lp:ubuntu/hardy-security/tk8.4

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

15. By Marc Deslauriers on 2008-11-04

* SECURITY UPDATE: buffer overflow and potential arbitrary code execution
  via crafted GIF image (LP: #191204)
  - debian/patches/cve-2008-0553.diff fix from upstream for
    generic/tkImgGIF.c to validate initialCodeSize
  - http://tktoolkit.cvs.sourceforge.net/tktoolkit/tk/generic/tkImgGIF.c?r1=1.40&r2=1.41
  - CVE-2008-0553

14. By Steve Langasek on 2008-02-25

* debian/rules: quote CFLAGS when passing to the shell, not when
  assigning to a make variable; otherwise the quotes end up as part of
  the variable and many things go wrong, leading to a build failure.
  LP: #194564.
* Modify Maintainer value to match the DebianMaintainerField
  specification.

13. By Sergei Golovan <email address hidden> on 2007-10-19

* Removed TK_INC_DIR from tkConfig.sh and tcl.m4.
* Added -fno-unit-at-a-time option to match tcl8.4 build options.
* Moved architecture independent files from /usr/lib/tk8.4 to
  /usr/share/tcltk/tk8.4. To keep backward compatibility tkConfig.sh is
  linked into /usr/lib/tk8.4 directory.
* Fixed bug with update-alternatives in prerm script.
* Removed conflicts with tcl and providing tcl-dev packages from
  debian/control to prepare binary packages for default tcl and tcl-dev.
* Added Homepage field to debian/control.
* Fixed segfault in case if only scalable fonts are available and the best
  scored font is infeasible (closes: #444546).
* Rearranged conflicts of tk8.4-doc package because of planned adoption of
  real tk-doc package.

12. By Jamie Strandboge on 2007-10-09

* SECURITY UPDATE: buffer overflow and potential arbitrary code execution
  via crafted GIF image
* fix for generic/tkImgGIF.c to properly handle files with smaller later
  frames
* References
  CVE-2007-5137
  LP: #151008
* Modify Maintainer value to match the DebianMaintainerField
  specification.

11. By LaMont Jones on 2007-10-04

Trigger rebuild for hppa

10. By Chris Waters <email address hidden> on 2007-07-25

* New maintainer Tcl/Tk Debian Packagers
  <email address hidden>.

[ Sergei Golovan ]
* New upstream release.
* Removed obsolete package xlibs-dev and replaced x-dev by x11proto-core-dev |
  x-dev in build dependencies (closes: #390783).
* Use quilt for patch management.
* Fixed sections inside manual pages.
* Added get-orig-source target to debian/rules.
* Added headers from compat directory to tk8.4-dev package (closes: #426348).
* Added list of copyright holders to debian/copyright.
[ Chris Waters ]
* Added Anselm Lingnau to uploaders.

9. By Matthias Klose on 2007-06-01

New upstream version.

8. By Matthias Klose on 2007-01-07

Regenerate the control file. Ubuntu #78272.

7. By Matthias Klose on 2007-01-05

New upstream version.

6. By Chris Waters <email address hidden> on 2006-01-27

New upstream release.