[ubuntu/hardy-security] xchat_2.8.4-0ubuntu7.1_powerpc_translations.tar.gz, xchat_2.8.4-0ubuntu7.1_amd64_translations.tar.gz, xchat_2.8.4-0ubuntu7.1_hppa_translations.tar.gz, xchat_2.8.4-0ubuntu7.1_lpia_translations.tar.gz, xchat_2.8.4-0ubuntu7.1_sparc_translations.tar.gz (delayed), xchat_2.8.4-0ubuntu7.1_i386_translations.tar.gz, xchat_2.8.4-0ubuntu7.1_ia64_translations.tar.gz, xchat 2.8.4-0ubuntu7.1 (Accepted)

[Ubuntu Installer]

xchat (2.8.4-0ubuntu7.1) hardy-security; urgency=low

  * SECURITY UPDATE (LP: #322196)
  * debian/patches/64_CVE-2009-0315.dpatch:
    - Fix untrusted search path vulnerability in the Python module
      in xchat allows local users to execute arbitrary code via
      a Trojan horse Python file in the current working directory
    - CVE-2009-0315

Date: Tue, 01 Jun 2010 21:27:28 +0200
Changed-By: Artur Rona <ari-tczew at tlen.pl>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/hardy/+source/xchat/2.8.4-0ubuntu7.1
-------------- next part --------------
Format: 1.7
Date: Tue, 01 Jun 2010 21:27:28 +0200
Source: xchat
Binary: xchat xchat-common
Architecture: source
Version: 2.8.4-0ubuntu7.1
Distribution: hardy-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Artur Rona <ari-tczew at tlen.pl>
Description: 
 xchat      - IRC client for X similar to AmIRC
 xchat-common - Common files for X-Chat
Launchpad-Bugs-Fixed: 322196
Changes: 
 xchat (2.8.4-0ubuntu7.1) hardy-security; urgency=low
 .
   * SECURITY UPDATE (LP: #322196)
   * debian/patches/64_CVE-2009-0315.dpatch:
     - Fix untrusted search path vulnerability in the Python module
       in xchat allows local users to execute arbitrary code via
       a Trojan horse Python file in the current working directory
     - CVE-2009-0315
Files: 
 3127b6df9810f0d239bf7ff85111fc5a 970 net optional xchat_2.8.4-0ubuntu7.1.dsc
 019786ad43dcde1723b6b13521fa0439 28726 net optional xchat_2.8.4-0ubuntu7.1.diff.gz
Original-Maintainer: Davide Puricelli (evo) <evo at debian.org>