~ubuntu-branches/ubuntu/edgy/kvirc/edgy-security : changes

~ubuntu-branches/ubuntu/edgy/kvirc/edgy-security » Changes from revision 7

From Revision 7

Rev	Summary	Authors	Tags	Date
7	* SECURITY UPDATE: parseIrcUrl() do not properly sanitize pa... * SECURITY UPDATE: parseIrcUrl() do not properly sanitize parts of the URI when building the command for KVIrc's internet script system. This can be exploited to inject and execute commands for the KVIrc script system (including the "run" command, which can be leveraged to execute shell commands) by e.g. tricking a user into opening a specially crafted "irc://" or similar URI. * Add debian/patches/09_parseIrcUrl_security_fix.patch: properly sanitizes URI strings, as done in upstream SVN. (Fixes LP: #123037) * References: - http://www.kvirc.net/?id=news&story=2007.06.29.22.00.1.story&dir=latest - http://secunia.com/secunia_research/2007-56/advisory/ - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2951 - https://svn.kvirc.de/kvirc/changeset/630/#file3 (fix to kvi_ircurl.cpp)	Richard A. Johnson	2:3.2.4-3ubuntu1.1	16 years ago
6	Merge from debian unstable ( again ). Merge from debian unstable ( again ).	Brandon Holtsclaw	2:3.2.4-3ubuntu1	17 years ago
5	* Merge from debian unstable. * Merge from debian unstable. * removed Bashisms from debain/rules	Brandon Holtsclaw	2:3.2.4-2ubuntu1	17 years ago
4	added dh_iconcache. added dh_iconcache.	Brandon Holtsclaw	2:3.2.0-5ubuntu1	18 years ago
3	* Rebuild for current dependencies. * Rebuild for current dependencies. * Update FSF address. * Bump Standards-Version to 3.6.2.0 (no changes). * Fix invalid characters in manpage.	Robin Verduijn	2:3.2.0-5	18 years ago
2	* Change Recommends on xmms to a Suggests. * Change Recommends on xmms to a Suggests. * Rebuild against KDE 3.3.1	Robin Verduijn	2:2.1.3.1-2	19 years ago
1	* #138169: The problem in bug #138169 is due to a bug in lib... * #138169: The problem in bug #138169 is due to a bug in libtool. See bug #98342 for details. KVirc still doesn't build correctly even with the latest libtool (1.4.2-4). When this gets properly fixed I'll update kvirc's build dependency on libtool. In the mean time, I've applied a patch from that bug report which fixes it for me. (Closes: #138169) * Redid debian/rules somewhat; no longer try to build differently depending on how KDE is installed. If the preferred configuration breaks for some platform, I'd rather know about it. * Don't link versus qt-mt anymore. * GNU config automated update: config.sub (20010907 to 20020307), config.guess (20010904 to 20020320)	Robin Verduijn	1:2.1.2-11	22 years ago