lp:ubuntu/lucid/kdelibs

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #284915: Khelpcenter missing docs list

Low

Confirmed

Link a bug report

Related blueprints

167. By Jonathan Riddell on 2010-01-29

Remove kubuntu_97_kde4_menu_applications.diff, obsolete and can
cause breakage

166. By Scott Kitterman on 2010-01-09

* Merge from Debian Testing. Remaining Ubuntu changes:
  - make sure control and control.in are in sync
  - --with-distribution="Kubuntu (`lsb_release --codename --short`)
    $(DEB_VERSION)"
  - binary-install/kdelibs-data installs aboutkde-kubuntu.png.uu and
    cr*-device-system.png.uu
  - don't build-dep on libgamin-dev, libfam-dev
  - stop kdelibs4-dev depending on gamin/fam
  - don't install .svgz icons, docs or all_languages in kdelibs-data.install
  - rosetta support in rules common-install-prehook-impl:: [and
    common-post-build-arch:: ?] and include debian/kubuntu-desktop-i18n/
  - build-dep on: gettext-kde, kdesdk-scripts, lsb-release, base-files, sudo
  - cdbs build-dep 0.4.41ubuntu2
  - kdelibs4-dev depends on gettext-kde, kdesdk-scripts
  - copy debian/icons over
  - Make kdelibs4c2a depend on launchpad-integration, sudo. Recommends on
    xdg-user-dirs
  - Remove 19_debianize_useragent.diff (changed to
    kubuntu_19_debianize_useragent.diff) s/Debian/Kubuntu
  - remove kdelibs4c2a depends on menu-xdg
  - include kubuntu_01_kdepot.diff and kde.pot in debian/patches/common
  - use a local copy of kde.mk without the common-install-prehook-impl::
    rule; edit debian-qt-kde.mk to include debian/cdbs/kde.mk
  - build with --with-sudo-kdesu-backend and build-dep on sudo and make
    kdelibs4c2a depend on sudo
  - kdelibs-data.install : Add nzb mimetype
  - Make kdelibs4-dev replace more recent kdelibs4c2a for overlapping files
  - remove /usr/bin/preparetips, arts files and ksvntopng from
    kdelibs4-dev.install
  - Drop the package kdelibs4-doc completely. It contained API documentation
    which is now obsolete, but still available via api.kde.org.
  - make sure control and control.in are in sync
  - in debian/rule remove .pot files outside .po directory
  - 97_automake_cleanup.diff becomes kubuntu_97_automake_cleanup.diff
* Remove libarts1-dev from build-depends and kdelibs4-dev depends from control.in
* Drop debian/patches/kubuntu_62_flash_installer.diff (obsolete and broken)
* Drop debian/patches/kubuntu_gcc4.4_ftbfs.diff, now included from Debian as
  debian/patches/65_gcc4.4_ftbfs.diff
* Drop debian/patches/security_05_CVE-2009-0689.diff, now included from
  Debian as debian/patches/CVE-2009-0689.diff

165. By Jamie Strandboge on 2009-12-07

* SECURITY UPDATE: fix buffer overflow when converting string to float
  - debian/patches/security_05_CVE-2009-0689.diff: adjust Kmax to handle
    large field numbers in kjs/dtoa.cpp
  - CVE-2009-0689

164. By Jonathan Riddell on 2009-12-07

* SECURITY UPDATE: uncontrolled XMLHTTPRequest vulnerability
 - Ark and KMail performs insufficient validation which leads to
   specially crafted archive files, using unknown MIME types, to be
   rendered using a KHTML instance, this can trigger uncontrolled
   XMLHTTPRequests to remote sites
 - Add debian/patches/security_05_XMLHttpRequest_vulnerability.diff,
   restricts xmlhttprequest to http protocols only
 - http://www.kde.org/info/security/advisory-20091027-1.txt
 - oCert: #2009-015 http://www.ocert.org/advisories/ocert-2009-015.html
 - CVE n/a

