://secunia.com/secunia_research/2007-56/advisory/   - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2951   - https://svn.kvirc.de/kvirc/changeset/630/#file3 (fix to kvi_ircurl.cpp)	Richard A. Johnson	2:3.2.0-5ubuntu1.1	16 years ago
4		added dh_iconcache. added dh_iconcache.	Brandon Holtsclaw	2:3.2.0-5ubuntu1	18 years ago
3		* Rebuild for current dependencies. * Rebuild for current dependencies. * Update FSF address. * Bump Standards-Version to 3.6.2.0 (no changes). * Fix invalid characters in manpage.	Robin Verduijn	2:3.2.0-5	18 years ago
2		* Change Recommends on xmms to a Suggests. * Change Recommends on xmms to a Suggests. * Rebuild against KDE 3.3.1	Robin Verduijn	2:2.1.3.1-2	19 years ago
1		* #138169: The problem in bug #138169 is due to a bug in lib... * #138169: The problem in bug #138169 is due to a bug in libtool. See   bug #98342 for details. KVirc still doesn't build correctly even with   the latest libtool (1.4.2-4). When this gets properly fixed I'll update   kvirc's build dependency on libtool. In the mean time, I've applied a   patch from that bug report which fixes it for me.   (Closes: #138169) * Redid debian/rules somewhat; no longer try to build differently   depending on how KDE is installed. If the preferred configuration breaks   for some platform, I'd rather know about it. * Don't link versus qt-mt anymore. * GNU config automated update: config.sub (20010907 to 20020307),   config.guess (20010904 to 20020320)	Robin Verduijn	1:2.1.2-11	22 years ago

Loggerhead is a web-based interface for Breezy
Version: 2.0.1