diff -u kadu-0.6.0.2/debian/changelog kadu-0.6.0.2/debian/changelog --- kadu-0.6.0.2/debian/changelog +++ kadu-0.6.0.2/debian/changelog @@ -1,3 +1,15 @@ +kadu (0.6.0.2-2ubuntu0.1) intrepid-security; urgency=low + + * SECURITY UPDATE: remote DoS via a contact description with a large length + - Fixed in libgadu 1:1.8.0+r592-1ubuntu0.1, so using libgadu package + instead of built-in libgadu + - changed debian/rules to add DEB_CONFIGURE_EXTRA_FLAGS + - changed debian/control to add build dependency on libgadu-dev. + Also remove conflict with libgadu-dev for kadu-dev + - CVE-2008-4776 + + -- Fabrice Coutadeur Fri, 14 Nov 2008 05:44:13 +0000 + kadu (0.6.0.2-2) unstable; urgency=low [ Patryk Cisek ] diff -u kadu-0.6.0.2/debian/rules kadu-0.6.0.2/debian/rules --- kadu-0.6.0.2/debian/rules +++ kadu-0.6.0.2/debian/rules @@ -9,6 +9,8 @@ DEB_COMPRESS_EXCLUDE := AUTHORS THANKS LICENSE about-changes-tab.txt DEB_BUILD_ARCH_OS := $(shell dpkg-architecture -qDEB_BUILD_ARCH_OS) +DEB_CONFIGURE_EXTRA_FLAGS := --with-existing-libgadu + makebuilddir/kadu:: sh debian/extract.sh $(CURDIR) $(DEB_BUILDDIR) find . -name '*.o' -delete diff -u kadu-0.6.0.2/debian/control kadu-0.6.0.2/debian/control --- kadu-0.6.0.2/debian/control +++ kadu-0.6.0.2/debian/control @@ -1,8 +1,9 @@ Source: kadu Section: net Priority: optional -Maintainer: Patryk Cisek -Build-Depends: cdbs (>= 0.4.23-1.1), autotools-dev, debhelper (>= 5), patchutils (>= 0.2.25), sharutils, bzip2, libqt3-mt-dev, libao-dev, libsndfile1-dev (>= 1.0), kdelibs4-dev, libcurl3-gnutls-dev, libaudio-dev, libgtk1.2-dev, libxosd-dev, audacious-dev, libxtst-dev +Maintainer: MOTU Developers +XSBC-Original-Maintainer: Patryk Cisek +Build-Depends: cdbs (>= 0.4.23-1.1), autotools-dev, debhelper (>= 5), patchutils (>= 0.2.25), sharutils, bzip2, libqt3-mt-dev, libao-dev, libsndfile1-dev (>= 1.0), kdelibs4-dev, libcurl3-gnutls-dev, libaudio-dev, libgtk1.2-dev, libxosd-dev, audacious-dev, libxtst-dev, libgadu-dev Standards-Version: 3.8.0 Homepage: http://kadu.net @@ -33,7 +34,6 @@ Package: kadu-dev Architecture: all Recommends: kadu -Conflicts: libgadu-dev Section: libdevel Description: Development files for Kadu Gadu-Gadu is a Windows instant messenger, very popular in Poland.