163. By Jonathan Riddell on 2009-11-10

Update kubuntu_38_no_generate_kdepot.diff to generate correct kde.pot

162. By Jonathan Riddell on 2009-11-09

* Merge with Debian, remaining changes
 - make sure control and control.in are in sync
 - --with-distribution="Kubuntu (`lsb_release --codename --short`) $(DEB_VERSION)"
 - binary-install/kdelibs-data installs aboutkde-kubuntu.png.uu and cr*-device-system.png.uu
 - don't build-dep on libgamin-dev, libfam-dev
 - stop kdelibs4-dev depending on gamin/fam
 - don't install .svgz icons, docs or all_languages in kdelibs-data.install
 - rosetta support in rules common-install-prehook-impl:: [and common-post-build-arch:: ?] and include debian/kubuntu-desktop-i18n/
 - build-dep on: gettext-kde, kdesdk-scripts, lsb-release, base-files, sudo
 - cdbs build-dep 0.4.41ubuntu2
 - kdelibs4-dev depends on gettext-kde, kdesdk-scripts
 - copy debian/icons over
 - Make kdelibs4c2a depend on launchpad-integration, sudo. Recommends on xdg-user-dirs
 - Remove 19_debianize_useragent.diff (changed to kubuntu_19_debianize_useragent.diff) s/Debian/Kubuntu
 - remove kdelibs4c2a depends on menu-xdg
 - include kubuntu_01_kdepot.diff and kde.pot in debian/patches/common
 - use a local copy of kde.mk without the common-install-prehook-impl:: rule; edit debian-qt-kde.mk to include debian/cdbs/kde.mk
 - build with --with-sudo-kdesu-backend and build-dep on sudo and make kdelibs4c2a depend on sudo
 - kdelibs-data.install : Add nzb mimetype
 - Make kdelibs4-dev replace more recent kdelibs4c2a for overlapping files
 - remove /usr/bin/preparetips, arts files and ksvntopng from kdelibs4-dev.install
 - Drop the package kdelibs4-doc completely. It contained API documentation which is now obsolete, but still available via api.kde.org.
 - make sure control and control.in are in sync
 - in debian/rule remove .pot files outside .po directory
 - 97_automake_cleanup.diff becomes kubuntu_97_automake_cleanup.diff

161. By Harald Sitter on 2009-09-19

Move the pot removal to common-binary-predeb-indep so it does not
cause mid-build break, also prevent it from removing pot files that reside
in ./debian/, to prevent dh_install from failing (LP: #432378)

160. By Harald Sitter on 2009-09-18

Nuke all the pots outside the po directory. qt-messages.pot is getting
merged into the main kdelibs.pot but the fancy importer app thinks that
it is a good idea to import all pots to be found anywhere within the
source tree. Thus it also imports qt-messages.pot which is then duplicated
with kdelibs.pot (also imported obviously). qt-messages.pot should also be
removed from LP (LP: #432378)

159. By Jamie Strandboge on 2009-09-15

* SECURITY UPDATE: fix vulnerability with NULL byte in Subject Alternate
  Names field of X.509 certificates
  - debian/patches/security_04_CVE-2009-2702.diff: verify that the
    QString length of the SAN is not shorter than the ASN1 length
  - CVE-2009-2702
* kubuntu_glibc_2.8_ftbfs.diff: fix FTBFS when using gcc 4.4 or higher
* Following patches forward ported from http://www.ubuntu.com/usn/USN-822-1
  (by Marc Deslauriers)
* SECURITY UPDATE: arbitrary code execution via JavaScript garbage
  collector allocation failures
  - debian/patches/security_01_CVE-2009-1687.diff: make sure we don't
    overflow before doing the realloc in kjs/collector.cpp.
  - CVE-2009-1687
* SECURITY UPDATE: arbitrary code execution via use-after-free
  - debian/patches/security_02_CVE-2009-1690.diff: use head.get() in
    khtml/html/htmlparser.cpp, and backport khtml/html/{AlwaysInline,
    htmlparser,Platform,RefPtr}.h.
  - CVE-2009-1690
* SECURITY UPDATE: arbitrary code execution via CSS attr function call
  with a large numerical argument
  - debian/patches/security_03_CVE-2009-1698.diff: add extra checks to
    khtml/css/cssparser.cpp and implement CSSPrimitiveValue::CSS_ATTR in
    khtml/css/css_valueimpl.cpp.
  - CVE-2009-1698

158. By Scott Kitterman on 2009-07-27

Add build-dep on pkg-kde-tools so we have /usr/bin/extract* and the
package will build