lp:ubuntu/edgy-updates/kvirc

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

7. By Rich Johnson on 2007-07-02

* SECURITY UPDATE: parseIrcUrl() do not properly sanitize parts of the URI
  when building the command for KVIrc's internet script system. This can
  be exploited to inject and execute commands for the KVIrc script system
  (including the "run" command, which can be leveraged to execute shell
  commands) by e.g. tricking a user into opening a specially crafted
  "irc://" or similar URI.
* Add debian/patches/09_parseIrcUrl_security_fix.patch: properly sanitizes
  URI strings, as done in upstream SVN. (Fixes LP: #123037)
* References:
  - http://www.kvirc.net/?id=news&story=2007.06.29.22.00.1.story&dir=latest
  - http://secunia.com/secunia_research/2007-56/advisory/
  - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2951
  - https://svn.kvirc.de/kvirc/changeset/630/#file3 (fix to kvi_ircurl.cpp)

6. By Brandon Holtsclaw on 2006-08-12

Merge from debian unstable ( again ).

5. By Brandon Holtsclaw on 2006-08-02

* Merge from debian unstable.
* removed Bashisms from debain/rules

4. By Brandon Holtsclaw on 2006-05-13

added dh_iconcache.

3. By Robin Verduijn <email address hidden> on 2005-11-21

* Rebuild for current dependencies.
* Update FSF address.
* Bump Standards-Version to 3.6.2.0 (no changes).
* Fix invalid characters in manpage.

2. By Robin Verduijn <email address hidden> on 2004-12-14

* Change Recommends on xmms to a Suggests.
* Rebuild against KDE 3.3.1

1. By Robin Verduijn <email address hidden> on 2002-04-16

* #138169: The problem in bug #138169 is due to a bug in libtool. See
  bug #98342 for details. KVirc still doesn't build correctly even with
  the latest libtool (1.4.2-4). When this gets properly fixed I'll update
  kvirc's build dependency on libtool. In the mean time, I've applied a
  patch from that bug report which fixes it for me.
  (Closes: #138169)
* Redid debian/rules somewhat; no longer try to build differently
  depending on how KDE is installed. If the preferred configuration breaks
  for some platform, I'd rather know about it.
* Don't link versus qt-mt anymore.
* GNU config automated update: config.sub (20010907 to 20020307),
  config.guess (20010904 to 20020320)