Branches for Feisty

Author: Rich Johnson
Revision Date: 2007-03-11 10:37:17 UTC

* SECURITY UPDATE: allows .. in file name which could cause
  the user to overwrite files (if ran as root, system files).
  DoS or heap corruption possible if idx is to small (negative)
  or to large.
* Add 'debian/patches/kubuntu_01_security_fix.diff': backported
  upstream fix
* References
  http://websvn.kde.org/?view=rev&revision=640661
  CVE-2007-1384 CVE-2007-1385

Author: John Dong
Revision Date: 2008-02-05 04:26:50 UTC

Automated backport upload; no source changes.

Author: John Dong
Revision Date: 2007-04-28 17:46:44 UTC

* SRU: Cherrypick SVN data loss and crash related bugs. (Closes LP Bugs:
  109184, 104705, 110480, 99741, 95018, and duplicates)
   - debian/patches/kubuntu_04_svn632043_auth_crash.patch: Fixes crashes
     reported in authentication monitor
   - debian/patches/kubuntu_05_svn634519_chunkdownload_crash.patch: Fix
     SIGABORT crashes when loading a torrent. (KDE Bug 141758)
   - debian/patches/kubuntu_06_svn634843_retransmit_timeout.patch:
     Fixed bug with handling timeouts, which caused retransmits
     not to be sent.
   - debian/patches/kubuntu_07_current_chunks_crash.patch: Fix crash caused
     by current_chunks being corrupt (KDE bug 142777)
   - debian/patches/kubuntu_08_largefile_crash.patch: fix dataloss associated
     with >= 4GB files
   - debian/patches/kubuntu_09_self_DHT_cpuspin.patch: Ignore DHT replies
     from self; reported to cause CPU pegging on certain NAT configurations
   - debian/patches/kubuntu_10_multifile_4GB.patch: Fix bug with multifile
     torrents containing >4GB files being truncated.
   - debian/patches/kubuntu_11_DHT_safetycheck.patch: Perform more validation
     on incoming DHT packets to prevent malformed DHT packets from crashing
     KTorrent.
   - debian/patches/kubuntu_12_saveIndexFile_exceptions.patch: Fix bug with
     saveIndexFile exceptions not being caught, resulting in crashes.

Author: Kees Cook
Revision Date: 2007-05-17 11:58:15 UTC

* SECURITY UPDATE: directory traversal with crafted torrents.
* kubuntu_01_security_fix.diff: updated based on upstream fixes.
* References
  http://bugs.kde.org/show_bug.cgi?id=143637
  CVE-2007-1799

Author: Kees Cook
Revision Date: 2007-05-17 11:58:15 UTC

* SECURITY UPDATE: directory traversal with crafted torrents.
* kubuntu_01_security_fix.diff: updated based on upstream fixes.
* References
  http://bugs.kde.org/show_bug.cgi?id=143637
  CVE-2007-1799