lp:ubuntu/karmic-security/kvirc
- Get this branch:
- bzr branch lp:ubuntu/karmic-security/kvirc
Branch merges
Branch information
Recent revisions
- 7. By Andreas Wenning
-
* SECURITY UPDATE: Two security issues have been discovered in the DCC
protocol support code of kvirc, a KDE-based next generation IRC client,
which allow the overwriting of local files through directory traversal
and the execution of arbitrary code through a format string attack.
- kubuntu_01_CVE- 2010-2451_ CVE-2010- 2451_DCC_ fix.patch
- Patch based on upstream SVN revision 4317.
- CVE-2010-2451, CVE-2010-2452:
- http://cve.mitre. org/cgi- bin/cvename. cgi?name= CVE-2010- 2451
- http://cve.mitre. org/cgi- bin/cvename. cgi?name= CVE-2010- 2452
- LP: #601702 - 6. By Kai Wasserbäch <email address hidden>
-
The »Dream Team« release.
[ Raúl Sánchez Siles ]
* Fix "kvirc website, upstream 3.4.2" New upstream release. (Closes: #526886)
* rules:
- Using Debian pkg-kde-tools kde4.mk
- Added debhelper.mk
- Added patchsys-quilt.mk
* Patches:
- Removed kubuntu_02_fix_ cmakelist_ icons.patch. Included upstream.
- Removed 10_gcc4.3_fix.patch. Included upstream.
- Removed 17_awaybackaction.patch. Included upstream
- Removed 20_fixman.patch. Fixed upstream.
* Copyright:
- Fixed pointer to GPLv2 in copyright file.
- More detailed and updated copyright file.
* Menu:
- Fixed menu file syntax error.
- Correctly point to 32x32 icon.
- Reworked 05_xpmicon.patch to only include 32x32 icons.
* Bump Standards-Version to 3.8.1. No changes needed.
* Added DEB_DH_ALWAYS_ EXCLUDE
* Fixed installing files per package paths.
* Setting back maintainer to Debian KDE Extras Team.
* Moved desktop file from kvirc-data to kvirc package.
* Disabled coexistence with kvirc3.
* Moving manpage from kvirc-data to kvirc package. kvirc replaces kvirc-data
* Fix "kvirc has circular Depends on kvirc-data". Now kvirc-data suggests
kvirc (Closes: #525037)
* Pointing upstream license path to Debian copyright file.
* Using shared-mime-info to add filetypes to system mime database.[ Kai Wasserbäch ]
* Synced to upstream's SVN r3240:
- Including patch from Debian to fix the xterm issue. (Closes: #530311)
- Fixes »kvirc doesn't obey LC_MESSAGES environment variable«.
(Closes: #426838)
- Fixes »kvirc: embedding perl needs PERL_SYS_INIT3()« for real (upstream
changeset <https://svn.kvirc. de/kvirc/ changeset/ 3023>). (Was bug:
#495064)
See README.Debian for a quick note on this.
- Includes OFTC/irc.debian.org in the standard server list.
- Refreshed patches.
* debian/control:
- Added zlib1g-dev, libssl-dev, libx11-dev and libxrender-dev to
Build-Depends. Three fix a FTBS, libssl-dev adds SSL support.
- Added myself to Uploaders on Raúl's invitation. Thanks!
- Changed Vcs-* fields to point to the hg repository, which is where the
package development takes place today.
- Added ${misc:Depends} to kvirc.
* debian/rules: Added »-DWITHOUT_PYTHON= YES«, module wasn't built anyway so
far, so we can safe the buildds the tests.
* debian/TODO.Debian: Added.
* debian/source. lintian- overrides: Added.
- »kvirc source: debhelper-but-no- misc-depends« added for
kvirc-{dev,data} .
* debian/watch: Added (using ftp.kvirc.de instead of primary FTP server,
because the primary is down atm). (Issue found by lintian.)
* debian/patches: Added short explanations to the patches (thanks lintian).
* debian/kvirc-data. links: Raúl noticed, that
<file:///usr/ share/kvirc/ 4.0/license/ COPYING> didn't end up in the kvirc
package and the intended link to <file:///usr/share/ doc/kvirc/ copyright>
wasn't set. Added an entry to address that. - 5. By Raúl Sánchez Siles <email address hidden>
-
* try to start command via irc:// handler (Closes: #503401).
Added 31_r1997-irchandler- exploit-bug503401.patch
* Urgency medium due to potential security bug fix. - 4. By Raúl Sánchez Siles <email address hidden>
-
* New upstream release.
* New version (3.4) available. (Closes: #473454)
* Adopt package after pinging several times maintainer without answer. See
bug #473454.
* Patches:
+ Removed patches 05_Kvi_Avatar_ Resize and 06_resizeavatar .patch. Applied
upstream.
+ Added patches for build system preparation: 01_am_maintainer_mode and
98_buildprep.
+ Added patch 20_fixman to fix a typo on man package.
+ Refreshed patch 09_plugin_dir to modify admin/acinclude.m4.in.
+ Reworked 02_rpath to deal with rpath removal on build.
* Dependencies:
+ Tighting depends for kvirc and kvirc-data.
+ Addind automake1.10 to build-deps.
* Bump policy to 3.7.3: Updated menu file to menu policy 1.4.
* Changed 3.2 references in rules,kvirc-data installation scripts to 3.4.
* Maintainer scripts:
+ Removing empty: kvirc-dev and kvirc.prerm.
+ Removing not needed: kvirc.postrm, kvirc.postinst.
* Removing link to manpage for kvi_make_scriptdist. sh no longer existing.
* Fixing installation paths for some files in kvirc and kvirc-data, taking
those paths from a patch.
* Adding some more new .desktop files.
* Adding Homepage field in control file. Removing from package description.
* Updated copyright file with information about repackaging and upstream
copyright holders.
* Adding Vcs-Svn and Vcs-Browser control fields. - 3. By Robin Verduijn <email address hidden>
-
* Move plugins and modules from /usr/share into /usr/lib. (Closes: #392393)
Thanks, Steinar H. Gunderson.
- When checking if a directory is the kvirc global directory, don't
check for the modules, as they have moved; check for the help
directory instead (which the comments also suggest).
- Make a local hack in src/kvirc/kernel/ kvi_app_ fs.cpp to look for
modules and plugins in /usr/lib instead of /usr/share. - 2. By Robin Verduijn <email address hidden>
-
* Change Recommends on xmms to a Suggests.
* Rebuild against KDE 3.3.1 - 1. By Robin Verduijn <email address hidden>
-
* #138169: The problem in bug #138169 is due to a bug in libtool. See
bug #98342 for details. KVirc still doesn't build correctly even with
the latest libtool (1.4.2-4). When this gets properly fixed I'll update
kvirc's build dependency on libtool. In the mean time, I've applied a
patch from that bug report which fixes it for me.
(Closes: #138169)
* Redid debian/rules somewhat; no longer try to build differently
depending on how KDE is installed. If the preferred configuration breaks
for some platform, I'd rather know about it.
* Don't link versus qt-mt anymore.
* GNU config automated update: config.sub (20010907 to 20020307),
config.guess (20010904 to 20020320)
Branch metadata
- Branch format:
- Branch format 7
- Repository format:
- Bazaar repository format 2a (needs bzr 1.16 or later)
- Stacked on:
- lp:ubuntu/natty/kvirc