Accepted ktorrent 1.2-0ubuntu5.1 (source)

Ubuntu Installer archive at ubuntu.com
Tue Mar 13 00:55:10 GMT 2007


Accepted:
 OK: ktorrent_1.2-0ubuntu5.1.dsc
     -> Component: main Section: net
 OK: ktorrent_1.2-0ubuntu5.1.diff.gz

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Sun, 11 Mar 2007 10:45:03 -0500
Source: ktorrent
Binary: ktorrent
Architecture: source
Version: 1.2-0ubuntu5.1
Distribution: dapper-security
Urgency: low
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Richard A. Johnson <nixternal at ubuntu.com>
Description: 
 ktorrent   - BitTorrent client for KDE
Changes: 
 ktorrent (1.2-0ubuntu5.1) dapper-security; urgency=low
 .
   * SECURITY UPDATE: allows .. in file name which could cause
     the user to overwrite files (if ran as root, system files).
     DoS or heap corruption possible if idx is to small (negative)
     or to large.
   * Add 'debian/patches/kubuntu_02_security_fix.diff': backported
     upstream fix
   * References
     http://websvn.kde.org/?view=rev&revision=640661
     CVE-2007-1384 CVE-2007-1385
Files: 
 b33cc9609741465d1acfed4c3e86c87e 785 net optional ktorrent_1.2-0ubuntu5.1.dsc
 79df81a2daf88ed095153f8b664f7da4 43785 net optional ktorrent_1.2-0ubuntu5.1.diff.gz
Original-Maintainer: Joel Johnson <mrjoel at lixil.net>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFF9dK+H/9LqRcGPm0RAp4QAJwI1ebg2ULydTfqLtTI9J8qFDRemwCfQnBo
PT/HJHm1OYEXb9PpCSYcqyU=
=p9BD
-----END PGP SIGNATURE-----





More information about the dapper-changes mailing list