lp:ubuntu/hardy-updates/amarok

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #318555: Amarok - integer overflows and unchecked allocation vulnerabilities

Undecided

Confirmed

Link a bug report

Related blueprints

68. By Harald Sitter on 2009-01-19

* SECURITY UPDATE: integer overflows allow remote attackers to execute
  arbitrary code via an Audible Audio (.aa) file (LP: #318555)
  - debian/patches/security_audible_tags.diff fix integer overflow while
    reading audible aa file tags. Based on upstream patch.
  - http://websvn.kde.org/?view=rev&revision=908415
  - http://www.trapkit.de/advisories/TKADV2009-002.txt
  - CVE-2009-0135
  - CVE-2009-0136

67. By Jonathan Thomas on 2008-08-14

* SECURITY UPDATE: Insecure creation of magnatune temp files
* Added kubuntu_99_security_mangatune_file_creator.diff patching
  amarok/src/magnatunebrowser/magnatunebrowser.cpp and
  amarok/src/magnatunebrowser/magnatunebrowser.h. Creates temp files
  correctly. From upstream.
* References
  http://secunia.com/advisories/31418/
  http://www.securityfocus.com/bid/30662
  http://websvn.kde.org/?view=rev&revision=846626
  http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494765
  CVE-2008-3699

66. By Jonathan Aquilina on 2008-04-15

Added kdebase-kio-plugins as a recommened package

65. By Harald Sitter on 2008-04-12

[ Daniel Hahler]
* debian/patches/kubuntu_08_add_lastfm_recommended_radio.diff:
  Add lastfm recommended radio station (LP: #103227)
* debian/patches/kubuntu_09_audio_mimetypes.diff:
  - Add mimetypes audio/flac and audio/ogg (LP: #201291)

[ Harald Sitter ]
* Unbreak manual media device configuration by enhancing
  kubuntu_08_luks_device_detection.diff (LP: #207704)

64. By Jonathan Riddell on 2008-04-10

Upstream patch release

63. By Harald Sitter on 2008-04-09

New upstream release

62. By Harald Sitter on 2008-03-18

Added kubuntu_08_luks_device_detection.diff to ajust Amarok's
media device detection to properly work with kdebase's
LUKS patch kubuntu_9913_kiomedialuks.diff) (LP: #186384)

61. By Jonathan Riddell on 2008-03-13

Update install-mp3 to correctly error when something goes wrong

60. By Sarah Kowalik on 2008-03-12

[ Sven Boden ]
* Fix for bug "187406: Amarok install-mp3 fails silently" (LP #187406)

[ Sarah Hobbs ]
* Sponsored upload. (Closes LP: #187406)
* Reworked patch to avoid setting absolute paths (eg /usr/bin/kdesu)

59. By Guillaume Martres on 2007-12-31

Fix install-mp3 installation path (LP: #179624)